Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145672.roa
File: AS145672.roa (raw, json)
Hash identifier: voFSa2vKTlqEJNhYu02zM5n2YavROAYufT679ByFaT4=
Subject key identifier: DF:3F:2F:9F:C8:9C:BF:74:62:15:45:2B:C3:AB:7C:8B:6D:B0:B9:1C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0D2DBDB0E3FBC38434A171A34D4EA4FFB454614D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145672.roa
Signing time: Tue 26 May 2026 06:30:42 +0000
ROA not before: Tue 26 May 2026 06:25:42 +0000
ROA not after: Tue 25 May 2027 06:30:42 +0000
asID: 145672
IP address blocks: 240a:abce::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:2d:bd:b0:e3:fb:c3:84:34:a1:71:a3:4d:4e:a4:ff:b4:54:61:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:25:42 2026 GMT
Not After : May 25 06:30:42 2027 GMT
Subject: CN=DF3F2F9FC89CBF746215452BC3AB7C8B6DB0B91C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b7:17:a5:74:29:4a:8d:6d:02:5d:cf:9b:79:
08:97:29:51:47:fa:fd:3d:f4:e6:11:87:7c:c3:25:
3a:b0:22:97:b3:24:aa:c7:45:91:01:59:2f:f7:41:
cc:53:30:8f:ad:f3:c4:93:53:b0:cf:5e:6f:c6:2f:
8d:ca:b0:ce:03:4e:bc:9e:45:7f:74:53:87:62:44:
aa:91:9a:14:17:55:fc:77:e0:48:e5:18:58:68:e4:
9f:50:57:45:fe:0b:a7:4e:35:09:6b:55:07:8e:f4:
78:49:8b:81:ab:ed:d0:1e:6c:60:d0:48:e6:8a:7e:
4e:0e:3f:a8:e7:59:c8:f9:16:6a:8e:cc:d7:fa:a3:
6d:39:a2:c6:55:f9:b4:93:5d:0c:a6:cb:fe:e9:2e:
f7:28:84:f6:8c:c8:6b:fc:6d:0c:9e:34:b9:ac:dd:
80:da:3c:f3:bb:e3:27:cd:42:bb:a4:62:dc:79:72:
fa:05:a1:e3:20:2c:eb:88:c0:bd:1c:94:09:c7:72:
3d:c5:f4:5f:37:3d:80:70:ae:9f:2f:b2:67:7c:27:
c3:18:f6:d1:d3:3f:12:e5:f7:03:e2:0d:2d:38:c8:
cd:e5:0c:69:5c:81:8e:f3:aa:58:cb:2d:54:15:4d:
e4:7c:97:c0:be:9f:fa:51:05:b3:84:34:e7:d7:42:
91:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:3F:2F:9F:C8:9C:BF:74:62:15:45:2B:C3:AB:7C:8B:6D:B0:B9:1C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145672.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:abce::/32
Signature Algorithm: sha256WithRSAEncryption
57:61:21:b1:ae:4f:db:be:02:0e:4d:66:a0:3d:10:3f:af:b8:
87:be:ec:8b:d7:23:cc:65:fe:4b:61:9a:37:68:80:f4:44:94:
11:58:7d:3a:ed:70:04:65:88:15:d6:42:da:67:fe:41:7b:29:
32:97:d0:7c:90:f9:bd:cd:f8:b2:21:7f:b8:0b:f1:e1:bd:7b:
52:24:8c:32:8c:58:d0:8b:1c:f2:8f:ee:32:58:77:e0:68:cb:
a3:d4:27:80:0a:94:c5:03:f4:45:9e:43:c6:31:87:d0:f5:70:
cc:72:35:cf:57:7f:3f:dc:a8:0c:11:bc:d3:4b:5f:92:99:0f:
69:78:64:e8:3a:fd:d5:2b:d1:a6:9c:2c:9c:45:e6:23:1a:9e:
f4:fe:be:f3:d2:bf:92:1f:1b:3c:30:f1:a3:1e:46:8c:83:63:
55:40:a0:9e:70:eb:2b:00:bb:89:5b:91:11:24:23:72:7b:f8:
87:b6:bb:02:38:56:80:67:fb:18:1f:07:ee:36:06:60:aa:f6:
b5:84:f2:19:13:5f:96:83:bd:b0:ed:8e:b0:87:ff:f3:84:5d:
0e:8e:06:d9:37:14:f8:b0:69:cc:ea:4f:e1:d6:c0:c8:b8:59:
55:7b:7a:50:85:6b:33:0e:89:2a:1e:2d:0d:6f:36:3a:11:22:
3d:12:93:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:19 2026 by rpki-client