Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145718.roa
File: AS145718.roa (raw, json)
Hash identifier: WrHO6n3cdpw1+z2GefUdLOJ6cpvm0Ia7n/lyDTVZ9vw=
Subject key identifier: 70:84:2B:AC:68:91:CC:65:E3:58:D7:EC:91:29:B9:DC:55:38:9D:2D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3B0D1D2B5E409ABE264ECBDDD9834E8D942CAB25
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145718.roa
Signing time: Mon 25 May 2026 03:19:51 +0000
ROA not before: Mon 25 May 2026 03:14:51 +0000
ROA not after: Mon 24 May 2027 03:19:51 +0000
asID: 145718
IP address blocks: 240a:abfc::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:0d:1d:2b:5e:40:9a:be:26:4e:cb:dd:d9:83:4e:8d:94:2c:ab:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:51 2026 GMT
Not After : May 24 03:19:51 2027 GMT
Subject: CN=70842BAC6891CC65E358D7EC9129B9DC55389D2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b7:cd:24:95:b0:0b:90:54:45:09:e9:5a:c1:
dd:ad:98:38:3c:ca:98:57:05:a6:39:35:e7:7a:18:
74:37:6e:81:a0:9a:79:93:d6:e9:89:22:c9:e8:53:
e5:90:8a:c0:34:6c:08:ca:5d:7d:2b:29:a0:9b:7a:
75:40:94:2e:95:7b:85:11:0a:e2:a6:54:d9:da:50:
4a:40:df:fe:45:f2:15:9a:bd:bd:cf:4f:f1:39:65:
c4:3e:0a:64:79:d2:04:75:8e:45:15:e5:1c:af:c8:
f8:4d:11:64:79:27:ac:da:d1:c1:b5:ca:71:48:7f:
9a:56:86:ed:a1:be:cd:80:aa:7b:dd:c6:69:0e:1d:
50:43:2b:cb:08:78:56:46:b3:4d:c0:f2:9a:ba:f4:
b0:a8:30:1a:f5:6e:94:b1:98:82:76:de:d5:03:bf:
cb:31:d2:8b:7b:8c:eb:f8:ea:c1:3f:a7:4f:f4:f6:
62:5a:a5:11:5a:52:a0:90:21:d7:bb:96:30:af:47:
02:68:4a:ba:95:34:f9:f2:a4:75:00:e7:8c:87:7a:
47:cc:4f:34:4f:1a:f7:91:57:6e:5b:61:f2:f4:63:
0b:92:ef:d6:d7:f1:7d:49:ca:5f:ec:9c:99:57:f8:
27:2a:d0:23:26:25:58:1c:6f:da:3f:f5:1f:e0:90:
b4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:84:2B:AC:68:91:CC:65:E3:58:D7:EC:91:29:B9:DC:55:38:9D:2D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145718.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:abfc::/32
Signature Algorithm: sha256WithRSAEncryption
01:ea:aa:67:6d:f0:7a:b1:26:fc:af:ff:be:1d:e1:0a:e4:43:
21:fe:96:70:e4:b6:a8:dc:81:5f:b3:d9:35:b7:c2:91:b1:4a:
c0:7d:73:4c:2d:2b:d0:62:2b:0e:0e:0a:a5:f0:d1:09:06:2b:
cc:09:a4:87:07:df:79:93:06:95:a8:8b:7c:60:43:b1:33:dc:
86:86:67:9e:d6:f2:b4:a4:b2:82:1f:3b:71:fb:2e:d9:28:f2:
72:c3:39:23:99:26:95:9c:ed:eb:c2:19:ae:f8:20:9b:bc:cc:
48:ae:83:89:d8:aa:bd:f5:cc:df:69:81:79:87:4e:e9:e6:a3:
2e:89:27:42:44:6b:df:ec:8d:1e:28:43:d1:71:de:98:72:66:
9d:00:1c:a0:8b:39:f5:ed:c2:8b:79:41:b7:d0:4b:5d:06:3e:
92:ec:21:89:7f:53:b8:bb:9d:31:d4:98:d9:af:49:1a:d7:05:
ce:8f:63:70:d2:d7:02:61:eb:cc:d7:bd:02:20:37:af:96:e5:
e8:d8:4b:62:e7:2e:b4:f7:19:0f:46:b0:8b:5a:61:62:b6:81:
51:9c:d5:51:46:9c:de:66:41:12:93:ad:d9:c0:74:46:73:31:
69:0a:e1:5b:3a:ff:8a:f5:e7:3f:42:91:2c:54:2d:37:de:30:
98:c0:8b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:15 2026 by rpki-client