Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145789.roa
File: AS145789.roa (raw, json)
Hash identifier: pwvNmKXASb6j3M3iTy+1VsevSbDhHDL/BxH8uToT03M=
Subject key identifier: FE:9E:BF:80:CD:A4:3D:9D:47:45:30:B9:F1:F4:FD:81:6A:D2:B2:79
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3BC7047E2BDCCC6909F3D3514A71FD8B71BB991A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145789.roa
Signing time: Fri 22 May 2026 06:05:40 +0000
ROA not before: Fri 22 May 2026 06:00:40 +0000
ROA not after: Fri 21 May 2027 06:05:40 +0000
asID: 145789
IP address blocks: 240a:ac43::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:c7:04:7e:2b:dc:cc:69:09:f3:d3:51:4a:71:fd:8b:71:bb:99:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:40 2026 GMT
Not After : May 21 06:05:40 2027 GMT
Subject: CN=FE9EBF80CDA43D9D474530B9F1F4FD816AD2B279
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:a2:b9:36:cc:84:94:a5:7b:88:fb:5d:ac:e2:
5c:c3:a0:c4:3d:26:6f:5e:12:93:ee:e3:b0:ea:88:
26:52:62:7b:40:8c:ad:2f:f4:62:9b:d7:b6:a3:20:
57:63:c6:da:c4:0e:1d:73:76:87:87:a3:dd:44:fc:
92:88:8b:5b:36:04:a8:0f:51:b9:c3:93:0b:a4:34:
a3:74:47:e5:bb:ba:e4:d6:50:3d:d8:ca:98:d3:3c:
41:73:f2:73:47:af:6b:7f:5a:a0:a6:85:04:5d:e0:
67:db:f0:ab:3f:94:01:64:77:df:11:62:46:c4:a4:
4f:33:2b:a9:61:a4:c2:5c:6e:be:20:bf:aa:2b:96:
6b:b5:60:10:54:b2:f1:06:7a:5d:4a:4a:72:71:d7:
a5:a6:2a:96:f9:67:ab:8f:8b:a3:c4:88:4e:a3:6d:
b7:43:92:28:60:20:b1:14:fb:81:bf:b3:2d:19:20:
e3:67:c5:fe:18:44:0f:85:98:e2:93:d6:b8:dc:07:
e8:82:b1:0b:2f:f5:35:38:33:ab:7a:48:e1:e5:5c:
91:b2:a9:f3:ba:33:16:f1:8f:8d:da:25:96:2a:dc:
73:79:39:07:28:7e:9a:3c:ca:2a:86:c0:a2:77:a6:
f1:59:46:7b:83:e7:e9:fe:0d:76:e6:3f:6f:ee:75:
fe:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:9E:BF:80:CD:A4:3D:9D:47:45:30:B9:F1:F4:FD:81:6A:D2:B2:79
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145789.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ac43::/32
Signature Algorithm: sha256WithRSAEncryption
6e:2e:a9:f3:2c:b6:a0:17:e1:19:40:58:91:87:f8:22:1d:0d:
71:7a:8c:fa:a1:17:af:2f:b9:be:a2:36:8f:ae:8a:d7:0e:08:
13:a3:12:19:2c:5d:36:f9:22:98:65:7d:ed:d7:fc:e9:f4:c9:
b6:8a:c5:dc:22:b7:7d:f7:c8:17:28:83:64:2f:e0:eb:33:8e:
94:e2:dd:e6:ff:f7:f3:96:d7:02:a3:cb:d5:6a:fd:fa:5b:0b:
d7:78:b2:a8:eb:11:9c:8e:25:0a:80:58:70:e4:25:4c:cd:32:
33:9f:28:f2:69:b4:6c:c1:70:a2:af:a8:8d:96:de:07:ee:3d:
e7:ab:59:06:be:8d:7d:3f:ad:53:32:54:83:93:39:35:e8:ce:
e4:e7:d6:35:50:9b:e3:30:a2:e7:a3:7e:c4:7a:76:e9:68:b8:
c6:4b:44:90:5a:7d:83:47:47:6a:2b:63:f4:4c:21:c7:74:59:
ff:77:74:d3:b0:61:b2:8c:fd:a5:84:e1:3d:02:25:c5:bf:2a:
18:cd:ef:3f:b5:95:50:af:08:5f:e3:94:04:d3:ba:f8:48:eb:
92:0e:ec:4b:75:4b:f6:43:ba:8b:42:26:ce:44:d4:da:af:c7:
27:a0:cc:08:2d:63:c8:ab:9a:7b:f2:05:8b:de:d7:84:22:1d:
75:a0:cf:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:20 2026 by rpki-client