Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145490.roa
File: AS145490.roa (raw, json)
Hash identifier: 90LPCQKy53ganEBD9rIGncSpvhGWUDNBObk15izwuVo=
Subject key identifier: AC:2C:24:B5:63:B2:48:E6:72:21:66:5D:C2:5B:17:2E:6E:B3:3D:47
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 26AFF0DF8F0E4B6E0077F96491A1597166ACD23A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145490.roa
Signing time: Tue 26 May 2026 01:13:10 +0000
ROA not before: Tue 26 May 2026 01:08:10 +0000
ROA not after: Tue 25 May 2027 01:13:10 +0000
asID: 145490
IP address blocks: 240a:ab18::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:af:f0:df:8f:0e:4b:6e:00:77:f9:64:91:a1:59:71:66:ac:d2:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:08:10 2026 GMT
Not After : May 25 01:13:10 2027 GMT
Subject: CN=AC2C24B563B248E67221665DC25B172E6EB33D47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:cc:e8:c3:de:a3:a3:df:f5:a0:fe:32:cc:62:
a7:a5:a3:e5:3f:be:22:d7:b0:6c:bb:ef:0c:57:18:
62:f0:8b:f2:0a:09:f4:b4:b7:09:56:29:d6:62:5e:
51:be:2e:a3:e3:48:a3:9b:1d:23:03:cd:ec:6c:34:
a7:f5:32:00:55:90:d7:6e:d4:e2:53:41:83:bb:a7:
6a:80:55:25:f0:26:e6:b5:64:90:b7:47:4d:e7:0d:
42:77:d0:92:f2:86:21:72:dd:16:e0:b2:f3:bd:8d:
ac:91:08:0c:15:28:30:c2:4d:b9:fd:2e:75:4d:6c:
a9:90:bd:8b:ef:be:60:fc:53:b1:38:50:d9:20:d3:
b1:eb:ec:ef:16:c9:65:6d:01:f8:5d:90:40:76:5d:
fa:3b:a8:51:cb:3b:5d:0a:a0:93:8e:85:0c:fe:13:
90:4a:e1:c1:f4:0b:45:3f:3f:e7:49:4d:51:8d:31:
9c:ee:e2:5f:9d:e1:3e:99:97:7d:70:c0:3c:fa:8b:
0d:2f:6b:c8:38:86:31:35:e7:6f:a9:bb:83:fd:6f:
0b:62:57:8e:f6:fa:f7:ef:bc:f0:28:2e:a6:19:18:
99:93:92:14:7c:7e:c3:d6:58:f2:8e:ad:b3:3f:6f:
4a:95:0a:89:8e:a8:20:7b:9b:fc:72:cc:4c:f7:b3:
83:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:2C:24:B5:63:B2:48:E6:72:21:66:5D:C2:5B:17:2E:6E:B3:3D:47
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145490.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ab18::/32
Signature Algorithm: sha256WithRSAEncryption
53:da:e0:44:65:43:c7:6b:26:cd:7a:d6:f1:0d:b2:8d:99:4c:
32:8f:9d:03:91:2c:06:d8:b4:e9:ba:c0:82:e6:b7:92:8c:c6:
ca:86:2e:0e:98:3a:d7:d6:c9:68:59:e1:b4:5f:6d:87:44:56:
a6:8a:c4:4c:76:c5:6b:03:88:07:2c:3f:89:55:6b:78:a4:dc:
03:42:c4:85:de:ed:d2:52:6b:8d:0e:84:05:64:93:fe:d9:10:
3e:43:01:2f:3a:70:2e:d3:2d:77:ec:04:4f:02:94:ac:7c:65:
8b:26:b1:58:64:6a:c2:41:38:c3:1d:2f:ab:5a:a9:24:da:1a:
8d:da:f9:6f:42:32:fd:b0:fd:2f:ee:77:da:f6:b7:c5:85:06:
f5:39:01:a7:fe:01:dc:01:d6:43:12:9e:9f:29:ec:d7:bb:4c:
c1:be:4b:d0:45:76:6f:29:02:38:57:aa:6c:00:80:14:e7:0f:
11:99:95:23:7d:91:5a:c5:1f:07:01:33:68:e5:50:5b:f6:1d:
c0:96:ff:ad:88:80:66:c0:e8:04:50:3b:d0:49:da:0c:38:77:
e7:f5:d8:f0:c5:0d:ba:7a:a9:3e:45:26:34:e2:97:20:e1:c0:
9c:d7:ab:a0:78:de:f2:ce:7a:b9:10:cb:a1:f5:5b:55:1a:54:
2f:cb:ea:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:20 2026 by rpki-client