Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145822.roa
File: AS145822.roa (raw, json)
Hash identifier: SUAwHEp4ThA+Q79CvC9Deko6ma83Qeygl5cU+kKwBvs=
Subject key identifier: 07:59:ED:CA:14:45:F8:53:7F:DF:CC:29:F5:F4:DD:DD:31:79:11:3C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 325AE13A61C080E9CF038CFE34D98BEA05AACD1D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145822.roa
Signing time: Tue 26 May 2026 06:31:03 +0000
ROA not before: Tue 26 May 2026 06:26:03 +0000
ROA not after: Tue 25 May 2027 06:31:03 +0000
asID: 145822
IP address blocks: 240a:ac64::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:5a:e1:3a:61:c0:80:e9:cf:03:8c:fe:34:d9:8b:ea:05:aa:cd:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:26:03 2026 GMT
Not After : May 25 06:31:03 2027 GMT
Subject: CN=0759EDCA1445F8537FDFCC29F5F4DDDD3179113C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:30:a4:41:c3:2d:82:d3:34:be:b8:0b:f6:0f:
14:b6:b5:80:a1:e1:bc:ea:3a:f8:dc:60:01:96:de:
46:21:f5:a6:5a:e7:77:81:d6:27:1d:60:91:fb:0b:
cc:ae:3d:4b:85:7d:f1:4f:b5:4a:ed:bc:a2:6a:75:
c2:14:8f:35:17:06:36:6f:8d:35:55:9c:d6:32:e8:
bf:50:96:e7:d3:75:5c:b1:d3:3c:51:af:bc:17:75:
bf:85:aa:84:6e:cc:bc:6e:f0:17:c8:a4:b7:27:86:
54:55:57:c1:af:7f:c5:1f:46:41:35:37:59:ee:ba:
69:a2:37:9a:9b:ed:19:2b:3d:d4:6b:08:6d:e9:6f:
49:04:2c:b7:e8:f2:71:57:5e:88:78:72:33:9c:33:
23:da:1b:64:d7:ca:4b:dc:87:6b:13:7a:95:44:06:
12:c8:53:a4:63:0f:0f:93:d5:b0:61:28:f1:ee:41:
cf:ab:49:ea:a0:b8:1e:57:a5:88:7d:a2:ae:5a:12:
dc:64:98:3b:fa:cc:ca:9d:a4:e3:92:3f:61:4a:68:
b7:88:80:d4:61:05:6d:90:7d:6f:b6:9a:8e:1f:b0:
6d:63:58:e1:89:51:95:f8:d5:b8:a1:4b:c7:5b:9a:
08:b8:74:0a:84:a5:42:ff:6d:92:f4:9d:e0:b4:37:
26:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:59:ED:CA:14:45:F8:53:7F:DF:CC:29:F5:F4:DD:DD:31:79:11:3C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145822.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ac64::/32
Signature Algorithm: sha256WithRSAEncryption
95:d5:80:06:92:a0:06:ba:71:33:cd:2c:45:19:02:d3:c9:d1:
04:6e:55:97:e1:0d:80:a0:b0:56:84:64:61:6e:d2:cc:6f:39:
9b:df:ef:b1:0f:a7:23:2e:84:93:50:0d:2d:5f:19:4b:a3:d2:
83:d6:17:d1:8c:92:c2:3b:b1:97:20:fa:c1:f2:f5:82:63:5e:
0f:74:2b:0f:82:51:8a:c5:95:39:14:48:6b:d5:6c:c3:5f:33:
9e:0f:d2:3a:54:1e:bf:8e:4f:a1:fd:6d:88:a5:40:20:1e:23:
6b:fd:e8:cf:19:9a:c3:2b:ee:3c:27:59:df:01:cc:cc:42:db:
eb:e5:2c:bf:86:23:ca:76:c8:ac:3f:bf:a8:ba:89:16:11:fc:
7e:d9:60:3e:1a:4e:17:05:be:6b:51:f3:ea:f7:fd:14:52:3c:
b4:a5:3a:23:b3:dc:ee:6c:1a:7b:bb:7c:cb:46:ee:c9:be:91:
8d:5b:f9:23:b3:0b:4c:6e:94:b9:91:c6:79:36:d9:e7:83:05:
64:52:65:09:6d:73:fe:25:83:30:be:4e:95:7d:a7:94:c8:4d:
9e:db:33:a6:40:2a:f5:a7:b0:e1:03:18:55:bd:25:8b:85:fe:
9d:42:fb:2e:64:30:96:6d:89:f4:cc:40:f8:30:21:49:e0:4c:
d2:76:ee:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:53 2026 by rpki-client