Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145670.roa
File: AS145670.roa (raw, json)
Hash identifier: CMOofXCPPzb6jcvU7dHJxyO/bST1pyo0YM2Am6BLo7g=
Subject key identifier: 33:DB:17:EE:8C:40:EE:75:EB:18:45:73:7E:01:32:4E:0A:C5:00:3C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7EBCF0B21FC6A641560CC0AD6ACF0530AD7B854C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145670.roa
Signing time: Mon 25 May 2026 01:20:32 +0000
ROA not before: Mon 25 May 2026 01:15:32 +0000
ROA not after: Mon 24 May 2027 01:20:32 +0000
asID: 145670
IP address blocks: 240a:abcc::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:bc:f0:b2:1f:c6:a6:41:56:0c:c0:ad:6a:cf:05:30:ad:7b:85:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:15:32 2026 GMT
Not After : May 24 01:20:32 2027 GMT
Subject: CN=33DB17EE8C40EE75EB1845737E01324E0AC5003C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:36:7a:81:c0:7e:8d:90:0c:c2:e7:27:fe:35:
8a:ea:ac:32:2d:85:53:8b:21:44:50:89:2f:73:6f:
ab:18:c5:5d:98:ed:6c:33:d0:15:60:7b:ac:89:43:
47:2a:b9:30:30:39:ba:46:3a:0e:52:48:9d:89:d1:
ff:95:3e:5a:f0:e4:4f:3a:1c:02:47:11:b3:35:b4:
ff:23:73:23:f4:7b:fc:ff:81:01:0b:48:86:60:49:
7d:59:ad:aa:2b:cc:e3:e6:31:02:2d:15:73:b9:c5:
24:0a:15:1e:ca:80:34:61:78:8a:2c:19:6c:3e:dc:
0c:8b:e3:86:af:db:c2:ef:1f:33:b3:90:8c:38:84:
b0:86:c0:17:1f:35:16:d6:b9:1e:23:a5:70:70:37:
d9:d7:1b:0f:de:ae:ac:f1:0b:be:c6:cf:61:2a:17:
69:40:42:17:7c:21:fe:77:08:4a:2c:da:ba:35:72:
c7:59:3b:29:20:6c:68:44:d3:01:63:df:62:dd:47:
fb:1b:1b:84:90:07:52:20:31:e2:e9:dd:cb:00:00:
b1:59:2b:4c:e9:84:31:21:94:1a:6a:b8:1b:c7:db:
8d:a2:d1:79:4e:52:af:b9:88:ef:2b:5f:12:d8:0d:
14:46:24:bb:53:76:7d:59:b0:0c:a0:0d:bc:0c:5b:
92:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:DB:17:EE:8C:40:EE:75:EB:18:45:73:7E:01:32:4E:0A:C5:00:3C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145670.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:abcc::/32
Signature Algorithm: sha256WithRSAEncryption
3e:95:09:ad:d8:f3:d2:0b:e7:44:26:68:6b:62:95:a4:ea:ad:
0a:2d:07:56:c4:04:12:c3:27:95:a8:8c:46:94:b5:2c:39:2e:
34:fa:64:3b:88:ca:a4:dd:45:5b:63:1a:be:5c:d3:70:c5:ad:
0c:55:82:42:4a:42:f8:51:d2:96:b2:03:aa:d7:12:07:bf:e6:
be:d7:a6:2e:f4:7c:38:70:fe:ce:c7:08:d6:76:10:07:c7:43:
00:d3:da:66:c1:e7:d6:90:d3:cd:7e:01:27:59:f7:a5:04:a2:
88:a0:b0:01:e6:a2:36:59:25:80:22:09:33:3c:69:2e:68:26:
10:ba:f2:36:aa:19:ec:d7:bb:e3:cb:a5:35:d2:35:4e:e4:a5:
45:f0:17:d3:e0:63:aa:43:ec:4d:32:0f:c0:0b:55:f9:c7:71:
75:55:bb:40:45:7b:3a:55:27:5f:27:b7:0b:8b:12:75:2f:77:
24:8e:f3:cb:24:7b:04:25:aa:c8:36:78:57:13:b5:b4:a8:43:
9b:9a:28:4c:03:89:80:96:e7:c4:1f:71:e4:e6:93:58:d8:9e:
94:e4:cf:85:77:8f:8f:84:48:2d:1b:b1:7a:9f:f2:ba:5d:00:
6b:6e:ef:2a:6f:e4:46:05:d0:e0:7a:48:cd:57:07:c2:c0:a5:
9c:1d:34:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:05 2026 by rpki-client