Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145838.roa
File: AS145838.roa (raw, json)
Hash identifier: NDcSCwb0D/UZYgu384nndKL3dVeDheif/eNB9R2nLZA=
Subject key identifier: 45:BF:92:86:DB:99:8A:18:80:C7:71:C2:DC:92:96:F3:AB:2B:4C:35
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 312C0649F2AEB7767CEE4935922B8467EA225094
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145838.roa
Signing time: Fri 22 May 2026 06:58:29 +0000
ROA not before: Fri 22 May 2026 06:53:29 +0000
ROA not after: Fri 21 May 2027 06:58:29 +0000
asID: 145838
IP address blocks: 240a:ac74::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:2c:06:49:f2:ae:b7:76:7c:ee:49:35:92:2b:84:67:ea:22:50:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:29 2026 GMT
Not After : May 21 06:58:29 2027 GMT
Subject: CN=45BF9286DB998A1880C771C2DC9296F3AB2B4C35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:53:a1:6b:3d:c2:17:a4:21:dd:64:1f:2b:19:
b2:7c:e3:28:4e:63:6c:db:48:82:ea:56:08:6a:fd:
c9:15:8b:83:bf:81:cd:6e:7f:11:ce:b9:b1:ce:78:
4e:3a:c9:7f:f3:34:49:47:e6:7f:f2:cf:52:38:54:
46:04:6b:9c:76:fc:aa:b3:98:3d:a0:07:e2:76:47:
6f:40:72:45:75:f6:96:57:8b:75:b2:fc:40:f5:c2:
d0:51:a4:1d:3b:17:2d:4a:92:b7:ec:6b:c6:a6:b1:
b0:6c:a3:a2:33:db:47:ad:4a:cb:02:f6:b6:cc:c6:
c3:b1:65:e2:86:61:66:ef:79:1f:11:b7:17:33:bc:
a7:57:49:66:41:59:68:e8:16:1a:ed:2f:fe:c2:e9:
55:e2:e8:83:79:83:f1:a6:2e:c8:a0:e7:1f:71:d3:
08:71:39:67:43:a1:96:05:bf:1c:d4:82:e1:42:82:
c0:84:5b:aa:ec:b1:00:95:a9:36:21:65:0b:a5:5e:
30:06:cb:4a:be:ab:bf:0d:65:17:ca:90:33:75:0b:
e5:e7:48:d4:4e:14:c5:87:6e:a7:74:38:4d:7a:7a:
11:b8:d9:09:bf:15:cc:e2:8b:43:dc:0b:53:84:43:
15:f1:38:61:7a:99:af:cd:f0:d8:67:b6:71:39:c6:
00:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:BF:92:86:DB:99:8A:18:80:C7:71:C2:DC:92:96:F3:AB:2B:4C:35
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145838.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ac74::/32
Signature Algorithm: sha256WithRSAEncryption
81:7c:36:4f:a0:c5:fe:30:9e:80:e6:f2:76:9f:1e:8f:56:e3:
64:f7:6e:da:77:22:6b:2c:12:a6:a6:a8:36:21:24:29:61:f6:
2e:6d:3f:5d:ec:c0:68:47:da:01:c8:db:84:23:b1:50:cb:bc:
7b:22:b4:af:15:0e:b8:ef:a8:d9:33:e1:91:2f:0a:1b:3b:3c:
f7:c8:53:e1:b2:3a:0a:be:17:ff:d1:c1:e6:f6:8c:bd:a0:da:
32:63:24:b8:cf:4b:fa:12:58:ec:58:c1:30:94:84:0d:50:a2:
5b:e2:c9:dc:54:d8:49:a4:9b:e7:79:52:cb:46:e6:10:f0:1b:
ad:d7:5c:be:ea:a5:0b:c2:26:73:cf:c9:05:56:5f:a2:33:4c:
55:e2:eb:65:5a:66:ed:0e:c7:a1:55:97:fa:09:84:f7:0a:d3:
7b:db:a6:4e:1b:ec:c2:2b:b9:74:08:c0:5b:45:ff:6a:17:bb:
fe:44:c4:c5:f3:79:6c:81:d2:7c:6c:37:39:a5:e9:fb:0b:79:
46:07:a7:ec:35:5f:87:10:b2:ee:b0:15:96:97:28:a3:20:e6:
b5:20:ac:64:05:6a:a8:7c:32:60:8a:a5:88:c0:80:22:04:92:
6a:72:f3:9d:5a:56:b3:26:a5:47:ae:a5:98:16:10:3e:e4:bd:
df:b8:53:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:55 2026 by rpki-client