Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145831.roa
File: AS145831.roa (raw, json)
Hash identifier: m/AdQ4TGVVjc6DALHcaf83egTim75rpncwIReSTo9OQ=
Subject key identifier: BF:77:EF:E9:4C:83:54:08:92:6F:C3:BA:EB:BF:1C:54:8F:EB:80:91
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 60E7A38EFE2594A4C7E7B928605BB76A5FEA7F1E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145831.roa
Signing time: Mon 25 May 2026 06:28:09 +0000
ROA not before: Mon 25 May 2026 06:23:09 +0000
ROA not after: Mon 24 May 2027 06:28:09 +0000
asID: 145831
IP address blocks: 240a:ac6d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:e7:a3:8e:fe:25:94:a4:c7:e7:b9:28:60:5b:b7:6a:5f:ea:7f:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:09 2026 GMT
Not After : May 24 06:28:09 2027 GMT
Subject: CN=BF77EFE94C835408926FC3BAEBBF1C548FEB8091
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:d3:47:68:ac:e9:3f:29:a6:95:f0:b3:8b:2e:
db:1d:4f:71:c9:81:df:11:67:88:95:db:8b:d4:38:
df:e4:e9:1e:a6:6b:1e:33:f5:09:a8:0a:fb:c0:6d:
25:40:28:b9:7a:c8:62:a3:3d:e0:09:52:d1:0a:e6:
81:34:e2:4e:af:c6:40:00:f3:ec:72:ae:8e:1d:8a:
2d:50:ec:5f:66:ce:84:aa:4e:eb:d8:16:29:3d:96:
0f:32:e6:ea:b2:18:ae:d1:90:dc:d0:74:7c:b7:bd:
0e:18:12:9c:45:6c:29:5e:61:36:07:8b:cb:26:ea:
c5:a9:b2:88:33:51:23:73:c7:bf:65:7e:90:a0:ca:
46:c0:2d:1e:50:b1:28:b1:fc:df:6c:15:e8:36:0a:
8a:bc:3c:7c:42:5d:da:3d:8e:74:81:43:09:39:51:
26:0d:44:55:41:9a:b8:85:32:9b:9c:2d:48:49:2b:
88:3c:3f:97:a8:c5:12:20:0f:ff:ae:17:9c:77:d9:
3d:12:48:b6:3c:69:ea:90:b8:d7:70:e0:11:10:85:
b9:a2:06:5f:2a:ca:be:63:63:04:1a:1a:b8:1d:1d:
a1:17:c4:a1:33:62:b2:00:5b:69:19:1c:12:b6:b6:
17:ce:f9:b5:53:70:ca:c7:f4:2d:25:a3:7f:ef:2e:
94:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:77:EF:E9:4C:83:54:08:92:6F:C3:BA:EB:BF:1C:54:8F:EB:80:91
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ac6d::/32
Signature Algorithm: sha256WithRSAEncryption
6e:32:2f:76:a3:65:69:f9:d4:d5:96:a9:64:1c:1b:b7:3a:25:
83:d0:1e:d4:6b:3d:c2:85:a0:be:42:32:77:de:81:9d:75:fb:
a4:ca:dd:24:3e:49:7f:69:dd:53:6b:f1:3c:57:a0:33:9b:ea:
7f:1a:c5:57:dd:ab:65:3c:4b:18:0c:66:8b:3e:a0:3a:cc:96:
01:a9:a0:58:75:d5:7e:5c:b3:87:9e:c2:8c:6c:b5:1a:3e:4e:
eb:7e:21:86:e2:d7:8b:19:49:03:17:c6:b5:87:25:43:45:39:
49:7f:b9:87:c0:bf:b1:42:5f:e6:a0:81:4f:3c:ce:73:f5:43:
8b:26:0b:a5:6a:21:2f:73:8e:88:13:b3:e2:5b:22:ed:51:ef:
ed:5e:3f:69:d5:e7:b5:04:f1:a6:f1:5b:6d:32:37:e4:ad:4c:
87:03:34:7a:1f:f9:31:43:9b:e9:fe:a6:06:2a:6a:5c:f9:0a:
86:2c:30:9b:06:9e:d6:8c:81:8b:b4:de:79:27:89:c7:9b:1a:
c0:b8:66:59:7f:6c:96:13:3b:fd:81:db:59:fe:e1:52:fd:3b:
71:bc:b2:5e:04:eb:27:72:8d:f8:68:f7:67:f3:dc:79:6d:5c:
47:34:73:7e:5d:0f:0d:33:89:dd:da:f4:3a:00:8e:e6:5b:7b:
9e:0e:61:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:16 2026 by rpki-client