Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145807.roa
File: AS145807.roa (raw, json)
Hash identifier: +V3SsDtN/lTMIIp/n5QR1ez7qg7sMVzzKfIm5bF8ndU=
Subject key identifier: 65:0A:69:53:84:62:6B:27:CF:A1:16:A2:DB:22:6D:48:29:28:E9:47
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 78E989736229223D3BC5E98CE38F6FC8E7C2DDD1
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145807.roa
Signing time: Mon 25 May 2026 02:22:13 +0000
ROA not before: Mon 25 May 2026 02:17:13 +0000
ROA not after: Mon 24 May 2027 02:22:13 +0000
asID: 145807
IP address blocks: 240a:ac55::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:e9:89:73:62:29:22:3d:3b:c5:e9:8c:e3:8f:6f:c8:e7:c2:dd:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:13 2026 GMT
Not After : May 24 02:22:13 2027 GMT
Subject: CN=650A695384626B27CFA116A2DB226D482928E947
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:67:c3:15:47:50:41:b4:23:93:95:e5:a0:40:
47:76:04:89:0a:bc:36:b9:0a:7f:ba:c7:b6:75:c9:
3a:31:e6:f0:3d:59:5a:dc:68:a6:ef:bd:4b:06:92:
06:ad:3c:4c:6a:c1:af:b7:c6:e5:ef:ec:c8:4b:97:
bb:17:36:6c:83:e0:e3:9d:88:9c:3e:b7:64:12:da:
02:a6:9e:c4:f7:af:67:6f:52:e4:72:3b:49:eb:88:
23:15:41:d6:2f:0e:33:3b:51:43:23:c9:95:cd:c7:
1c:2c:44:90:43:d8:9c:9b:cb:21:46:68:9c:99:59:
8d:a5:73:fd:33:2e:1d:15:da:98:1e:9d:e8:fd:aa:
91:43:07:a1:bc:c2:6e:e8:50:29:d6:37:76:1f:2f:
32:d4:ab:12:0c:a7:0c:03:34:b0:69:e2:fa:a3:68:
a6:fa:b0:da:c0:3e:da:7a:b9:af:09:84:af:f0:66:
59:a0:5c:0d:d5:4d:ae:ed:02:40:24:7d:0c:5c:3d:
f4:98:ab:1d:6c:2c:06:58:82:84:70:29:1f:28:6c:
61:77:be:cc:82:04:3d:37:95:16:89:75:32:f0:a8:
2a:9a:5b:4e:8c:cb:6c:f1:ca:9e:14:19:ad:8a:11:
2a:46:6e:bc:c2:af:79:bb:45:d2:b5:f4:81:e9:70:
f6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:0A:69:53:84:62:6B:27:CF:A1:16:A2:DB:22:6D:48:29:28:E9:47
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145807.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ac55::/32
Signature Algorithm: sha256WithRSAEncryption
a9:2d:00:f7:85:e2:99:d8:43:4d:90:65:fa:d0:c5:ef:5a:68:
e2:9e:15:e5:25:8f:a9:73:7c:fa:37:a3:2e:5c:33:f3:c6:fa:
97:23:a9:1a:ed:f1:64:1b:c4:86:27:46:73:a3:68:3d:30:a2:
de:37:33:df:9c:9a:80:6d:08:1f:e5:a1:c7:52:b1:52:af:6f:
e5:5a:5c:62:69:02:5b:b6:4a:e0:b3:62:f9:56:68:4d:be:c4:
cf:2a:15:4d:44:6f:a5:f5:05:37:8e:f0:52:42:58:cb:cf:3f:
33:c9:d4:15:d6:58:00:3c:bf:58:c1:ec:f1:86:22:f9:92:6c:
01:00:e6:d7:08:2d:72:5b:a0:90:22:0e:7b:f1:9c:f6:09:fc:
11:5f:89:0b:58:f7:65:68:c3:97:81:28:69:9e:0f:a2:b1:11:
d8:a6:a4:c6:df:ad:4a:45:db:bb:84:cd:84:91:94:20:cc:f0:
85:c4:2e:15:80:d4:f3:e6:dd:01:65:a0:75:ab:e4:3c:7b:21:
aa:59:37:fa:7c:90:d3:b2:ce:64:67:5d:79:e2:f1:b7:75:b1:
73:93:0d:2d:74:37:a5:54:d5:08:83:85:38:1c:24:07:14:09:
c7:da:3d:95:47:ed:f4:99:d1:41:20:a3:2c:79:b2:fb:d4:0b:
ab:29:d4:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:32 2026 by rpki-client