Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145749.roa
File: AS145749.roa (raw, json)
Hash identifier: DhIOr1qjJHjVOcRLVJLGvaaSL6UYMCJK9Jjd6zoZyTc=
Subject key identifier: 82:E0:66:AC:5E:66:07:39:9C:3C:C7:CD:A6:F2:38:7C:AC:C8:70:1F
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 30C10760647789634C99AF9C1357E0A61DFF481E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145749.roa
Signing time: Fri 22 May 2026 06:05:40 +0000
ROA not before: Fri 22 May 2026 06:00:40 +0000
ROA not after: Fri 21 May 2027 06:05:40 +0000
asID: 145749
IP address blocks: 240a:ac1b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:c1:07:60:64:77:89:63:4c:99:af:9c:13:57:e0:a6:1d:ff:48:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:40 2026 GMT
Not After : May 21 06:05:40 2027 GMT
Subject: CN=82E066AC5E6607399C3CC7CDA6F2387CACC8701F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a2:2e:f3:93:c0:f6:f9:0b:9f:7c:7e:86:07:
75:dd:61:81:42:bc:69:7e:44:57:81:4d:60:40:d3:
85:ea:ef:14:ba:3f:0c:a3:22:f2:18:ba:01:9a:14:
b4:2d:d7:8b:37:5c:ca:3b:18:e7:b6:91:0a:3b:9e:
77:dc:4a:3d:6a:e0:02:41:c4:98:79:c7:46:5e:dc:
21:44:3b:48:b7:19:68:b9:b5:65:3b:32:69:b0:11:
a8:5a:21:26:cf:26:ee:ee:a4:19:a9:a2:db:f7:9c:
5f:96:76:35:17:3a:cb:eb:bf:d4:cb:bc:bb:f5:7f:
6b:3b:14:c5:6e:b6:a7:21:84:17:8b:83:55:51:fd:
df:90:a4:ae:86:0e:36:5f:c9:4c:f7:bb:ad:fe:63:
33:18:51:5c:6d:96:0d:88:32:20:08:6f:92:0b:91:
e3:42:6b:99:eb:92:5d:1f:dd:e9:6c:4e:5d:24:9b:
5d:e3:0d:ee:a6:88:96:a6:10:dc:47:56:60:f4:56:
ce:b9:c5:cc:08:8c:b3:35:fa:2a:6a:93:7f:0d:30:
91:53:f2:6c:53:d7:f3:c2:2f:c2:4f:56:fb:a8:9c:
5c:19:3f:c2:f5:01:1a:99:15:92:34:d3:1b:52:b3:
73:74:b8:51:07:9e:c1:6d:9f:f3:f6:cc:80:f1:2d:
ec:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:E0:66:AC:5E:66:07:39:9C:3C:C7:CD:A6:F2:38:7C:AC:C8:70:1F
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145749.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ac1b::/32
Signature Algorithm: sha256WithRSAEncryption
a9:d2:84:9b:b5:86:7c:40:b3:d9:57:6a:0b:96:c5:5d:0c:ac:
20:63:c5:87:9f:06:6a:8d:a3:f0:61:ab:4d:33:d8:99:ea:cc:
d4:60:df:02:24:b3:73:56:1e:54:63:99:0e:4b:59:cd:d1:ad:
26:85:dc:84:13:90:ce:4d:0b:c5:b8:1c:91:d6:72:ca:15:1c:
b3:12:d3:d7:7f:7f:d5:1e:fa:02:0b:88:2e:b0:9d:6e:69:dd:
07:23:09:98:0f:12:9a:29:a5:64:02:6f:f3:1b:0f:08:f4:9a:
39:2b:8b:d4:bd:c6:29:58:f8:03:74:60:38:4a:fd:07:a7:ac:
c0:3a:c5:89:6d:22:b6:a1:9d:96:ee:c0:b5:e7:8d:0d:e0:f4:
96:01:32:54:9b:4b:45:1b:9a:d4:da:d6:86:41:60:0f:c2:3b:
20:87:e3:85:8d:11:c9:26:12:c4:36:c5:90:fc:b2:2c:45:a0:
44:ea:2b:31:6f:79:ca:35:56:57:3f:4a:66:53:9d:a0:6e:8f:
aa:10:b8:af:31:6d:f5:89:96:a5:88:66:e9:60:0a:95:28:1e:
de:1c:7c:a5:ba:1c:41:d1:d5:58:76:cf:ac:b3:63:51:aa:1a:
74:c4:3c:be:4c:ba:67:ed:c1:5a:d2:21:c5:a4:13:22:3f:87:
68:38:14:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:04 2026 by rpki-client