Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145840.roa
File: AS145840.roa (raw, json)
Hash identifier: T3cGKiQw+pekYUTYw+eijsBH1gIMEjmSs/dq+qgnxjI=
Subject key identifier: CC:CA:B2:58:18:92:BF:23:D5:AD:97:C8:42:06:35:EB:F1:EA:8F:00
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 63BED08CF63CD8ED7310C763CBA497C30F5A4181
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145840.roa
Signing time: Tue 26 May 2026 03:16:39 +0000
ROA not before: Tue 26 May 2026 03:11:39 +0000
ROA not after: Tue 25 May 2027 03:16:39 +0000
asID: 145840
IP address blocks: 240a:ac76::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:be:d0:8c:f6:3c:d8:ed:73:10:c7:63:cb:a4:97:c3:0f:5a:41:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:11:39 2026 GMT
Not After : May 25 03:16:39 2027 GMT
Subject: CN=CCCAB2581892BF23D5AD97C8420635EBF1EA8F00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ec:c3:a9:89:c7:2b:f3:1f:8c:72:8e:4d:4a:
eb:45:9c:7d:0a:2d:ff:19:1c:19:4c:a9:22:a5:cc:
82:58:27:20:39:8d:3f:bb:49:ee:ff:3f:24:68:5e:
a9:db:61:54:61:29:ce:2f:ae:8f:58:95:e5:f9:a2:
14:5c:b3:2e:9a:1c:3c:b7:d5:0b:84:2b:e2:de:ed:
98:44:7f:80:43:61:11:28:d9:07:21:6e:ee:3b:7a:
b6:d5:81:c5:7e:77:08:7c:36:f8:3b:98:d6:b9:3b:
76:e8:86:cb:55:ee:17:79:1e:e6:90:9d:69:95:5f:
17:6a:96:ff:f8:a8:fa:6f:bc:d9:74:60:7e:b0:af:
38:4a:a6:c5:dd:30:07:94:ad:4d:5b:1f:bd:f1:26:
01:e1:60:d5:55:fd:be:bf:c8:c3:47:18:6c:d5:2f:
d9:d5:d0:a2:ea:9d:af:dd:d6:8f:f5:e6:a4:e3:5c:
b8:04:c9:0a:3a:4b:35:95:41:f8:84:30:b7:36:fe:
11:57:a0:00:24:9b:1d:ed:ec:23:bc:f1:0d:b8:da:
55:d8:e2:71:fa:c7:11:39:d4:dd:c9:9f:c9:d1:de:
f7:56:47:7d:5d:81:24:c0:27:2f:d2:dd:04:cc:34:
f3:63:60:55:f0:10:34:2b:6b:ab:e7:21:c2:7b:cb:
ff:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:CA:B2:58:18:92:BF:23:D5:AD:97:C8:42:06:35:EB:F1:EA:8F:00
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145840.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ac76::/32
Signature Algorithm: sha256WithRSAEncryption
13:7f:ea:53:d7:fc:ae:5b:8f:9c:1e:f2:bf:69:6a:27:15:aa:
af:6d:23:6b:8c:02:8a:30:04:62:7f:7c:2f:da:14:c2:26:bd:
60:5a:f0:16:6f:63:a9:1c:c8:ca:8a:70:5b:8d:2f:26:96:ce:
42:8c:ba:86:31:01:fa:dc:83:a8:bf:2c:8b:fe:31:60:7e:9e:
05:71:73:06:fc:8a:d2:b7:e7:91:8d:a0:4a:ec:05:35:57:d2:
3b:df:0e:c5:5a:9b:8d:af:57:fd:a3:b3:60:ff:b3:a1:7f:a6:
b5:e6:ed:0a:87:48:ab:8d:57:11:53:35:b5:c9:be:97:8c:a5:
66:4c:10:ce:c0:c5:f4:12:94:e3:f3:9d:d7:56:db:8a:2e:e2:
94:65:01:c8:8d:5a:0c:5d:d4:20:59:1b:23:cd:6e:fb:e5:f1:
b7:16:54:9c:09:1c:09:f7:86:46:06:e2:40:d6:e3:c5:12:e2:
5e:bc:77:8b:68:ce:4c:6a:d8:8a:5b:1d:cc:06:71:c2:da:34:
f0:dc:36:43:98:af:d4:44:0d:b5:6a:be:03:8b:cc:dd:f5:ab:
35:87:3e:72:3a:4f:df:51:1d:5b:28:d8:21:9e:fa:b4:17:69:
ca:51:97:40:92:1a:f3:3b:3d:a3:ce:59:fd:8e:79:f3:a2:3c:
6d:81:42:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:28 2026 by rpki-client