Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145722.roa
File: AS145722.roa (raw, json)
Hash identifier: 8lARpUObHWgAWEUBt0RNoGMZZuAL4A9gFGq79zzlhj4=
Subject key identifier: D0:5B:6D:39:99:5B:01:C1:9F:ED:7A:84:72:11:4A:ED:5A:22:64:85
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1983176244051541E270BB53A59E7BF9BEACD55F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145722.roa
Signing time: Fri 22 May 2026 07:09:07 +0000
ROA not before: Fri 22 May 2026 07:04:07 +0000
ROA not after: Fri 21 May 2027 07:09:07 +0000
asID: 145722
IP address blocks: 240a:ac00::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:83:17:62:44:05:15:41:e2:70:bb:53:a5:9e:7b:f9:be:ac:d5:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:04:07 2026 GMT
Not After : May 21 07:09:07 2027 GMT
Subject: CN=D05B6D39995B01C19FED7A8472114AED5A226485
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ff:25:c8:05:7d:d5:70:15:db:b7:84:aa:81:
9a:1c:ee:fc:2a:b9:5f:00:de:c5:6a:0e:54:3c:66:
ec:ac:53:a5:5f:12:8f:4a:43:b8:85:54:15:ba:88:
66:0d:e3:94:e4:86:ed:c5:e0:c4:96:3e:bf:fb:9d:
33:93:27:b4:e8:b1:07:0d:d2:0a:c6:c2:91:51:c8:
7a:5e:75:08:8c:66:4e:98:9f:5f:35:4c:d3:5f:b0:
bb:41:ad:c2:6c:a7:d5:52:55:8b:c9:96:3c:85:da:
74:5f:c9:33:fd:17:41:58:e4:85:20:84:5d:5f:51:
79:bf:04:61:5d:18:7b:dd:3f:2e:f4:fc:72:79:78:
b6:51:b6:41:c5:09:b9:e6:d5:9c:15:dd:22:12:0d:
c5:25:03:42:fe:ed:64:f2:13:75:7e:83:0b:77:05:
fb:94:6e:5c:d0:2b:9e:c3:36:6f:46:4a:f5:79:8e:
f3:26:55:9c:a6:1d:df:e5:69:ec:77:19:98:5b:35:
6b:86:69:39:96:16:50:f7:25:eb:c6:21:7a:8b:b8:
95:54:13:87:f3:4e:9b:60:fd:69:73:e1:dc:fe:68:
55:0c:8f:99:8e:94:af:97:1e:5d:89:1e:4c:04:32:
45:c1:53:c3:4c:36:ef:f4:fa:f2:f9:b8:fa:16:9d:
9d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:5B:6D:39:99:5B:01:C1:9F:ED:7A:84:72:11:4A:ED:5A:22:64:85
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145722.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ac00::/32
Signature Algorithm: sha256WithRSAEncryption
04:53:1f:b1:89:99:bf:2c:31:fc:ee:55:e1:67:d7:e0:42:23:
23:85:80:cc:f9:d3:5e:ce:47:ef:76:32:77:f4:73:5a:0c:5a:
ac:3f:0b:5d:8f:3e:24:3f:06:34:17:76:e1:31:59:d5:5b:3a:
99:f9:a5:02:e2:b6:62:03:ac:41:13:a7:c3:95:2d:10:ec:81:
69:8d:99:af:a9:34:ef:c2:4a:fd:6c:01:1e:dd:10:66:b5:56:
ba:53:a4:4b:ab:9c:46:8d:1d:b0:30:ed:dd:2e:08:82:8b:bf:
8a:f7:a7:b8:78:bc:58:e6:d1:00:0b:15:7f:da:39:ce:c5:77:
4a:e6:b5:ac:c5:4d:e5:83:f9:e2:8e:6f:3f:a6:85:0b:47:ad:
d8:08:d5:e8:61:00:60:2a:41:ad:fd:95:57:08:ee:95:bd:30:
58:91:f1:27:72:a3:e1:13:0c:49:5a:8d:83:7d:df:0e:73:de:
39:36:ea:ac:8a:66:5e:53:5e:d8:4b:fe:a6:a0:c6:f0:c6:72:
f3:6d:37:3c:79:52:80:e1:b0:19:8e:eb:e6:ac:40:09:3c:3b:
70:62:ac:9e:da:3a:83:35:df:d2:b8:e5:8f:37:b9:a0:a9:ce:
a0:19:72:48:de:ed:90:1d:a9:8d:a2:47:cb:22:47:1e:91:34:
3d:23:63:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:41 2026 by rpki-client