Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145738.roa
File: AS145738.roa (raw, json)
Hash identifier: ZSA8L/SGFn3Q+jb09u3uoSmjEChhBQc6FDSmIfKcgDY=
Subject key identifier: 9C:C3:E1:6F:2F:89:97:78:02:C7:0A:C0:07:22:15:01:C0:78:9F:C7
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4E88A806075362D283A5B17DA949476DECD47B84
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145738.roa
Signing time: Tue 26 May 2026 08:52:53 +0000
ROA not before: Tue 26 May 2026 08:47:53 +0000
ROA not after: Tue 25 May 2027 08:52:53 +0000
asID: 145738
IP address blocks: 240a:ac10::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:88:a8:06:07:53:62:d2:83:a5:b1:7d:a9:49:47:6d:ec:d4:7b:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 08:47:53 2026 GMT
Not After : May 25 08:52:53 2027 GMT
Subject: CN=9CC3E16F2F89977802C70AC007221501C0789FC7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:48:5e:bf:0e:3c:2b:89:f6:ae:ed:89:1a:37:
d5:c0:63:b8:fc:c4:b9:a6:13:5a:ac:05:9b:33:4c:
b1:db:1c:18:43:1b:ed:09:35:a1:78:aa:26:ea:38:
a7:5e:48:b5:33:33:fc:d5:74:2c:ce:09:9e:26:31:
cb:48:6b:ed:63:89:a9:8b:a0:cb:fb:d3:a6:44:a8:
4b:82:c0:72:52:a7:17:5f:6e:d8:9c:e6:bc:e4:4c:
9a:7b:c8:f4:d2:6a:6b:5a:c6:ec:07:b5:05:d0:02:
98:9a:33:01:28:06:ef:ea:f2:89:7d:ea:07:11:66:
ef:65:3a:c0:8a:c8:c9:f5:7d:5f:0a:54:4a:79:86:
38:c6:61:98:28:9a:bd:eb:a1:f4:33:05:35:1b:f5:
19:94:14:25:8b:44:e9:f0:71:14:3e:bf:2a:2f:92:
8c:13:a2:65:10:55:54:e1:d2:1e:a9:63:14:17:e1:
ea:89:27:ac:d5:3a:05:8f:12:1d:8a:b8:d2:8a:b6:
3c:9e:87:8a:10:73:2d:62:86:4d:c2:90:42:d0:9e:
9a:ee:b1:63:8e:a3:2d:a1:fb:c5:50:4f:92:f8:2c:
4b:1c:d0:28:66:fc:24:46:4d:5d:6a:0c:b3:b9:e0:
fc:73:c5:3d:d2:58:c7:39:a7:73:0a:94:72:db:61:
a5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:C3:E1:6F:2F:89:97:78:02:C7:0A:C0:07:22:15:01:C0:78:9F:C7
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ac10::/32
Signature Algorithm: sha256WithRSAEncryption
a5:fa:d7:a0:aa:92:03:9f:34:2b:ca:1f:24:81:77:2c:bd:03:
e0:76:f9:48:7b:35:47:f5:99:11:a4:81:08:7c:8c:45:eb:4d:
6d:00:06:f9:53:a9:8e:55:3c:c7:d3:d0:dc:75:82:0d:ec:59:
59:e6:22:1a:d8:35:6a:24:8a:ed:5b:91:f6:05:96:0d:b0:8c:
66:53:ac:8a:8f:d7:b1:19:a6:16:56:fe:76:14:78:73:4a:3d:
c1:ab:7c:10:20:aa:90:f8:e7:20:eb:71:46:63:58:73:cd:5e:
eb:e2:36:64:ea:dd:b6:d1:94:18:3d:ae:e6:05:3c:cd:76:2f:
cd:03:96:03:a8:2d:8b:c3:3a:5d:6a:13:74:8d:ec:1a:57:97:
23:f9:e5:de:d0:b2:ff:2e:4f:02:7b:0f:3c:36:61:5a:c2:84:
5d:84:75:14:09:72:60:de:28:05:bc:c5:60:83:43:6f:2f:1c:
c2:c5:14:f8:29:3b:d9:b2:8f:05:ec:72:a8:91:5b:2d:34:73:
40:b2:fe:d2:c0:3f:90:3b:91:11:93:fb:eb:27:5c:75:8e:c3:
47:e1:40:9e:5a:94:40:71:fa:87:c2:75:74:03:1e:7c:8e:72:
2c:f4:81:5f:4a:8d:68:25:71:39:e5:2d:67:f4:98:80:72:d1:
fc:0f:85:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:52 2026 by rpki-client