Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145766.roa
File: AS145766.roa (raw, json)
Hash identifier: pP5Nk6b636D5j5I7Gr0I3ejqiULPwZa+NY1wafcaGZE=
Subject key identifier: 43:8C:C9:CF:9C:13:5D:E6:70:25:72:9B:5A:58:02:4E:A5:7F:14:8E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3D34192476399EE9E53E6C251B1F370C4545C956
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145766.roa
Signing time: Tue 26 May 2026 06:30:38 +0000
ROA not before: Tue 26 May 2026 06:25:38 +0000
ROA not after: Tue 25 May 2027 06:30:38 +0000
asID: 145766
IP address blocks: 240a:ac2c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:34:19:24:76:39:9e:e9:e5:3e:6c:25:1b:1f:37:0c:45:45:c9:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:25:38 2026 GMT
Not After : May 25 06:30:38 2027 GMT
Subject: CN=438CC9CF9C135DE67025729B5A58024EA57F148E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e4:c9:90:be:59:06:2c:4f:7a:a4:66:a2:50:
ed:5f:e1:18:c3:db:1b:3f:e8:53:da:ba:93:06:b4:
e6:93:c3:bd:2e:0c:6b:87:df:46:89:53:13:64:04:
96:42:21:ff:64:6c:7a:23:75:75:1d:5c:d7:06:eb:
51:54:7d:f8:84:1e:56:b6:d7:12:99:cd:4f:e8:90:
d6:c0:ba:d1:eb:54:15:0e:0a:15:7c:3b:ae:97:c4:
29:7d:7a:e8:73:b6:bb:f6:4b:4f:47:45:f8:ad:76:
8d:09:17:0c:3d:02:a1:e9:52:ec:75:d6:66:32:01:
d7:0b:0e:2a:4d:96:6c:5d:62:33:3c:cb:65:76:0a:
ff:a3:3c:07:39:1f:7c:84:7f:a2:3c:05:94:88:8d:
4a:c8:3b:ed:0b:f0:a0:3c:c9:79:4a:45:7a:a7:29:
24:ff:fc:5b:69:b8:23:7e:67:91:57:90:26:48:e2:
4e:a7:60:da:c1:07:9c:d8:e8:c4:6f:e1:e8:2d:2a:
aa:a6:08:2d:be:83:2e:74:da:aa:45:01:e9:3f:ea:
fc:ba:99:f9:9c:2a:87:e3:b6:83:93:f3:fb:87:cb:
5a:4f:cd:57:1d:f5:aa:16:a3:ba:34:74:11:2a:07:
d4:ca:f3:03:84:90:34:c5:52:af:4b:36:90:4a:02:
a4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:8C:C9:CF:9C:13:5D:E6:70:25:72:9B:5A:58:02:4E:A5:7F:14:8E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145766.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ac2c::/32
Signature Algorithm: sha256WithRSAEncryption
2b:17:2c:58:7b:7b:39:58:79:a1:cd:62:ec:96:67:3d:c5:0b:
64:7c:12:08:c9:ad:89:a7:e3:e4:d2:2a:9e:20:9b:aa:ef:fa:
bf:0f:fb:c6:91:79:4f:0a:fa:e4:ea:23:7d:5d:99:e7:c7:4d:
ab:d3:6a:8e:de:e5:2e:7a:b3:98:2c:f6:9a:05:25:be:b3:cf:
42:5e:d7:d5:e8:e9:d2:e0:4e:81:0a:39:98:6b:7b:5b:54:0e:
50:69:be:31:5a:95:06:19:11:0a:d1:ad:c1:6a:da:1e:aa:09:
ae:16:56:90:07:5b:1c:34:7c:38:e1:55:d2:7c:4e:1a:ae:fe:
a0:c7:48:34:a5:c0:56:1e:c7:4b:70:7a:77:a7:bc:ef:1f:e6:
57:64:5e:dd:5e:fa:8d:d4:6a:1e:14:07:2a:cc:6c:24:be:10:
00:aa:c1:94:0c:35:b1:75:ca:b3:1b:6d:9e:6c:93:f8:be:be:
f5:60:b9:8e:09:bc:9a:ca:b5:07:25:15:ec:d6:88:56:1c:b9:
44:1d:88:69:a3:df:2f:64:b3:54:72:fc:8b:73:ba:38:65:a9:
db:d7:b7:5b:74:88:82:ed:5c:d2:76:bb:84:9c:11:18:a1:68:
7e:de:32:50:66:66:be:e2:01:19:43:4b:e3:ca:50:35:64:47:
4f:d5:9e:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:53 2026 by rpki-client