Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145777.roa
File: AS145777.roa (raw, json)
Hash identifier: wYGcE0Grfa/pHblgT6T6UZOnTwj7F7vjYZT0A+DlXmI=
Subject key identifier: DD:BA:53:17:6C:45:00:0F:BA:D7:B5:FE:A7:54:BD:4C:1A:10:DE:96
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2C540EE3B4C040EDCD9B21502CE8BE4B295B6BD6
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145777.roa
Signing time: Mon 25 May 2026 01:20:20 +0000
ROA not before: Mon 25 May 2026 01:15:20 +0000
ROA not after: Mon 24 May 2027 01:20:20 +0000
asID: 145777
IP address blocks: 240a:ac37::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:54:0e:e3:b4:c0:40:ed:cd:9b:21:50:2c:e8:be:4b:29:5b:6b:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:15:20 2026 GMT
Not After : May 24 01:20:20 2027 GMT
Subject: CN=DDBA53176C45000FBAD7B5FEA754BD4C1A10DE96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:eb:d4:49:22:85:31:7e:db:b8:41:55:80:54:
10:e8:26:b5:2f:69:f1:ef:58:74:e6:63:8e:a0:71:
5e:8c:5d:5b:96:c1:0f:6e:d3:2f:c6:5f:b7:3c:0c:
05:37:7d:fa:73:8f:78:a6:59:1f:3d:a8:99:55:73:
71:e2:d2:e0:31:e6:34:e7:8f:ba:76:aa:0c:fa:65:
e8:8b:97:8e:e0:2b:1d:a0:cd:bf:18:56:d2:42:d5:
67:a9:41:c5:b5:dd:d8:e5:3e:81:c8:ea:2a:19:4e:
71:5a:38:c2:81:7b:23:7b:5d:bc:1c:e6:b0:7b:cd:
e3:6c:3c:44:b6:0f:82:3f:98:d4:d6:63:e8:b8:4c:
0f:18:3b:57:41:cf:61:50:c6:9e:9c:b7:2f:98:df:
f5:b3:9c:67:0b:dc:d4:ba:4a:bc:fa:6b:cd:44:cd:
ae:de:62:ad:50:0d:01:48:fb:64:ef:55:c4:9e:83:
7e:0a:04:6b:5f:bb:ce:13:f3:c7:5a:d3:0b:8b:0b:
e3:70:62:f3:b1:22:28:59:01:fe:f9:67:7d:52:39:
e1:b0:57:99:d8:57:8b:20:a8:0b:7e:2b:3f:be:44:
84:42:be:c5:5b:ee:fe:54:e3:a6:e8:c6:07:68:82:
c9:6d:06:84:4f:b9:9d:fd:49:91:90:9d:81:9b:14:
ff:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:BA:53:17:6C:45:00:0F:BA:D7:B5:FE:A7:54:BD:4C:1A:10:DE:96
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145777.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ac37::/32
Signature Algorithm: sha256WithRSAEncryption
84:9e:dc:78:6a:0a:78:47:ae:15:43:35:41:8b:ef:4d:8c:74:
f6:f1:4d:ba:44:d6:7e:b9:b2:43:48:bf:ad:2a:ae:65:b9:a2:
36:44:7a:df:aa:7a:d7:2f:c7:c0:bb:b1:cd:dc:40:49:35:be:
43:47:29:a9:2e:12:bb:aa:4d:a5:b1:02:48:51:f3:9b:cf:eb:
91:2a:f2:54:af:36:c7:ca:03:63:3e:c3:0b:79:38:5b:50:de:
24:6f:53:1d:62:4d:19:60:c9:e8:e1:99:e6:fb:1d:8c:d1:5f:
1d:48:d5:25:9e:be:3b:15:56:71:a0:63:da:ee:56:11:c1:8b:
ea:f3:74:15:8c:40:7a:3d:c2:7a:16:94:36:d0:15:1e:51:c9:
0c:56:db:d1:a3:1d:71:e8:89:a2:af:76:fe:72:5f:55:85:5c:
23:3a:88:72:96:8d:a7:53:c8:04:74:0c:bd:b8:e6:49:d8:61:
d2:5c:ed:4a:7d:1c:8c:81:14:4f:7e:57:89:14:5a:3b:6f:a4:
ac:4b:b5:9e:b9:24:ef:65:2c:72:c1:f8:02:2a:db:b3:99:52:
c3:d2:9d:7b:43:d9:6d:e8:38:f4:80:d8:e1:dd:42:0c:06:8b:
ce:0f:61:27:81:60:fc:2b:92:4c:b0:87:7e:41:de:2a:a8:fe:
4f:08:5b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:58 2026 by rpki-client