Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145695.roa
File: AS145695.roa (raw, json)
Hash identifier: tAkHTIFKu02+elpLW8zV5lhq3Ks4Eft2BUZ9A1nwNsg=
Subject key identifier: 69:74:DC:4E:ED:72:16:68:64:6E:45:DE:60:63:48:04:14:E0:79:AB
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3B23520160CD61ED78373778928B891D8289A9E1
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145695.roa
Signing time: Mon 25 May 2026 01:38:33 +0000
ROA not before: Mon 25 May 2026 01:33:33 +0000
ROA not after: Mon 24 May 2027 01:38:33 +0000
asID: 145695
IP address blocks: 240a:abe5::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:23:52:01:60:cd:61:ed:78:37:37:78:92:8b:89:1d:82:89:a9:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:33 2026 GMT
Not After : May 24 01:38:33 2027 GMT
Subject: CN=6974DC4EED721668646E45DE6063480414E079AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:ec:61:0e:89:42:55:54:ce:34:57:6a:32:30:
63:93:df:c9:96:f1:be:b8:ce:f0:8c:0c:9f:15:8a:
fb:d9:dc:cd:dd:9d:2a:57:df:97:33:c2:e6:38:c3:
d7:0f:b3:19:5d:11:28:45:82:db:90:42:3d:68:d2:
b4:01:32:95:72:72:1b:28:e8:94:58:77:59:c5:dc:
b2:d0:59:09:5e:a5:f9:64:96:07:a1:33:33:1b:fe:
8d:5b:73:08:64:ee:14:f9:b1:be:57:23:d8:3e:ae:
c0:e5:9b:e2:1a:ba:c1:7f:5b:07:24:29:74:28:94:
af:eb:97:64:8b:4d:ad:73:b0:33:fc:1e:85:4d:ab:
a1:18:2f:fe:1b:4f:1d:1f:99:4a:84:f2:55:52:31:
18:f3:90:86:ab:65:22:cb:bd:5d:1e:41:fc:66:ae:
08:c8:ef:a7:d4:ea:df:2a:22:94:9c:f3:f5:76:b3:
bb:4d:f6:7d:c8:f0:72:16:c4:6a:2a:3f:51:f8:2f:
af:27:d2:04:c6:ad:ca:36:ef:2b:79:4b:aa:07:32:
10:04:24:a0:38:e6:89:f5:bb:1b:3f:ea:5b:53:ef:
7d:bf:00:a9:29:ce:cd:ab:9e:c4:fe:97:c0:44:57:
0a:06:ab:34:2c:6d:74:1d:ba:21:56:d6:f9:f2:1f:
ea:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:74:DC:4E:ED:72:16:68:64:6E:45:DE:60:63:48:04:14:E0:79:AB
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145695.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:abe5::/32
Signature Algorithm: sha256WithRSAEncryption
a0:20:46:9c:1c:c6:e8:8d:fa:45:f3:8d:23:0e:dc:2e:56:9c:
f9:39:46:2d:07:59:c6:1f:da:02:1c:a9:43:78:b7:f2:00:f7:
e2:b1:06:83:96:57:94:02:7d:1e:a3:17:1e:f4:4d:d3:9c:c6:
16:65:30:f6:54:6c:59:36:51:d3:0c:1e:1f:ec:dc:17:c7:8d:
3d:a1:11:b6:71:a0:ed:0e:4c:b9:a1:40:5f:0b:9b:16:3c:00:
1e:e9:46:cc:9b:9b:de:90:5c:9e:ff:f5:45:66:ab:78:97:1d:
e9:eb:8f:56:f9:1a:8b:1b:65:8a:2e:af:2a:96:3d:9f:f5:85:
7d:fa:01:79:04:b5:67:cb:19:b3:25:b9:67:ac:ce:c7:bb:34:
43:64:ee:77:79:63:f5:b8:44:e5:eb:e3:9e:57:47:57:1f:90:
71:12:63:a8:da:f4:97:8d:db:26:4e:ed:e5:ff:19:9b:0b:24:
a1:dc:ba:ad:7c:92:ee:60:63:c5:26:ba:74:b8:36:fc:f3:19:
e1:35:5b:33:22:de:03:01:25:59:6d:6b:3b:21:14:da:9b:fe:
67:9b:76:b0:d3:66:63:43:b5:5c:0d:11:c9:fd:71:88:72:eb:
d0:78:d1:a2:5f:0e:33:92:f8:01:c0:52:76:d6:a9:bb:52:87:
0a:fb:1a:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:19 2026 by rpki-client