Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145681.roa
File: AS145681.roa (raw, json)
Hash identifier: cFdoXku9S1GHwJh3qBTPT6ap1f9C8gFfPMnZSpsfhKc=
Subject key identifier: E8:F6:E4:D2:51:14:BC:D6:30:69:82:05:BB:39:1C:7A:6B:19:1B:41
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 78A9A871CBC2BBD1B09F4BF766030CEAE3A03217
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145681.roa
Signing time: Mon 25 May 2026 01:51:09 +0000
ROA not before: Mon 25 May 2026 01:46:09 +0000
ROA not after: Mon 24 May 2027 01:51:09 +0000
asID: 145681
IP address blocks: 240a:abd7::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:a9:a8:71:cb:c2:bb:d1:b0:9f:4b:f7:66:03:0c:ea:e3:a0:32:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:46:09 2026 GMT
Not After : May 24 01:51:09 2027 GMT
Subject: CN=E8F6E4D25114BCD630698205BB391C7A6B191B41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:0c:5b:9e:cf:21:84:46:2a:49:12:6e:b8:e9:
74:92:32:ab:d0:ec:d5:e6:c9:75:a1:a5:df:81:f5:
d5:91:96:1e:85:ae:61:9d:3e:60:70:ac:dc:c5:39:
e7:d6:2c:a7:60:d1:00:fb:8c:c8:1e:10:40:e8:c4:
55:89:2a:b2:f7:19:09:ed:8d:74:a2:04:66:1f:c9:
43:78:46:4b:e2:7a:99:69:b1:02:45:14:a9:b5:c4:
20:ad:f9:d5:a7:34:21:18:28:03:2c:d2:60:eb:72:
14:55:82:ed:1c:6f:e6:c7:65:98:06:3f:91:ce:e2:
40:84:1e:2b:79:3b:21:74:9e:eb:48:4f:e5:b3:87:
6e:1b:ca:ca:e2:50:30:cc:f4:1d:77:45:29:ec:e6:
9d:f4:39:5b:29:5e:eb:3b:86:7a:b8:78:6a:d6:ee:
8d:8a:5b:05:4f:e7:e0:57:72:7b:28:62:80:c3:b8:
e1:89:b0:38:53:fa:74:74:f5:9f:dd:a3:77:2c:d5:
5f:ac:31:31:65:36:43:04:45:8c:25:49:06:dd:90:
c9:23:a6:8a:ca:b6:f1:45:78:e5:43:a1:6b:04:0d:
56:54:24:ab:a1:0e:d5:24:fa:d7:ba:ff:38:26:6f:
ff:19:a6:9e:49:c3:7d:22:cb:92:7c:82:78:df:dd:
0d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:F6:E4:D2:51:14:BC:D6:30:69:82:05:BB:39:1C:7A:6B:19:1B:41
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145681.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:abd7::/32
Signature Algorithm: sha256WithRSAEncryption
66:ad:bd:5b:59:d8:3b:43:ae:50:8f:6e:80:73:29:50:a2:4d:
4b:d6:5d:0e:1c:a6:b5:68:b7:f0:56:e7:d6:54:25:1c:bd:05:
1a:5c:1d:bd:2b:66:2f:aa:0a:e4:e2:a3:41:fb:a4:72:02:f0:
08:6d:a7:91:7f:1d:4e:b8:e0:71:e1:8b:2f:5e:2b:4f:1b:c9:
f0:c9:4c:59:1a:5c:25:f1:9e:fe:90:4d:53:af:b1:b4:e6:52:
08:ea:5c:71:61:cd:d0:00:5b:bf:00:f9:8f:a4:71:07:8c:8b:
82:88:c1:c7:4b:1e:f4:78:57:f5:db:ce:18:54:6b:61:94:06:
f9:7f:c6:0c:f8:50:c6:c6:51:8e:f9:ef:1e:b8:82:65:b8:45:
5a:5f:0a:65:65:1b:74:97:b5:d1:cd:ad:44:3f:97:45:6d:20:
c0:f5:fb:9a:4a:36:5f:5d:3b:4f:e5:7e:88:2f:de:83:72:19:
7a:8c:77:0f:b1:15:be:d6:f0:4b:82:b5:65:3d:e2:c3:2b:05:
29:c8:18:fe:89:36:12:4a:52:04:79:aa:58:82:d0:a5:09:9c:
59:68:2e:25:a0:62:13:eb:c1:83:15:99:74:f4:12:15:a5:ac:
49:e4:fa:14:3d:05:b1:83:17:3c:c7:e7:b8:f9:b2:ad:0d:c3:
ed:f4:6e:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:29 2026 by rpki-client