Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145850.roa
File: AS145850.roa (raw, json)
Hash identifier: HvRQ32mxwYuKOEW0R1DQlcX+QAjiUzHDlxNYYaQFfzs=
Subject key identifier: 89:F2:FA:4A:A9:51:9A:C2:CE:62:EF:A3:35:C8:B8:9C:4C:D4:DA:C8
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1958CC2862AC2376ADF77D1027CDE0FC7D185A44
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145850.roa
Signing time: Tue 26 May 2026 03:17:02 +0000
ROA not before: Tue 26 May 2026 03:12:02 +0000
ROA not after: Tue 25 May 2027 03:17:02 +0000
asID: 145850
IP address blocks: 240a:ac80::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:58:cc:28:62:ac:23:76:ad:f7:7d:10:27:cd:e0:fc:7d:18:5a:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:12:02 2026 GMT
Not After : May 25 03:17:02 2027 GMT
Subject: CN=89F2FA4AA9519AC2CE62EFA335C8B89C4CD4DAC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cf:d9:d3:68:e4:8e:51:16:56:17:5d:30:af:
3f:37:63:5b:da:79:44:51:2a:27:19:58:f2:61:9d:
b5:3e:63:b9:c6:b3:f1:76:cf:91:4d:22:52:42:39:
33:87:86:7c:1a:01:b1:cc:18:3a:65:8b:c1:3e:ad:
6a:74:30:17:70:0e:a7:74:b6:2e:78:06:9a:60:61:
69:df:5c:b6:93:b3:d9:8f:37:4f:95:e0:4c:61:bd:
a3:ce:27:bb:01:75:e8:b4:59:dc:2e:46:f2:23:21:
8e:f9:00:4a:65:8e:3c:27:c0:bb:39:3e:b1:3f:0b:
c4:31:cb:92:4e:a6:c1:00:6b:6a:dd:75:4b:23:85:
31:6a:28:3b:1e:43:ac:44:a4:bf:73:b0:d7:f0:5d:
ac:9c:24:96:77:5a:8a:bf:8c:5c:58:bc:bf:1d:6d:
6f:a8:9f:1b:4b:06:02:2a:f5:5c:ae:26:e8:de:95:
56:21:de:d5:f3:8e:fb:d1:5c:10:31:d1:e4:0d:18:
56:c7:0d:37:66:ad:a3:d9:91:e6:28:ad:84:71:3f:
8c:1d:11:6e:00:34:23:68:da:ab:cc:e4:1e:c7:f8:
78:11:ed:14:cf:c8:ea:7d:c7:fd:d4:7a:70:db:dc:
9c:2f:c2:89:51:ea:5a:f6:fd:90:8d:5d:b3:d9:e7:
9c:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:F2:FA:4A:A9:51:9A:C2:CE:62:EF:A3:35:C8:B8:9C:4C:D4:DA:C8
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145850.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ac80::/32
Signature Algorithm: sha256WithRSAEncryption
a1:fb:b9:4a:3e:4b:55:bf:c4:39:f5:07:76:2c:1b:ea:2f:a0:
3e:f6:fd:06:2e:48:cc:ff:c9:2b:24:26:83:0a:d7:77:11:92:
a4:37:9b:48:82:32:cd:43:71:a2:44:68:74:e0:a8:55:a5:d5:
37:aa:42:a1:83:56:3a:48:10:e2:cd:3f:d5:8b:d4:8a:b2:ef:
f9:e0:75:ea:b4:a4:1c:a5:75:29:c8:2b:c0:28:3f:24:6c:b5:
80:59:a1:c3:2c:84:f7:20:9d:d8:23:51:4c:1b:6b:c8:35:af:
b4:00:aa:c3:b7:1b:dd:6c:27:bd:2d:33:6f:7a:12:0e:e2:f3:
21:e0:8a:77:23:67:4c:70:9e:c5:8c:89:cf:fb:76:71:c2:81:
cd:2e:3a:8b:9d:fe:48:4c:7a:f8:dc:c8:c4:57:3b:5c:9e:44:
6b:c5:41:f6:0f:46:e3:95:b8:57:89:df:c2:94:0a:ec:00:43:
e4:46:92:5d:8e:ca:2d:d2:7d:39:e3:e0:b2:0a:97:6b:25:f2:
70:f3:86:e2:51:f1:34:09:61:3d:b5:07:de:37:0e:74:63:20:
a3:92:1d:ab:ce:06:5e:08:a8:0c:4d:a9:59:b4:0b:88:74:a7:
70:2f:f5:f3:40:6e:8c:99:77:ad:da:bd:a0:5b:74:98:af:ed:
71:6d:0c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:35 2026 by rpki-client