Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145823.roa
File: AS145823.roa (raw, json)
Hash identifier: soGO4we8sUzUEE/fAHOCpjkqAFX4H6kFvKPo9PIq8FQ=
Subject key identifier: 14:69:3E:30:65:25:64:1D:9B:A9:9E:55:79:81:60:56:4E:48:01:42
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3B9B1451C7D11B24B4989BD0F2997690647C4648
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145823.roa
Signing time: Mon 25 May 2026 01:51:18 +0000
ROA not before: Mon 25 May 2026 01:46:18 +0000
ROA not after: Mon 24 May 2027 01:51:18 +0000
asID: 145823
IP address blocks: 240a:ac65::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:9b:14:51:c7:d1:1b:24:b4:98:9b:d0:f2:99:76:90:64:7c:46:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:46:18 2026 GMT
Not After : May 24 01:51:18 2027 GMT
Subject: CN=14693E306525641D9BA99E55798160564E480142
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b3:1b:b8:75:74:11:76:c4:04:88:f8:56:69:
ca:1b:0a:93:7a:74:7d:4c:ea:0a:d2:f1:4b:55:18:
b4:96:9e:9c:ae:44:0b:7b:38:fb:c2:e8:cd:9b:e9:
3b:db:ac:17:56:29:1c:d7:d9:1b:94:1f:e4:f1:05:
20:c7:e3:77:df:f4:ee:f0:b8:07:d5:ad:9f:50:2c:
e1:4a:bc:71:8d:80:fa:01:1e:77:21:be:0d:d2:19:
ab:8c:45:40:f1:c6:e3:2a:3e:b1:e2:10:48:26:a7:
48:2f:e0:7c:b3:65:a4:35:c4:32:e7:29:cb:54:fe:
c7:ff:2d:57:89:44:d2:ae:bf:2a:79:8c:64:8f:a9:
15:ec:62:bf:df:a4:e6:bf:e7:3e:19:38:c7:e0:4d:
5f:90:cd:5e:55:f9:ca:05:80:a6:f1:76:df:7b:5f:
f8:c1:23:08:5f:9e:26:83:57:cc:ce:5f:af:88:ca:
04:a0:10:4b:dd:4f:17:a0:dc:44:89:53:db:bf:b6:
56:b1:75:8c:f8:17:df:d3:78:aa:e1:84:0f:fd:9f:
c6:50:6d:a7:f2:4d:ae:6f:44:4a:4b:7a:00:95:bd:
2d:e0:9a:11:f3:f8:81:c9:1e:7d:04:7f:f2:ec:ec:
90:be:cc:46:35:97:db:95:f6:f3:81:e6:50:60:57:
a5:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:69:3E:30:65:25:64:1D:9B:A9:9E:55:79:81:60:56:4E:48:01:42
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145823.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ac65::/32
Signature Algorithm: sha256WithRSAEncryption
7a:1a:2d:8f:d1:ac:79:f3:96:c2:c4:0b:53:17:73:ad:fc:3d:
b8:31:46:1f:95:a3:78:2c:64:b2:3c:08:7b:28:83:5f:99:ab:
6a:53:52:7c:4b:a3:9e:7b:eb:99:9e:f0:42:cb:16:26:eb:d5:
c8:cd:f6:31:a4:4c:32:5a:5b:6c:3b:85:3e:2c:7d:60:44:d1:
6d:98:64:f1:98:12:d6:76:4a:5c:86:99:12:88:8f:f0:2d:d5:
86:4d:d5:ae:d4:a6:f6:a2:07:71:57:0f:96:de:74:4b:14:17:
85:0e:6e:51:95:09:ef:cd:3a:2b:8a:f4:9d:bd:ad:26:32:86:
fc:02:56:92:d5:95:11:df:f5:c4:2d:b6:38:9d:2a:8b:22:b1:
b0:9c:61:69:b1:5c:a0:e9:33:83:e1:de:60:e9:49:20:2a:9e:
fb:8b:ce:55:72:b0:34:60:d3:d0:23:56:1e:b3:7e:92:fd:f9:
87:88:84:a1:a6:e1:96:f7:fa:77:ec:c6:bc:0e:53:35:c0:32:
c6:98:b9:61:a7:45:1a:3a:78:a2:49:e1:34:ac:17:f0:40:3e:
10:8f:82:c0:d5:51:41:d6:bb:9a:06:58:26:7b:5d:66:97:74:
b9:5a:f4:76:d0:56:ac:4f:2e:5b:db:25:50:0a:31:f5:4f:01:
99:7b:dc:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:23 2026 by rpki-client