Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145710.roa
File: AS145710.roa (raw, json)
Hash identifier: QXfwnCgYlGqFcSH+L5LUQoCve+tqIrLXOm71KQmty7U=
Subject key identifier: CE:D8:8D:C7:9B:4C:01:B6:1B:60:6D:3F:D6:A6:5D:71:20:8D:C2:AF
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 34BF1F39F880A9065108C913EE74413C518E17BC
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145710.roa
Signing time: Fri 22 May 2026 01:50:15 +0000
ROA not before: Fri 22 May 2026 01:45:15 +0000
ROA not after: Fri 21 May 2027 01:50:15 +0000
asID: 145710
IP address blocks: 240a:abf4::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:bf:1f:39:f8:80:a9:06:51:08:c9:13:ee:74:41:3c:51:8e:17:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:15 2026 GMT
Not After : May 21 01:50:15 2027 GMT
Subject: CN=CED88DC79B4C01B61B606D3FD6A65D71208DC2AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7f:0b:22:74:ea:2c:e2:55:f5:5b:ac:8f:88:
b1:f6:bc:2f:02:8a:0a:ec:30:0b:96:7b:68:d3:8f:
e3:13:2e:5b:2d:7c:4e:3b:22:f5:7d:77:8d:5d:61:
0f:79:c7:e0:83:60:21:5d:be:f2:29:de:3d:3c:7e:
65:12:a5:10:74:72:36:a9:80:97:dc:aa:0e:7d:87:
ff:5c:a4:55:8a:b1:25:b4:a1:c3:f4:80:56:e8:7d:
9d:d6:91:93:40:61:fd:50:66:8d:6c:8d:81:5f:ef:
94:13:b1:88:5b:44:29:07:ae:28:75:9a:bf:e2:74:
b4:9c:70:37:66:cb:0d:af:81:d9:48:95:d6:99:6f:
00:9b:2f:1b:8f:bd:03:9b:27:6f:34:39:98:b4:1a:
12:b3:93:09:0b:30:00:d8:d4:1e:a6:e3:0f:c5:8c:
45:9d:dc:fe:f3:d1:69:10:2e:bf:6f:bc:16:f2:23:
db:be:9b:0a:19:d0:41:82:4b:7b:b8:4d:bf:29:86:
2a:dc:db:69:b8:af:41:29:02:77:fe:7f:15:28:81:
c8:ef:29:63:ea:2e:ec:51:50:b0:5f:55:40:ce:64:
f3:de:06:90:c9:b2:9b:36:30:d7:3a:8e:35:3a:14:
70:c4:1a:b9:f0:da:5f:23:54:00:b2:b8:e8:a4:24:
c9:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:D8:8D:C7:9B:4C:01:B6:1B:60:6D:3F:D6:A6:5D:71:20:8D:C2:AF
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145710.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:abf4::/32
Signature Algorithm: sha256WithRSAEncryption
99:79:76:48:61:d5:45:d1:01:a1:eb:6f:d8:62:40:b0:61:34:
e6:11:9c:1c:60:4b:0d:a0:44:40:9f:94:06:bc:32:b7:19:75:
bc:97:31:dd:23:76:e7:65:a3:c5:21:05:cd:7d:01:70:e7:75:
01:af:2b:af:23:73:ff:d6:72:91:12:1f:c4:91:51:35:1c:47:
c5:24:b5:e9:1a:24:2c:c0:3e:f6:c7:89:c8:33:95:dd:dd:9e:
bc:fb:59:75:f9:aa:0b:fa:5a:57:a8:38:e0:c9:5d:f9:43:90:
c2:7f:c7:74:a7:57:02:cd:90:d1:3c:1f:3f:de:48:67:c7:4b:
90:28:20:bd:2c:97:c8:04:f1:9a:89:54:7e:54:3b:b6:68:fa:
b6:9b:4c:5b:66:73:2f:43:5e:e7:32:df:e0:f1:8e:40:6c:7c:
bc:dd:8b:08:c6:9b:8a:d1:ba:b3:bb:7c:d8:71:8b:d0:1e:fd:
d0:e2:59:98:be:98:ff:00:bd:d1:6f:68:ee:45:ad:37:64:75:
bd:dc:15:8f:19:5e:e4:d2:ed:95:89:d3:e8:ed:0c:4e:34:9e:
9f:42:64:4c:40:34:a7:be:49:6f:e3:6a:1b:b4:04:15:a0:71:
1b:8b:f6:43:0d:32:cc:03:00:b9:49:11:ab:0d:0c:cc:d7:23:
33:88:4b:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:09 2026 by rpki-client