Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145731.roa
File: AS145731.roa (raw, json)
Hash identifier: 1cFgZnkFOr6NtEr8u0D1INGbhwF4ZFL72LOQJu5s6RA=
Subject key identifier: 21:7D:55:4E:2B:C7:30:81:52:F5:EE:15:93:FD:A9:71:7E:78:EC:13
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 214E3BB1F6214A4A25312569D8224591F4EE9CCD
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145731.roa
Signing time: Fri 22 May 2026 07:41:10 +0000
ROA not before: Fri 22 May 2026 07:36:10 +0000
ROA not after: Fri 21 May 2027 07:41:10 +0000
asID: 145731
IP address blocks: 240a:ac09::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:4e:3b:b1:f6:21:4a:4a:25:31:25:69:d8:22:45:91:f4:ee:9c:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:36:10 2026 GMT
Not After : May 21 07:41:10 2027 GMT
Subject: CN=217D554E2BC7308152F5EE1593FDA9717E78EC13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:a9:21:9a:3c:2f:ae:a9:5c:07:1a:73:ef:f4:
be:5e:e5:1e:57:f1:63:32:61:1f:67:6d:38:f5:a9:
e4:bf:50:2a:0a:7c:30:fd:d8:0b:9e:0f:e1:72:25:
59:01:c6:69:ac:cc:fa:0e:cc:75:84:b8:84:85:e8:
6c:14:9f:8c:ec:08:d8:e4:f6:b5:ca:0f:fe:59:35:
ac:12:1f:7c:31:d8:25:82:e7:75:2e:cd:84:ec:d9:
72:64:9f:7d:be:40:95:3d:c7:a8:78:00:00:bf:b7:
01:e2:47:7a:5b:1d:96:10:08:45:52:f5:86:20:16:
d6:3a:6a:f7:08:a3:40:56:60:b2:23:a3:11:ff:39:
d4:7d:c9:62:46:ef:1e:0d:34:2b:99:5c:b8:89:46:
df:1b:0f:f5:44:d3:55:76:31:1a:f6:4b:b8:eb:54:
21:fe:88:f7:35:ab:23:d8:4a:68:1a:e6:f7:30:38:
b0:f5:b0:08:26:80:66:21:c2:16:6f:ea:47:a2:c0:
fe:65:51:cc:93:39:e3:ae:5d:67:00:2c:69:c3:a2:
ad:a5:f7:ac:a5:51:93:9d:03:ec:bf:e1:76:58:04:
49:f6:6e:d2:9d:9d:95:60:38:21:83:6e:96:14:ac:
02:7e:13:27:87:29:84:b8:07:70:07:4b:14:90:16:
8b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:7D:55:4E:2B:C7:30:81:52:F5:EE:15:93:FD:A9:71:7E:78:EC:13
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145731.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ac09::/32
Signature Algorithm: sha256WithRSAEncryption
b3:70:1f:c4:cb:e3:1e:76:16:fa:50:41:76:9c:a1:00:a0:1f:
3e:7a:5f:a4:a6:77:9b:e4:6f:8b:cc:d3:f4:7f:75:36:35:c4:
03:fc:ee:7e:1f:a8:bc:9b:9b:38:75:45:a1:6f:30:42:e9:1e:
16:7f:1a:f0:ad:2e:aa:66:4c:b4:c2:88:4e:05:90:34:bc:0b:
52:fa:92:2a:fb:cc:dd:e9:c3:b5:d0:57:8f:3e:46:b7:d3:22:
ef:02:1d:1c:ec:ff:51:72:9a:7a:9e:f2:7d:f6:91:23:26:d3:
8e:e7:72:06:64:f4:ac:b9:05:3f:53:44:cc:e7:66:07:35:9b:
df:1e:5b:2b:d0:96:ec:db:8f:01:7b:f7:ff:46:7c:5c:fc:39:
46:43:7d:af:4d:06:3e:d1:5c:d6:34:24:69:f0:cd:62:57:3c:
97:b6:5b:bc:9d:cf:1b:30:36:26:1b:e6:93:5e:ad:d7:84:8a:
17:da:1a:ad:e4:68:20:20:18:94:71:e6:d3:ae:67:0c:d4:cd:
fb:05:5f:0c:7c:36:ef:65:64:f0:61:3a:0d:5d:a2:aa:be:97:
f8:12:a1:64:7b:47:89:e8:8a:23:df:7f:a2:9c:fb:d9:d3:68:
9a:b6:24:47:b8:04:02:43:97:36:ff:da:45:50:30:a3:33:8e:
b8:b5:03:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:49 2026 by rpki-client