Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145827.roa
File: AS145827.roa (raw, json)
Hash identifier: /fPZ564MjuO7DdX7HwYyxtQALdTmm9NGatayN8jUjDs=
Subject key identifier: B5:D9:67:41:21:6A:A4:D8:2D:AA:9F:77:E0:1A:10:1C:D9:6A:77:31
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 11D5E5C264969346DA78E2800F6C15B604781B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145827.roa
Signing time: Fri 22 May 2026 04:26:40 +0000
ROA not before: Fri 22 May 2026 04:21:40 +0000
ROA not after: Fri 21 May 2027 04:26:40 +0000
asID: 145827
IP address blocks: 240a:ac69::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:d5:e5:c2:64:96:93:46:da:78:e2:80:0f:6c:15:b6:04:78:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:21:40 2026 GMT
Not After : May 21 04:26:40 2027 GMT
Subject: CN=B5D96741216AA4D82DAA9F77E01A101CD96A7731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:b8:53:c0:b7:13:c2:55:1f:95:df:75:4c:f9:
c2:15:2a:a5:74:bc:b2:68:50:64:23:8f:8d:a2:89:
ee:d5:4a:a3:bd:20:38:d2:70:a6:af:42:b5:ed:2d:
bc:8c:63:8b:96:55:a2:cb:62:0e:f4:d0:47:83:1d:
d8:b1:46:ff:c5:9b:3c:02:67:31:58:b7:bb:56:24:
bf:88:cf:b4:96:ea:ea:11:9f:f7:e1:88:df:69:f7:
17:e9:a6:d8:d1:1c:7f:47:5d:87:ca:52:7b:ae:d8:
fb:e3:66:17:7a:1c:eb:94:24:c9:c4:cd:65:c4:a6:
98:6e:f8:a8:1e:3e:4f:59:2f:52:f8:0f:3b:e5:c8:
e9:f3:34:01:db:37:b3:03:15:40:fa:71:93:64:91:
fc:79:3d:5d:71:06:0a:96:99:00:78:d5:82:38:44:
47:bf:86:67:20:00:fc:5f:bc:40:c0:62:f3:c9:0d:
76:79:74:1b:3e:df:55:3f:8d:e3:4e:a5:24:75:57:
26:72:7c:ed:40:ae:f7:de:06:d3:2d:8a:1e:c4:40:
44:c4:c1:7e:4f:f0:93:c6:09:4d:0d:b6:ed:24:3c:
5e:d1:88:07:ac:cc:05:9f:83:f5:88:96:56:91:a5:
67:4d:33:33:27:51:b6:56:3a:0c:01:0b:5f:cc:9d:
57:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:D9:67:41:21:6A:A4:D8:2D:AA:9F:77:E0:1A:10:1C:D9:6A:77:31
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145827.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ac69::/32
Signature Algorithm: sha256WithRSAEncryption
0f:25:63:4e:23:ed:85:a8:ed:d1:17:ea:9a:b8:07:47:c9:ca:
38:89:98:63:cd:69:d1:2f:f5:99:b5:fe:fc:ce:37:b1:a9:e5:
43:ca:06:0a:4e:fa:1d:3d:22:21:c3:6d:aa:1b:97:04:f8:6a:
7a:b0:3f:7e:7e:d1:9c:01:c9:14:fd:73:01:7c:cb:0e:9b:2f:
e0:f5:e0:23:ba:1c:59:8b:7a:04:c1:c8:68:3c:a3:f4:43:81:
12:67:81:50:b7:05:5e:c6:b0:31:9a:7d:bb:99:e3:a5:59:77:
55:3d:6a:d8:e6:b5:0f:3d:3b:c7:d0:d7:9e:32:32:9b:ca:3b:
80:ac:73:c1:eb:57:94:bc:e1:c0:18:d2:03:d3:d6:dd:ae:4e:
5a:77:83:67:76:ab:de:2b:fa:4b:cc:88:3e:1a:7b:0a:6a:95:
50:03:fb:a6:01:a6:8c:7a:e5:46:8c:12:ba:41:01:0c:49:b0:
82:d0:aa:24:8a:86:1c:47:ba:dc:b2:a7:ea:91:0d:2a:6a:99:
16:49:60:43:cd:92:53:06:f5:38:e1:78:e3:06:ad:1d:68:f6:
7c:63:8b:92:34:41:c0:68:36:f6:ea:c4:85:37:8a:0d:ed:6f:
00:b9:18:4a:2c:b2:41:5a:47:12:3a:c8:18:45:ad:7e:46:58:
c0:24:7c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:12 2026 by rpki-client