Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145706.roa
File: AS145706.roa (raw, json)
Hash identifier: 3a3hzW9bs6U6j/+yJHDiBp+t67yAMwX7j2FLKNCTlck=
Subject key identifier: 87:32:84:B0:6F:ED:21:68:66:CB:A6:8A:02:E2:CC:61:6F:75:BF:E5
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 79AED046099F6794E737ACB32C47D93CC645296C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145706.roa
Signing time: Tue 26 May 2026 08:53:03 +0000
ROA not before: Tue 26 May 2026 08:48:03 +0000
ROA not after: Tue 25 May 2027 08:53:03 +0000
asID: 145706
IP address blocks: 240a:abf0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:ae:d0:46:09:9f:67:94:e7:37:ac:b3:2c:47:d9:3c:c6:45:29:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 08:48:03 2026 GMT
Not After : May 25 08:53:03 2027 GMT
Subject: CN=873284B06FED216866CBA68A02E2CC616F75BFE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:98:98:d6:d7:af:bc:15:07:b6:66:b1:dc:61:
89:47:17:42:6d:a7:1f:8f:cf:e5:eb:df:f8:d9:80:
28:58:17:8f:4e:ad:39:0b:d0:44:d6:ac:bd:b8:96:
56:72:d1:32:a1:8e:47:bb:a9:cd:c4:31:20:28:b9:
18:85:5e:b2:03:8d:16:e4:59:91:c7:8d:4b:65:b6:
6f:92:23:86:4b:47:4b:86:8e:81:40:38:5f:6c:ef:
05:03:db:e8:2d:7e:76:e2:74:07:0f:f0:b9:15:71:
27:7e:66:c8:4a:2a:85:ee:fd:95:46:63:35:90:15:
33:12:b6:c4:59:42:51:89:7b:c1:09:6c:c6:27:39:
d7:59:8f:bc:ea:30:91:24:83:2f:e3:f0:71:7e:15:
2a:09:66:d2:7c:e5:35:ba:97:2a:6e:4c:53:8c:4d:
ee:80:c3:49:20:77:09:e2:52:5d:0f:27:5a:a0:ed:
57:16:70:b8:c7:85:b1:05:37:b3:95:44:6a:f6:48:
6e:11:1d:9e:60:88:90:87:fe:03:f3:7e:75:b0:ea:
29:22:e5:7b:ab:3f:66:dc:df:2b:86:1e:b2:aa:0d:
df:15:cc:35:d6:30:6d:f3:fc:c2:55:29:8d:1b:9c:
f4:a9:f1:e0:ab:d9:01:a7:60:90:46:54:40:75:35:
88:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:32:84:B0:6F:ED:21:68:66:CB:A6:8A:02:E2:CC:61:6F:75:BF:E5
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145706.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:abf0::/32
Signature Algorithm: sha256WithRSAEncryption
83:52:1b:53:0f:a6:0e:0d:7d:be:7d:17:8f:ee:ae:81:3f:1b:
61:ce:c3:61:d1:f0:b3:09:f8:76:f2:4c:43:83:fa:d9:e5:02:
2e:4d:88:5b:9c:4f:c0:0d:2a:da:1a:fe:c9:9a:09:88:54:59:
04:03:b2:28:55:ea:65:8a:cc:dd:25:51:c6:5f:7e:aa:94:d9:
6b:71:89:60:89:aa:cd:bc:71:94:59:12:a5:f8:e6:fb:4e:9b:
f2:d7:dd:38:71:87:82:93:b3:fb:1a:69:c8:b1:3a:a1:5f:8e:
6d:d2:bb:4c:af:40:3a:a0:4b:e8:cf:ed:63:67:84:e9:bf:48:
6a:ca:f5:80:04:f4:0c:4b:7d:ca:7b:29:1e:0d:ba:8a:8b:ec:
bf:b1:3e:e6:ac:ad:fb:79:d5:b0:54:16:c5:10:c1:b7:c9:04:
e9:0f:f2:36:cb:da:f4:eb:e5:84:5d:0a:9f:89:21:bd:3b:55:
05:b5:4c:56:a5:1f:3a:e9:d8:43:d5:59:f4:ce:5b:58:9d:74:
2c:31:91:0b:7b:3d:90:e6:c8:05:91:10:0a:f8:13:d5:71:5b:
b5:c7:48:22:65:cc:00:f3:1c:f4:4c:f6:5c:fb:60:12:f4:b2:
bf:91:54:99:0d:ad:23:82:8a:23:8a:cc:b2:6d:40:08:cf:5b:
56:44:e9:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:46 2026 by rpki-client