Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145701.roa
File: AS145701.roa (raw, json)
Hash identifier: if/cTOrUBcfnk4CDK9blXbEZzC2CDMxY5/f2fDJLGjk=
Subject key identifier: FC:41:14:71:F2:DF:1C:B4:85:7D:4B:63:89:35:30:20:D8:F8:AE:C7
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3EC0C686B1F51A2DE9B09073942B5F7714827401
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145701.roa
Signing time: Fri 22 May 2026 07:32:07 +0000
ROA not before: Fri 22 May 2026 07:27:07 +0000
ROA not after: Fri 21 May 2027 07:32:07 +0000
asID: 145701
IP address blocks: 240a:abeb::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:c0:c6:86:b1:f5:1a:2d:e9:b0:90:73:94:2b:5f:77:14:82:74:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:27:07 2026 GMT
Not After : May 21 07:32:07 2027 GMT
Subject: CN=FC411471F2DF1CB4857D4B6389353020D8F8AEC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4b:91:14:c6:8b:a5:86:cd:21:47:c6:85:db:
14:3f:1d:0f:17:13:df:ae:22:be:37:3e:aa:1c:41:
22:13:6a:f7:74:39:e8:6e:ea:d1:ff:59:5e:ca:5a:
05:b4:13:3b:28:2f:cf:d1:17:85:08:c5:de:86:5c:
da:ef:dc:c9:1f:03:5d:04:b2:fe:24:9b:af:ec:a3:
88:20:61:97:70:95:09:a3:e6:76:c9:a8:f7:e9:27:
80:1d:c3:ff:d3:38:93:39:52:25:59:5e:65:2a:0a:
fa:9c:ba:88:ef:b3:76:65:19:66:07:af:d1:d8:f2:
a2:f7:ef:21:0e:e7:da:eb:fa:12:17:02:4c:1e:7a:
4a:04:97:08:bd:23:34:8f:04:4f:c2:23:8a:c2:f4:
fc:93:eb:72:42:7d:61:ae:4c:fe:c1:67:b8:0f:9d:
b2:be:36:24:61:18:ad:5c:64:7e:c5:7b:d8:db:06:
28:ec:19:a8:fd:f6:5b:ec:ea:53:06:02:ac:51:b6:
86:ac:52:7e:26:f6:78:47:6e:61:31:0f:1d:de:2c:
89:fb:dd:29:95:4b:99:0a:c3:64:d3:b6:b9:fc:0e:
56:87:6a:c1:88:3c:80:52:25:92:18:87:92:16:9e:
0d:f2:38:f7:51:86:f9:de:a6:4d:31:5c:9e:05:6f:
b7:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:41:14:71:F2:DF:1C:B4:85:7D:4B:63:89:35:30:20:D8:F8:AE:C7
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145701.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:abeb::/32
Signature Algorithm: sha256WithRSAEncryption
31:56:9e:41:84:8a:2b:2f:5e:61:0c:7e:dc:97:3c:c1:92:14:
bf:47:77:3b:ed:8a:f7:0d:96:bc:8b:9b:1e:f5:f8:a8:04:ef:
4f:07:27:58:87:b2:84:04:41:d9:e2:01:ac:ee:92:05:13:75:
26:c6:73:04:d9:df:ea:fc:0a:87:9d:47:e4:ad:99:a4:34:4a:
e9:14:e7:11:35:10:3d:0c:cc:1b:f3:29:99:27:23:d8:c8:78:
21:80:bb:24:76:48:9d:7c:fd:b1:29:cf:47:a6:4e:c1:ef:30:
fc:43:50:0d:d1:05:06:0b:a2:47:03:a0:0e:42:b8:2b:52:21:
4b:71:08:4f:25:98:2e:88:0a:76:49:58:40:b8:4d:68:f0:28:
44:fd:da:d9:2b:a0:9e:d0:7c:2e:6c:1f:87:5e:2b:60:44:ee:
41:5a:41:86:6b:8d:ac:e3:26:b9:fb:da:af:63:6f:3b:49:8d:
4f:5f:e7:12:74:48:da:9b:c0:c9:70:cf:fc:aa:70:e5:5b:1f:
bf:4f:a1:f4:62:aa:f4:18:e3:7f:cd:7a:38:0d:05:1d:51:65:
ab:48:1e:b5:f4:f9:9d:01:dc:6c:54:06:f6:c7:b2:66:65:8c:
5a:c6:7e:51:f7:24:cc:3c:87:7c:42:a6:e8:d7:bd:6b:cb:3e:
72:97:02:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:34 2026 by rpki-client