Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145816.roa
File: AS145816.roa (raw, json)
Hash identifier: 8w1DV+R7QDZv5o3yGZIwjP98Ykpai7jN3qGyf2ON1IE=
Subject key identifier: 99:71:6C:CC:EF:F6:4F:10:1F:8E:8F:5B:BF:A2:F8:4E:75:19:2A:95
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 33963210EDA902C5782F0B91749C22ACCB2977CC
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145816.roa
Signing time: Mon 25 May 2026 01:19:55 +0000
ROA not before: Mon 25 May 2026 01:14:55 +0000
ROA not after: Mon 24 May 2027 01:19:55 +0000
asID: 145816
IP address blocks: 240a:ac5e::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:96:32:10:ed:a9:02:c5:78:2f:0b:91:74:9c:22:ac:cb:29:77:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:14:55 2026 GMT
Not After : May 24 01:19:55 2027 GMT
Subject: CN=99716CCCEFF64F101F8E8F5BBFA2F84E75192A95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:c5:8f:37:7a:e3:42:e0:11:9b:5c:14:17:51:
9a:1a:d7:c6:92:77:89:c4:d4:6b:7e:5f:b3:6b:37:
c7:80:cf:0b:68:59:38:0e:ad:13:9b:f6:ae:82:10:
a4:78:06:f9:1f:df:8c:24:ee:ff:c3:e6:c9:0f:89:
2e:ee:f3:7c:61:26:5b:70:05:2d:ac:dc:83:dd:6d:
d5:6a:5b:cc:4f:40:71:65:4f:03:97:2e:4f:53:4a:
84:5c:15:36:8c:8e:39:ec:db:32:d9:1a:6a:63:46:
ba:50:8a:88:bc:cb:44:11:10:5d:42:ae:9b:27:8c:
e7:00:3e:d9:d1:19:9d:c8:13:ec:65:94:de:a9:c3:
a3:cf:34:3d:19:e2:45:2b:5d:93:fa:71:4b:69:b1:
dc:dc:f3:12:98:1c:62:25:76:c8:00:02:11:49:03:
30:d6:8b:14:03:3f:9a:f1:51:d9:6c:3a:0e:4c:4c:
54:d3:4d:5b:b5:ae:59:25:ff:2a:a3:f3:39:cc:9d:
3d:57:b3:22:5a:48:96:2a:08:16:a0:eb:c3:59:37:
77:36:37:68:c7:ec:84:47:7d:a5:9b:23:8a:51:0d:
ed:f8:9f:47:f3:87:a7:d6:99:eb:a8:b0:62:cb:99:
7c:2d:3a:d4:b8:77:35:a0:01:45:5a:e0:85:a9:83:
0b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:71:6C:CC:EF:F6:4F:10:1F:8E:8F:5B:BF:A2:F8:4E:75:19:2A:95
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145816.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ac5e::/32
Signature Algorithm: sha256WithRSAEncryption
a0:70:c3:2a:7d:4a:27:b8:8d:57:b4:b4:1d:92:e3:d4:af:38:
fe:10:5e:0c:4f:0c:be:60:4c:ea:ef:c5:5d:d6:a8:97:d3:97:
9a:53:3e:11:11:41:14:78:a1:9c:97:74:e7:e0:a0:3f:c7:c0:
80:83:39:29:4e:16:e8:4d:cc:b7:44:f1:97:f8:2e:4a:1e:55:
b3:0e:a8:4c:0a:d9:78:92:8c:02:48:d8:a7:9c:74:57:d3:00:
93:73:31:46:f9:f4:b3:ad:ec:9f:aa:b4:99:83:e5:76:4b:89:
f5:bf:89:15:84:0e:54:a6:0f:fa:4b:09:8e:35:36:01:d1:49:
00:2a:9a:5b:55:c0:d2:3c:4c:0d:26:44:bd:35:b2:29:00:2c:
97:a5:d7:3a:3d:e4:2a:34:af:a4:03:f4:dd:28:99:02:00:cf:
6b:5d:bf:1b:0a:6c:91:b4:ab:4d:1d:cd:f9:7f:22:6c:d6:14:
51:d3:e7:24:e1:fc:40:3b:14:8e:c7:c2:3d:4d:e7:2b:0f:a3:
4d:c1:c8:82:55:c5:de:77:5c:1a:6d:d7:f0:8d:15:a7:81:f5:
94:d4:85:6d:95:53:53:56:bb:20:7f:6e:b1:0a:e9:48:8e:bf:
36:48:ed:15:42:4d:45:5f:f7:de:73:9f:26:41:60:db:3f:9c:
88:77:41:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:54 2026 by rpki-client