Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145770.roa
File: AS145770.roa (raw, json)
Hash identifier: 6bra93i2tp1xkG6q5UdvelF6/XPj2s5ZVFXFqjmroIc=
Subject key identifier: 5C:BF:EF:73:B4:E3:AA:BF:DE:66:03:4F:83:3F:D7:7D:17:11:A5:1D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 78619666D17D68259282AF8D5E7DB75CFB1F10BE
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145770.roa
Signing time: Fri 22 May 2026 07:08:45 +0000
ROA not before: Fri 22 May 2026 07:03:45 +0000
ROA not after: Fri 21 May 2027 07:08:45 +0000
asID: 145770
IP address blocks: 240a:ac30::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:61:96:66:d1:7d:68:25:92:82:af:8d:5e:7d:b7:5c:fb:1f:10:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:03:45 2026 GMT
Not After : May 21 07:08:45 2027 GMT
Subject: CN=5CBFEF73B4E3AABFDE66034F833FD77D1711A51D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:01:2d:3f:10:15:2a:78:73:b0:32:86:10:97:
7a:a4:9c:e9:e6:19:6c:63:51:84:ae:9c:13:e0:01:
11:e1:11:68:69:15:d0:ae:e7:50:06:7d:e3:8c:40:
af:39:50:c1:5d:d3:b3:e7:bd:23:c5:38:11:13:ea:
01:58:c5:07:22:76:40:f8:e5:5e:c8:91:58:9a:ad:
ca:6e:47:0f:5a:ba:7f:0c:10:09:ef:ca:b9:47:4f:
b0:89:3e:14:e1:e8:dc:9c:30:1c:5e:a7:c6:9e:26:
8f:c7:11:13:5a:7b:31:72:13:b8:dc:c7:d6:46:15:
6e:4a:1a:9f:6f:c8:bb:cf:59:db:0f:c4:c9:0e:c7:
f2:09:8c:a7:46:e0:17:4e:7a:c8:83:81:ae:ff:7c:
52:9a:30:15:00:ca:18:fe:23:77:e4:b7:e9:3d:a4:
66:54:75:4f:48:0c:9f:06:9a:97:69:5b:fc:ba:ec:
49:1b:88:e5:7d:27:78:a8:ee:87:8c:de:c7:15:fa:
54:80:d0:46:41:c0:1a:8e:0b:09:25:58:a0:a2:9e:
21:4d:2e:8b:b1:6d:67:a0:3f:35:64:c2:2f:51:dc:
33:fb:d0:f4:62:60:c6:e1:cc:a7:01:ee:c5:aa:d0:
74:e1:30:71:11:2e:08:54:db:a2:ac:e8:4f:86:75:
3d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:BF:EF:73:B4:E3:AA:BF:DE:66:03:4F:83:3F:D7:7D:17:11:A5:1D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145770.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ac30::/32
Signature Algorithm: sha256WithRSAEncryption
1d:f5:7f:02:28:d0:b5:60:39:50:09:c9:b5:79:ae:2b:58:23:
ea:f1:b8:ad:06:eb:6e:4d:4f:db:b8:ac:b3:9a:20:9d:d8:79:
de:2b:c5:6a:5b:5b:1d:b6:28:e7:fd:4e:05:13:ac:19:16:b1:
bc:87:8b:c6:22:1d:f5:66:b2:12:cf:82:3b:2f:ce:4f:c6:c9:
e9:bb:e3:1f:ea:57:ea:9b:f8:f1:06:b4:f8:07:e3:f3:44:68:
cb:2e:6f:b1:a5:24:6a:67:f9:98:92:3f:da:94:34:2e:85:82:
96:53:dc:3c:c7:87:8b:ef:5e:93:99:52:87:da:69:a9:35:f0:
de:cc:12:a8:3f:62:5f:80:42:0d:6c:78:63:ae:6b:e7:d4:fb:
4f:89:53:cf:cb:bd:79:9c:78:ef:35:21:31:a0:f7:56:9a:b9:
b6:7e:ce:d0:3e:ef:a9:d7:2b:2b:cb:dc:d5:69:6a:02:0b:d3:
11:06:10:a8:9b:24:20:23:e8:ac:d7:0a:a5:22:77:1f:c2:0c:
93:d7:b6:f4:01:9b:d2:00:4b:e5:a5:f7:61:c9:39:33:b6:0f:
e1:18:26:4a:62:6b:73:d5:82:79:dd:7f:58:24:46:77:cb:d1:
da:80:e7:af:54:f8:ab:e9:13:c5:93:ee:33:f1:4b:55:84:10:
0e:cf:da:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:20 2026 by rpki-client