Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145785.roa
File: AS145785.roa (raw, json)
Hash identifier: Ckj+9ve+8z+oTDNLePp+lkXmG0zv8wnLeM9MLPc9jlU=
Subject key identifier: AA:71:C5:BE:26:FB:EA:30:51:6B:B3:92:30:76:9E:5A:32:AE:7C:10
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 27C59EC8547E741D5C0CCC470D31A545A93F7BFD
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145785.roa
Signing time: Tue 26 May 2026 08:53:00 +0000
ROA not before: Tue 26 May 2026 08:48:00 +0000
ROA not after: Tue 25 May 2027 08:53:00 +0000
asID: 145785
IP address blocks: 240a:ac3f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:c5:9e:c8:54:7e:74:1d:5c:0c:cc:47:0d:31:a5:45:a9:3f:7b:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 08:48:00 2026 GMT
Not After : May 25 08:53:00 2027 GMT
Subject: CN=AA71C5BE26FBEA30516BB39230769E5A32AE7C10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:57:a2:4c:d6:3f:e6:50:00:bc:1e:50:42:80:
08:7f:01:40:90:c7:22:4f:27:5f:05:6e:73:35:2c:
14:9f:cd:ee:6c:79:e6:09:02:15:7c:5c:f7:80:42:
2d:33:e3:11:13:9d:e9:c8:19:cc:61:79:b7:0d:8b:
de:09:bc:41:4f:1e:8e:3b:6a:d5:c9:08:2d:2d:98:
00:82:53:d5:28:1d:15:22:f8:4b:bb:90:23:b9:e4:
ad:81:e9:17:6f:da:6b:73:70:c2:fe:15:9c:63:b0:
a3:04:60:fb:41:0c:cf:04:67:be:1b:28:ac:0a:84:
0c:0e:d7:78:66:9e:43:42:46:f7:fa:60:09:b6:52:
26:1d:01:1a:5f:fe:76:75:9b:1f:5a:8a:cf:05:60:
28:5d:dd:fb:a7:f4:86:90:cd:1e:ae:d1:2d:21:a5:
e4:13:09:e1:31:11:69:47:4e:d6:7b:00:c8:cc:60:
ac:d1:4b:4b:0b:54:38:27:07:fc:fa:5c:d1:6c:f9:
6a:ab:2e:fd:22:b7:a6:46:04:de:ed:81:df:19:d1:
2f:62:ac:51:b5:00:23:9a:d2:41:1d:95:cd:a3:5b:
71:40:e7:c4:ea:42:b1:23:be:e0:d0:71:27:22:46:
56:f7:7a:1b:95:af:99:78:97:17:70:18:15:7c:9a:
e8:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:71:C5:BE:26:FB:EA:30:51:6B:B3:92:30:76:9E:5A:32:AE:7C:10
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145785.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ac3f::/32
Signature Algorithm: sha256WithRSAEncryption
24:e1:df:82:13:e3:d9:c5:b8:f3:59:d9:36:24:0e:42:c5:d9:
af:06:31:19:77:74:04:45:c3:01:33:b5:5a:3f:8a:8e:d1:e7:
03:1d:0c:ef:db:43:b3:6c:17:7b:6e:c9:d1:01:3f:ca:38:d1:
fc:1d:f0:0a:d0:27:dc:2c:c6:2e:c5:47:f6:6b:12:78:5d:84:
29:0e:91:af:2d:48:84:3c:b8:ec:34:c7:ee:11:7f:78:09:e7:
f3:1b:49:7e:9b:86:70:74:4e:a3:14:5a:e2:9f:73:9f:3c:5b:
49:df:8b:bb:06:5f:f1:22:24:37:be:95:4e:11:23:e6:d4:1a:
e6:1e:7c:2b:1f:30:06:17:10:24:06:ca:fb:3d:1d:30:ef:43:
44:d8:45:de:de:1e:8b:22:d0:e2:d6:0f:55:bb:3c:df:bf:c7:
42:b8:95:45:38:03:07:d7:a7:11:b7:f4:4f:46:bd:78:20:78:
32:93:fc:20:cb:5c:1b:22:da:c4:5e:9b:c3:37:3a:75:4b:70:
38:bb:e6:bb:cb:e9:e0:57:56:31:44:8d:8a:bb:a0:c9:d5:d4:
89:60:78:a8:31:02:5e:52:35:70:f8:5a:81:e1:40:4b:9b:e7:
44:7c:ef:e4:47:44:a5:d9:49:24:e9:87:57:26:d2:3d:18:de:
a4:a6:fa:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:09 2026 by rpki-client