Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145685.roa
File: AS145685.roa (raw, json)
Hash identifier: lQ/Z9ILGVI5arFShOeQs40O+v8ALkDP6siI/kngRiJg=
Subject key identifier: CC:B5:FA:A3:18:DC:D4:94:FF:BE:9C:AA:42:52:6D:2F:78:C7:87:2B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5BAFE2BD4259C7A8D17129F826E46CD5FCA5D0C3
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145685.roa
Signing time: Fri 22 May 2026 06:58:26 +0000
ROA not before: Fri 22 May 2026 06:53:26 +0000
ROA not after: Fri 21 May 2027 06:58:26 +0000
asID: 145685
IP address blocks: 240a:abdb::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:af:e2:bd:42:59:c7:a8:d1:71:29:f8:26:e4:6c:d5:fc:a5:d0:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:26 2026 GMT
Not After : May 21 06:58:26 2027 GMT
Subject: CN=CCB5FAA318DCD494FFBE9CAA42526D2F78C7872B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:43:a9:23:0d:cc:bc:62:b3:1a:63:76:10:38:
88:1f:40:bb:dc:e8:8e:0e:0a:f7:e7:90:28:59:57:
87:ca:00:f1:6f:36:2d:0e:75:8e:ff:68:18:17:37:
f1:5e:5e:0c:d0:95:35:c6:f5:0f:8c:48:49:e8:66:
e3:44:10:1b:c2:25:0e:fc:42:88:17:07:51:b5:ce:
a0:c3:3d:88:34:89:95:8f:9e:14:a4:1d:d9:d0:94:
6f:58:d8:c8:68:4f:cf:54:ba:e1:48:e1:a6:c4:b2:
71:e3:7f:31:11:6c:c4:d8:f5:13:82:03:b3:84:bb:
e8:ee:8d:a7:d8:96:50:7e:71:20:9b:8a:07:e5:f6:
83:c6:e0:22:3f:b2:f6:12:8c:cc:bc:b0:2e:b9:b7:
1e:0b:9e:eb:a0:2e:08:40:cf:9a:63:04:89:b1:20:
6e:5f:0f:80:b9:b6:4e:7c:a1:fc:dc:0c:d8:13:00:
2c:ac:46:25:0b:f5:09:56:a9:52:e2:6a:02:75:67:
44:0a:0e:56:93:a1:f4:17:ad:35:ab:c8:7f:79:cb:
b2:1d:c2:0b:62:95:d2:63:ad:45:5b:92:96:f1:84:
37:56:e9:ba:c4:a7:0d:a4:70:a3:02:c3:3a:39:94:
85:a9:13:6b:b4:0f:4b:c2:42:52:16:ba:fa:e2:ca:
ac:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:B5:FA:A3:18:DC:D4:94:FF:BE:9C:AA:42:52:6D:2F:78:C7:87:2B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145685.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:abdb::/32
Signature Algorithm: sha256WithRSAEncryption
4d:3d:ce:5d:4c:89:13:45:c9:76:e1:9b:ab:68:f1:e0:76:3a:
7a:ad:22:8a:12:62:7b:7f:90:79:f1:0d:3c:ae:6d:61:20:be:
cd:80:12:bc:ee:83:3b:ae:fb:18:4c:18:a3:f8:8b:ff:4e:fd:
11:6c:81:3e:17:88:07:c9:0b:ae:e2:29:ab:c3:12:90:e0:a8:
6b:d8:31:42:ea:ee:d2:3b:1c:bd:08:a5:32:9a:03:39:eb:48:
04:36:37:b4:18:80:69:94:e2:60:ee:96:c5:14:fb:3b:8e:da:
f9:e4:24:7b:da:4e:30:33:3c:d3:69:62:8d:d3:bb:2c:d2:96:
15:c9:0e:f0:7f:cd:20:b3:f6:61:9d:41:42:14:7c:a3:fd:db:
01:2d:3a:de:95:9d:da:e2:42:99:9c:87:5d:6d:3b:b8:1d:2c:
23:c3:5b:f2:76:d6:64:db:cf:cb:48:eb:e9:b0:48:ab:2e:44:
39:23:30:12:dc:59:e3:11:5d:11:a7:c8:4c:75:88:87:ee:47:
fe:13:ed:3b:09:28:36:92:fa:14:46:32:27:54:53:19:03:23:
d9:f9:82:eb:d7:c5:8b:98:b2:4a:8c:45:14:ea:b9:3a:a6:0e:
41:33:18:ad:85:d1:29:b5:60:c3:06:1e:d4:d2:ea:b8:5e:10:
f8:80:29:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:48 2026 by rpki-client