Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145825.roa
File: AS145825.roa (raw, json)
Hash identifier: TCZRJsv+h4MMiwQVpaRo79JTNNb9Hpl3UNy1zRF0lZU=
Subject key identifier: D8:A9:D0:E7:A0:A6:67:61:91:B4:4B:16:A5:75:98:51:10:E3:7C:42
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4B34BD9411198665EE9A027310194B2067C0AAEC
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145825.roa
Signing time: Tue 26 May 2026 02:35:01 +0000
ROA not before: Tue 26 May 2026 02:30:01 +0000
ROA not after: Tue 25 May 2027 02:35:01 +0000
asID: 145825
IP address blocks: 240a:ac67::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:34:bd:94:11:19:86:65:ee:9a:02:73:10:19:4b:20:67:c0:aa:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:30:01 2026 GMT
Not After : May 25 02:35:01 2027 GMT
Subject: CN=D8A9D0E7A0A6676191B44B16A575985110E37C42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ad:1a:83:48:33:2d:9d:d6:b1:83:45:7f:c1:
0b:58:78:60:0f:cc:c8:b0:ff:b4:e8:a4:bd:22:6e:
5d:45:88:1e:4b:c5:58:e9:d0:a2:3a:71:b2:ab:75:
1f:1c:f5:f2:85:e4:89:88:94:10:08:95:bf:38:88:
b6:5c:27:55:5c:c6:a5:0a:cd:0d:1f:7c:29:3a:20:
1c:40:71:93:ee:09:53:bc:f9:47:72:09:07:d5:e6:
bc:0a:ef:b7:92:63:92:a4:91:76:d3:b1:a2:a2:b4:
50:4b:f4:95:a3:50:5e:d1:65:6c:01:fb:74:4a:27:
ca:50:2d:f9:0c:9b:f5:fe:f3:b4:79:b9:bb:8c:f9:
2d:f1:88:91:40:2a:bd:29:ed:f1:e4:f7:4c:07:bc:
68:f2:ab:9d:85:61:94:d7:e1:61:b8:05:61:dc:a8:
56:23:d7:fe:03:b5:bd:29:52:4b:9e:d4:b0:74:ad:
88:19:fc:36:5a:90:a7:b3:91:80:6c:72:8f:04:e1:
e9:32:1a:d3:3f:93:2f:ad:7d:9a:d5:76:ae:89:89:
45:6a:e9:44:5b:5d:db:71:7c:59:12:f7:9c:64:06:
6b:0b:d6:a3:3d:82:91:8d:3c:cb:b3:0b:e6:ee:a4:
40:1c:3b:4f:21:88:e2:62:e0:0c:89:d1:a4:7a:07:
75:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:A9:D0:E7:A0:A6:67:61:91:B4:4B:16:A5:75:98:51:10:E3:7C:42
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145825.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ac67::/32
Signature Algorithm: sha256WithRSAEncryption
bb:a2:c9:f2:5f:79:e5:c9:fe:57:dc:e4:50:ac:58:bb:52:76:
a5:53:2a:72:29:7f:72:ec:dc:0f:4c:53:eb:f4:d2:38:93:24:
70:c7:46:e9:95:cf:38:bb:e5:66:4f:bf:b6:2c:55:44:68:f6:
33:97:dc:8f:07:9f:f5:07:f1:a8:03:74:0c:bf:6d:8a:45:21:
e0:5b:b9:2b:eb:c5:40:2e:19:5b:de:de:b8:3c:d7:8d:d0:f8:
c6:56:b4:20:e7:01:57:eb:7d:9e:88:fd:00:e0:cf:13:a2:e2:
27:1d:99:ae:6f:ba:d4:f1:d8:70:e0:63:94:58:1d:7d:fb:58:
cc:a5:8c:24:c2:e9:c7:84:d5:13:70:63:37:81:74:bd:cc:d5:
de:8e:d7:4a:e1:89:36:8a:19:97:cd:0e:9c:87:03:22:f7:21:
48:02:31:89:77:65:8e:e6:63:de:ff:f4:a1:93:3d:1e:43:ab:
b2:af:8a:61:2d:3f:51:84:35:d8:d3:91:05:4b:e2:aa:f3:6b:
2b:76:f5:a3:a3:6c:ef:bc:11:fe:ef:7e:b4:62:1e:60:29:83:
70:72:ca:09:d6:87:dc:c3:ce:1f:ce:69:81:d2:a3:4a:a1:4a:
b1:f9:f1:4a:63:1c:dd:a2:4d:84:bd:e3:b0:31:7d:d4:7b:26:
af:03:5f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:18 2026 by rpki-client