Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145690.roa
File: AS145690.roa (raw, json)
Hash identifier: aNHkBMDXPoRSZi53EwIHOhiS/pQI4mz254E2eeefxjM=
Subject key identifier: DD:B5:38:02:2A:0B:F4:4A:84:2F:B7:E4:A8:D4:29:84:FE:F8:17:F8
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1EA2B88F6202AAE03F7B4342F844D5DFDF1E1A01
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145690.roa
Signing time: Fri 22 May 2026 04:08:17 +0000
ROA not before: Fri 22 May 2026 04:03:17 +0000
ROA not after: Fri 21 May 2027 04:08:17 +0000
asID: 145690
IP address blocks: 240a:abe0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:a2:b8:8f:62:02:aa:e0:3f:7b:43:42:f8:44:d5:df:df:1e:1a:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:03:17 2026 GMT
Not After : May 21 04:08:17 2027 GMT
Subject: CN=DDB538022A0BF44A842FB7E4A8D42984FEF817F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:51:c1:05:20:cb:85:c3:d5:00:17:bd:4d:c4:
59:ef:99:e9:df:04:ae:eb:c8:8f:bd:50:ba:0f:d4:
d3:c5:fd:d0:d7:b8:57:ef:48:20:de:ce:b6:c8:0f:
da:b7:21:46:b9:d2:97:32:8d:2d:81:2b:72:9f:ff:
5a:ac:fc:63:1f:6a:31:73:53:48:a2:ef:9a:80:26:
a9:3b:a9:9e:1c:37:5c:ed:04:3a:5c:ef:c8:0b:1f:
d0:10:b4:a9:a2:6c:ef:8e:8c:85:5c:83:45:cc:0d:
4b:29:3b:1b:0a:67:eb:cf:b6:78:23:da:d2:e5:0a:
1e:2b:b9:85:e0:3d:60:b5:58:52:7b:13:68:2b:9b:
66:43:09:96:66:5b:52:1d:f8:63:b3:27:1b:1e:7f:
f5:1f:bd:24:db:3e:27:e2:ca:c9:eb:32:a0:0d:bf:
c7:bc:5b:a0:90:66:fe:d0:81:87:ff:f7:24:de:11:
4f:c5:ea:88:56:61:19:96:c4:af:28:76:05:d8:06:
b9:30:8c:4a:01:f2:b6:16:fe:8a:46:d9:4c:27:2c:
50:ad:80:97:dd:9d:10:ae:ab:d8:8f:fe:0e:57:24:
53:33:f9:ca:91:71:5b:e2:21:a4:af:ce:c6:8a:4c:
cc:a6:eb:72:03:b6:b6:28:31:54:41:4b:7d:3e:f6:
b4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:B5:38:02:2A:0B:F4:4A:84:2F:B7:E4:A8:D4:29:84:FE:F8:17:F8
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145690.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:abe0::/32
Signature Algorithm: sha256WithRSAEncryption
7f:6b:7b:37:d7:0d:e0:4f:35:ef:ea:c2:a6:3c:6f:7c:c2:d8:
50:12:00:af:fc:6e:ff:fa:9c:62:9a:ab:b8:82:c7:b2:0e:b1:
ed:a5:c7:f8:e4:ac:70:56:94:67:c1:a1:05:49:41:0e:d5:e8:
af:8b:ac:e0:2a:9b:3b:0e:eb:67:ea:fc:b0:76:86:3c:f5:60:
39:20:64:7f:4b:ef:70:57:a1:e6:23:9b:0a:a0:a3:cb:4b:86:
fa:95:31:f1:e0:23:9d:f0:75:ee:bc:8f:01:17:21:f1:b1:8e:
02:7c:33:ab:b7:49:20:2d:23:f1:a9:ba:55:8c:7e:bc:6d:ce:
86:bf:70:e9:63:c8:1c:3c:6b:d0:92:4d:04:48:e0:9f:b4:89:
04:3d:51:8e:7c:30:33:60:ec:82:ca:5b:40:89:7d:6c:37:1d:
88:69:55:3f:4f:fa:8b:8f:45:54:d3:58:85:7e:cb:4e:f8:c1:
aa:76:a5:ca:7e:fc:4a:34:28:70:b3:0b:a0:2f:25:4a:9e:26:
10:57:7d:57:46:82:81:be:a3:71:9e:41:1d:c1:15:43:bb:22:
f9:44:5b:1a:fe:b3:f7:16:4a:66:64:48:06:7f:86:55:9d:55:
2c:80:fc:a4:34:0a:a7:94:7b:dd:66:5b:64:a3:79:9b:f5:3d:
69:87:8b:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:44 2026 by rpki-client