Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145797.roa
File: AS145797.roa (raw, json)
Hash identifier: KOGoHINnJF0Mg7A3mdnEFcG2cUTx0cBnkvIOIiJZEl0=
Subject key identifier: C7:A3:D7:62:89:E7:4E:C7:99:55:AB:DD:C8:3B:86:AD:92:71:E3:BC
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 31E5DE5BAE85EABB2707F41E100D0D34981C12BF
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145797.roa
Signing time: Fri 22 May 2026 04:26:50 +0000
ROA not before: Fri 22 May 2026 04:21:50 +0000
ROA not after: Fri 21 May 2027 04:26:50 +0000
asID: 145797
IP address blocks: 240a:ac4b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:e5:de:5b:ae:85:ea:bb:27:07:f4:1e:10:0d:0d:34:98:1c:12:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:21:50 2026 GMT
Not After : May 21 04:26:50 2027 GMT
Subject: CN=C7A3D76289E74EC79955ABDDC83B86AD9271E3BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:91:bc:ed:61:18:12:40:7e:07:b9:68:bc:07:
52:0a:19:29:b8:34:49:2a:f9:22:62:0c:a9:b1:d8:
a9:f1:29:41:ec:10:6a:bf:ef:d7:93:89:ac:30:6f:
11:5c:06:75:bc:db:7d:96:0e:d7:3a:d8:e5:72:f6:
db:9a:4f:24:62:66:f4:a7:d7:d5:74:6a:91:18:8b:
d2:c8:ba:df:8d:a1:07:d4:2d:cf:8f:ba:89:f1:07:
7c:49:6c:f3:09:c8:1a:b3:d7:40:4f:76:ff:a9:43:
88:1a:82:09:8d:18:f3:29:68:eb:fd:a1:e3:17:7e:
a4:70:99:42:53:1d:12:fd:2e:15:d5:d4:26:7d:60:
c3:a1:d9:94:44:b4:f4:73:3f:c8:c8:c8:e7:7c:2e:
55:e2:e8:65:df:aa:89:86:b9:94:44:01:b5:bf:1d:
7e:f2:f4:ef:15:79:40:b0:ba:fd:c8:5f:c6:45:f9:
ad:6f:bb:a2:25:f5:4d:06:90:87:ba:ab:ff:89:2b:
7f:bc:e9:09:a7:66:12:99:d3:61:ac:8b:65:34:29:
5f:49:9b:eb:72:c5:88:12:5d:80:1d:96:97:fa:ca:
c0:1f:e2:da:5d:3e:fb:e7:fe:7e:28:a7:e2:4d:ef:
89:83:57:25:53:bd:40:bd:f4:d8:bb:64:b8:e4:3f:
2b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A3:D7:62:89:E7:4E:C7:99:55:AB:DD:C8:3B:86:AD:92:71:E3:BC
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145797.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ac4b::/32
Signature Algorithm: sha256WithRSAEncryption
25:a2:1a:91:9d:17:ab:46:d6:5b:08:7f:4b:c7:79:79:0a:b2:
e0:85:57:3c:31:18:56:1a:0b:54:b1:dd:b2:c8:04:c7:e7:8b:
46:41:7a:f3:5c:99:28:7f:fe:e9:c7:a3:22:81:35:83:22:c2:
6e:c8:a6:ef:e7:da:4f:f5:42:c5:9e:03:ad:69:ee:4d:c3:4c:
54:ac:98:09:4c:1c:bf:f3:39:e6:13:f9:5e:76:53:01:c5:99:
ad:e9:4f:b0:7a:5f:63:61:04:35:17:6e:e9:42:f3:22:0e:3f:
b7:0a:e1:a9:c9:8b:61:26:0e:76:c8:35:e8:7b:fc:c4:85:b3:
d5:e2:dd:3d:69:b2:f3:cf:eb:0b:32:c0:4d:c5:34:d2:8d:d7:
99:54:f8:1d:a2:4f:60:cc:59:32:f1:e8:a6:7e:68:c3:38:03:
62:3d:19:82:f3:84:4f:b0:f0:3f:d4:44:49:4b:00:44:14:eb:
6f:eb:86:24:d2:99:a7:23:8e:36:9b:53:c9:ed:14:1f:30:32:
a6:2b:e2:4d:ff:1a:07:33:7f:47:61:65:3c:b3:db:3e:ea:3e:
f4:2c:ca:f2:07:82:a5:a1:56:8c:4a:b4:0f:0c:76:61:3c:10:
b0:a7:3b:5d:0c:37:2a:f1:39:7b:32:69:68:7d:5f:f5:c5:c6:
8e:8b:29:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:17 2026 by rpki-client