Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145698.roa
File: AS145698.roa (raw, json)
Hash identifier: d6S3ow9pCdPtofqfjoLAzLWkkv/cT8K2hW8nR4RliN0=
Subject key identifier: 59:39:89:DC:6B:F1:2D:F6:AB:31:0D:BC:3E:C4:75:57:78:64:7C:20
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4A8BD648F244FD69B95FC0C68205E8405F47A18C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145698.roa
Signing time: Tue 26 May 2026 06:12:39 +0000
ROA not before: Tue 26 May 2026 06:07:39 +0000
ROA not after: Tue 25 May 2027 06:12:39 +0000
asID: 145698
IP address blocks: 240a:abe8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:8b:d6:48:f2:44:fd:69:b9:5f:c0:c6:82:05:e8:40:5f:47:a1:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:07:39 2026 GMT
Not After : May 25 06:12:39 2027 GMT
Subject: CN=593989DC6BF12DF6AB310DBC3EC4755778647C20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:1e:17:6a:39:9a:76:66:30:3c:f5:3a:3f:f3:
34:d9:d9:55:45:ae:fc:5e:c2:f1:a5:06:e3:01:9b:
60:9a:37:1b:9a:d2:ad:48:98:d7:ab:9c:dc:85:48:
10:cd:8d:34:4f:51:62:86:1e:8a:ea:f7:7d:68:3b:
1b:e0:35:b6:53:75:25:bc:c3:3e:48:a6:42:5d:eb:
01:cf:43:61:6b:7a:66:d3:2a:32:6c:c9:44:6e:56:
92:02:8c:fc:5d:e6:dd:d3:f4:8c:d9:ee:3e:0e:7d:
fc:b1:73:25:0e:be:78:f6:86:68:91:25:a6:ac:1e:
2b:2a:64:ef:87:8e:22:1c:9e:f4:d3:1f:51:14:3d:
99:b0:2c:89:ea:81:2d:c0:d2:fd:48:2b:a2:4c:0c:
35:7f:75:d7:d1:90:0d:cb:db:83:fa:06:9b:6c:a1:
3a:20:73:31:02:fa:2f:a7:95:2b:75:9d:b8:d9:39:
50:8f:d2:c8:17:5d:cd:21:8d:cc:df:31:ec:19:16:
78:12:ba:c6:43:6f:50:5b:be:e3:91:fe:71:5d:22:
e4:bb:49:e6:34:83:a4:95:c3:fd:ad:fb:f4:02:e9:
08:a5:52:1c:41:3b:bf:c4:1b:8e:a1:20:53:89:a7:
93:43:a3:21:58:a8:36:18:f6:2b:27:3c:9a:1e:df:
ee:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:39:89:DC:6B:F1:2D:F6:AB:31:0D:BC:3E:C4:75:57:78:64:7C:20
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145698.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:abe8::/32
Signature Algorithm: sha256WithRSAEncryption
2e:93:ed:cd:36:ec:f2:dd:17:1d:60:b8:5a:6e:e5:f3:36:49:
cd:f2:b0:14:7f:b6:a8:46:90:0d:a4:25:f8:f0:21:42:4f:74:
65:ce:4e:55:f6:96:82:c7:76:d4:27:f5:86:21:b5:c6:77:15:
c2:cb:9c:b8:3a:47:96:b3:af:ee:15:9e:f1:6c:c2:72:89:74:
47:c4:80:d1:c0:8a:cc:83:6f:75:85:b4:65:0b:63:c3:49:8a:
2f:9e:b7:5f:0e:e5:f0:c0:60:e0:61:26:ee:73:39:4e:29:66:
f9:f9:dc:30:63:42:36:8e:1d:05:a3:ba:6f:20:ef:54:26:76:
02:db:2d:2b:3b:ce:11:ca:98:48:ae:28:96:01:e6:2b:b6:bc:
f9:de:8a:18:52:08:94:40:68:10:d6:04:5c:51:14:98:9f:a3:
f1:92:9b:ac:ec:c9:9b:85:20:70:a1:47:31:ef:4a:40:8d:94:
4e:40:7c:f9:a8:d5:c9:17:2c:09:83:7e:2c:0c:a9:e1:86:10:
ee:90:a6:8c:8d:1f:9c:9c:bc:56:31:a8:aa:c5:81:6e:13:6e:
1f:89:af:a6:e6:23:48:be:ba:56:24:b5:71:ba:4c:a7:a8:cc:
31:b4:f7:0a:58:64:24:2c:01:d4:db:fd:2c:9e:34:c8:b2:4d:
9b:1a:8a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:58 2026 by rpki-client