Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145703.roa
File: AS145703.roa (raw, json)
Hash identifier: VyXcOdchRYT6Ym8yuabK0sJ1zZ2WFAIGcO4/HRhkkuo=
Subject key identifier: 3C:41:92:0A:3E:EE:70:A7:86:47:70:11:55:B6:BC:A2:98:8F:C5:F7
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7D5C8B76F8565F8390D1B4DFAA097083CF693B8E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145703.roa
Signing time: Fri 22 May 2026 06:27:53 +0000
ROA not before: Fri 22 May 2026 06:22:53 +0000
ROA not after: Fri 21 May 2027 06:27:53 +0000
asID: 145703
IP address blocks: 240a:abed::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:5c:8b:76:f8:56:5f:83:90:d1:b4:df:aa:09:70:83:cf:69:3b:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:22:53 2026 GMT
Not After : May 21 06:27:53 2027 GMT
Subject: CN=3C41920A3EEE70A78647701155B6BCA2988FC5F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4d:39:c0:d1:6c:f6:23:5d:31:a5:16:7a:88:
be:30:24:7e:6d:31:13:e2:57:ea:93:13:1d:f4:54:
56:e7:ce:6b:88:5f:2b:65:8c:7e:4d:40:7c:17:43:
14:eb:75:0c:10:04:ab:c8:32:6f:4e:e3:ab:12:70:
3c:6b:07:5d:65:bb:1a:d1:ce:5f:f1:65:d6:ba:05:
92:8d:8f:0f:47:c1:9f:91:73:4d:16:1d:14:a3:86:
d7:7b:0d:fb:c6:f3:7f:23:7f:cf:2d:24:d5:b8:30:
4d:5f:b4:5b:a5:ef:e0:82:e4:fc:d9:51:0e:60:3a:
59:e6:32:7b:15:b6:9b:c5:06:b6:4b:d6:43:8a:97:
6a:8c:65:61:03:4c:1b:7d:13:53:f7:1c:17:2c:c6:
eb:9f:b6:c4:09:b5:38:dc:fc:e5:b7:2d:1e:b7:09:
1f:97:fc:ea:1b:98:55:d5:75:4d:54:1e:32:09:30:
79:6c:e6:db:0c:66:fe:1f:48:6c:ec:ef:04:88:9c:
02:d2:85:bf:da:de:e8:1a:73:da:9f:fd:e9:cb:7b:
6e:c3:3e:d5:d0:ea:d2:37:f8:f7:d2:1a:03:d0:af:
c6:45:59:9e:f9:af:bb:c3:18:4c:a4:53:c7:53:10:
3c:60:13:09:6c:cd:69:f6:25:71:33:e1:76:bb:49:
b3:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:41:92:0A:3E:EE:70:A7:86:47:70:11:55:B6:BC:A2:98:8F:C5:F7
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145703.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:abed::/32
Signature Algorithm: sha256WithRSAEncryption
6e:44:36:8c:29:28:f1:c2:e3:0c:30:ac:10:c4:16:0e:f0:b4:
be:7f:5a:f0:f7:af:06:74:7f:06:48:a3:12:0d:81:9e:0c:75:
c8:64:57:e8:b2:5b:53:7e:88:8c:59:a8:b5:2b:d7:25:6d:cd:
81:d3:ac:8c:dd:f2:52:ea:a8:78:d1:6c:12:06:5c:2b:0f:84:
7b:00:25:fe:4a:52:cb:e5:28:27:e0:d7:29:89:5b:9d:d4:55:
5f:e2:a1:19:7d:25:12:4b:96:31:69:fd:ad:7a:4a:cd:c7:39:
4d:5e:8e:07:00:3a:f2:a8:4a:49:f1:9f:a3:56:75:72:ec:69:
a1:5d:10:b0:07:0c:ae:d9:59:a7:29:da:2e:72:ff:08:f0:0c:
8e:67:90:52:5f:69:a7:62:4c:4e:ba:3d:6e:e9:e6:9b:e7:81:
a1:30:36:a1:55:5e:e7:0f:11:e4:53:62:de:84:d5:d4:2d:61:
36:ff:ab:f8:28:a4:bd:3b:5d:1e:3d:fb:cb:2e:f5:3f:6e:d5:
95:a3:c9:bc:26:72:8c:6a:a9:d4:e8:b4:6b:7b:14:0b:1d:78:
c5:d2:cd:6e:0e:16:a6:9b:7c:cc:62:cc:b5:c9:c6:8d:b0:69:
73:93:b6:25:0e:43:0f:49:15:8c:91:48:96:27:da:ee:64:e7:
ba:05:44:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:36 2026 by rpki-client