Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145679.roa
File: AS145679.roa (raw, json)
Hash identifier: iGKPcoWVsQbuKoUEApm2BbgC13M32Xbem3ywZTxlEfU=
Subject key identifier: C4:F1:DC:34:71:50:5D:1B:58:2F:7F:E8:DD:A0:6F:B4:37:22:6A:97
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 57B0116EF5E6C8F2CD0599651786D53C8E8A87CE
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145679.roa
Signing time: Fri 22 May 2026 04:26:53 +0000
ROA not before: Fri 22 May 2026 04:21:53 +0000
ROA not after: Fri 21 May 2027 04:26:53 +0000
asID: 145679
IP address blocks: 240a:abd5::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:b0:11:6e:f5:e6:c8:f2:cd:05:99:65:17:86:d5:3c:8e:8a:87:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:21:53 2026 GMT
Not After : May 21 04:26:53 2027 GMT
Subject: CN=C4F1DC3471505D1B582F7FE8DDA06FB437226A97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b7:63:24:a3:e9:e6:63:89:79:63:fa:59:43:
b0:30:81:1b:c4:7b:ba:ab:83:b7:ff:1f:a8:60:04:
90:4f:f8:eb:04:25:45:13:fd:a4:0d:4a:b6:88:5b:
be:8f:87:6d:a2:7a:3a:b4:2e:28:37:2c:25:80:45:
ec:eb:b2:0f:53:61:f2:d3:2a:24:5c:ff:59:c9:05:
2d:76:bc:8e:4d:34:48:43:5d:19:de:e4:e3:3f:8c:
63:22:45:8d:32:a8:7e:6b:71:3e:5c:49:e1:c4:a3:
a5:a6:57:01:b0:41:c3:e2:f3:c6:08:80:d9:fe:5c:
cd:2d:be:29:c3:f6:16:e5:d3:ee:45:fb:44:af:c3:
bc:07:fb:fe:d7:ec:0e:c3:8f:86:9a:3d:5f:84:d6:
0d:98:ea:72:d6:b1:5a:64:05:d3:2c:05:ee:7d:12:
94:bf:af:39:15:2e:bc:f3:0f:6f:db:b2:df:36:5f:
f5:48:53:d2:a8:a5:1c:5c:b0:92:47:73:24:e1:fd:
a4:86:c2:9e:41:bb:23:a9:51:2e:f4:2b:0e:a1:63:
06:f5:42:1b:8f:ff:60:e7:c3:4f:87:fb:c8:a0:5d:
03:05:71:92:4c:fa:29:b7:98:6f:e5:80:c4:e6:e3:
c4:da:d1:0d:29:4b:f2:9a:44:2a:69:97:4d:3c:35:
25:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:F1:DC:34:71:50:5D:1B:58:2F:7F:E8:DD:A0:6F:B4:37:22:6A:97
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145679.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:abd5::/32
Signature Algorithm: sha256WithRSAEncryption
7e:ce:5f:da:24:77:d1:b1:8e:30:40:20:0e:2b:29:89:7b:dc:
74:8f:80:46:17:c0:f1:31:3d:97:56:5e:a1:a7:c2:28:59:9b:
4d:a6:9a:54:9c:af:b4:6e:13:eb:55:68:d9:58:54:35:88:77:
c9:30:29:26:ee:26:24:8f:cf:31:79:9e:7e:a2:cd:f5:79:6a:
d4:18:78:45:b7:42:4c:27:84:50:da:b4:fe:12:d4:39:05:8a:
0b:d7:11:f5:21:0d:5c:b4:62:50:f0:0d:e5:16:53:6f:f1:bc:
65:6b:10:fb:c4:d4:e8:b7:56:bd:c2:f9:36:db:21:df:f7:4b:
01:db:60:9b:3f:f1:8b:9f:c7:23:46:65:5c:51:af:27:c2:51:
34:10:b8:9a:4f:2c:8b:3f:5c:0d:8c:3c:57:15:34:00:78:f3:
ec:5b:9f:db:5d:de:35:08:56:9a:94:f5:f6:c8:f8:eb:89:ef:
1c:a7:db:e3:4a:4e:74:9a:b8:29:54:aa:6f:5b:f1:9e:12:c8:
4e:74:d2:d7:79:66:e3:b3:31:4c:db:3b:91:6f:de:b4:20:31:
40:86:2e:21:05:71:d1:42:c6:99:e9:52:e0:64:66:23:3f:c6:
61:0f:d4:1d:31:80:ea:17:99:37:39:1f:a8:2b:c7:77:bd:26:
56:7c:0f:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:16 2026 by rpki-client