Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145700.roa
File: AS145700.roa (raw, json)
Hash identifier: ffwmWf1moZKEf+EfB48KhhNFt0Nfqwzgza70B8mXTP8=
Subject key identifier: 23:C4:7C:E1:40:E0:2D:CA:9F:24:F6:9E:28:B1:65:B3:02:59:04:38
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 31137EC25A26753C79EA02D6B3BF2F9FE36D5664
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145700.roa
Signing time: Mon 25 May 2026 06:48:53 +0000
ROA not before: Mon 25 May 2026 06:43:53 +0000
ROA not after: Mon 24 May 2027 06:48:53 +0000
asID: 145700
IP address blocks: 240a:abea::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:13:7e:c2:5a:26:75:3c:79:ea:02:d6:b3:bf:2f:9f:e3:6d:56:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:43:53 2026 GMT
Not After : May 24 06:48:53 2027 GMT
Subject: CN=23C47CE140E02DCA9F24F69E28B165B302590438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:64:a1:69:7a:0f:22:8a:a4:61:ed:13:7f:d1:
3f:7a:5e:0e:43:25:d4:6c:a4:58:20:46:a0:b0:bd:
9b:99:95:c1:8f:66:dc:99:5c:bb:d5:da:7d:74:52:
7c:33:0f:80:d9:9d:30:c4:d5:b5:1e:05:45:6c:cf:
d9:e2:8a:e7:7f:a6:76:9d:57:a7:3c:0a:e0:8a:b4:
47:2b:b6:2a:5b:d2:07:92:c8:1d:ee:47:7a:35:f1:
ed:51:b9:e5:18:88:8c:7a:fd:fe:33:e6:33:f3:00:
62:ca:9f:12:ce:97:15:8c:ce:b3:d1:f9:d7:d5:2f:
68:9a:60:71:08:45:16:1b:db:58:06:44:93:5d:83:
5c:0b:8b:c5:b9:51:10:1f:57:71:aa:67:39:02:0c:
8a:07:36:68:b2:87:13:7f:1a:cd:aa:19:9b:9e:00:
65:df:40:91:d8:d0:3a:b3:81:4e:39:1b:fb:31:cd:
c4:f8:ca:ba:f4:11:ff:ae:47:97:d8:f1:55:c8:ea:
93:49:c1:42:b7:cc:72:ca:c4:56:89:08:f4:31:e3:
4c:cf:77:7a:35:36:aa:33:ce:0e:d0:cc:f7:f8:22:
20:d0:18:11:32:59:b6:70:dc:ca:45:ba:5d:cd:f6:
93:98:3a:c9:35:23:eb:38:b3:0d:de:9c:32:93:87:
82:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C4:7C:E1:40:E0:2D:CA:9F:24:F6:9E:28:B1:65:B3:02:59:04:38
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145700.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:abea::/32
Signature Algorithm: sha256WithRSAEncryption
1d:26:a0:b8:b2:c6:71:03:42:11:ef:a9:16:88:31:aa:f8:37:
2c:25:cd:85:a6:1b:b5:3a:ca:62:d2:13:fa:f4:8c:7d:b9:f2:
00:56:61:f8:bf:ea:e2:ee:f9:f5:f0:1f:3d:58:86:41:b7:4d:
72:7a:9b:e9:4c:b0:80:44:6c:3a:9f:20:f0:1d:e9:44:1b:a3:
50:e1:1c:d6:d5:b1:fd:4a:8e:67:06:67:f7:49:be:4e:09:b9:
bb:14:00:7d:de:1d:4e:28:7a:ed:f6:67:fc:1b:a5:06:85:91:
27:09:1f:c7:6c:50:49:b7:27:14:d2:b3:04:f0:ac:cb:c4:09:
73:ad:b7:51:86:98:1e:5d:ae:92:69:c6:6e:90:30:13:46:07:
0b:e1:e9:d0:64:90:5c:30:bc:de:2e:59:aa:bc:73:06:5d:e6:
19:83:9e:75:9b:ea:50:0c:7d:e5:39:e6:00:c5:2b:cd:70:60:
a3:c3:44:4b:3f:66:0e:60:5e:20:9f:0a:20:04:2e:96:59:b1:
c8:7f:15:31:0d:b4:32:86:27:44:e4:e1:05:49:c7:39:d8:6b:
64:ec:43:ce:21:93:a8:93:11:e6:a7:19:70:36:36:d1:68:bb:
ef:86:df:b2:60:06:7e:57:40:cc:69:97:77:9f:b1:d1:c5:fc:
a3:60:86:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:47:46 2026 by rpki-client