Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145851.roa
File: AS145851.roa (raw, json)
Hash identifier: JbCTbe/zId9D55N/A4C7zTbOElR4pqU0eLBrKOzt1P8=
Subject key identifier: 50:75:9D:94:E7:A3:C5:2A:37:DE:0F:91:56:06:9B:62:09:19:42:DE
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 76A127EF55634A9ABBE6EB2D73D39D663303CBD4
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145851.roa
Signing time: Fri 22 May 2026 07:40:50 +0000
ROA not before: Fri 22 May 2026 07:35:50 +0000
ROA not after: Fri 21 May 2027 07:40:50 +0000
asID: 145851
IP address blocks: 240a:ac81::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:a1:27:ef:55:63:4a:9a:bb:e6:eb:2d:73:d3:9d:66:33:03:cb:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:35:50 2026 GMT
Not After : May 21 07:40:50 2027 GMT
Subject: CN=50759D94E7A3C52A37DE0F9156069B62091942DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0e:cd:d7:fc:41:1a:35:62:3c:ae:7c:f4:94:
93:5d:57:a7:0a:5e:e8:6a:67:07:86:b8:f0:83:e1:
7b:f7:7d:7d:a9:f3:5e:c7:67:e7:db:d9:7b:84:31:
7a:6e:a9:fa:70:60:75:c4:60:5d:55:62:8b:4b:dd:
ec:34:ee:bc:06:e5:ca:b6:08:35:18:69:39:79:5f:
7d:e6:bc:86:0c:67:5f:ae:17:0a:88:ad:56:29:87:
fe:60:0f:39:cc:4e:f4:e2:9f:bc:55:5c:37:b1:d9:
8b:3f:35:8b:19:b9:8e:1d:72:f9:22:50:2d:ba:89:
a4:3d:39:86:3a:6d:7e:0e:52:e6:f9:2c:ae:57:36:
3a:1d:3d:b8:de:d8:a4:55:c3:b4:77:56:1f:a5:b7:
7a:f6:19:63:7b:d2:d0:7d:2a:54:23:26:22:25:d2:
1f:6f:83:aa:d7:12:16:8d:67:36:29:69:1a:ef:6a:
64:13:8c:c7:f8:e9:2f:7b:05:5f:0a:cc:63:89:67:
3a:49:38:da:e0:06:38:f2:6f:d3:30:03:d7:47:7b:
9e:89:e5:82:a8:1f:69:91:9e:4b:1a:5c:aa:3c:b3:
27:a8:0b:33:0e:d3:30:21:f5:64:1b:a2:a5:be:8f:
83:33:b8:05:ec:43:70:ca:b1:c0:f4:33:7b:25:b5:
cf:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:75:9D:94:E7:A3:C5:2A:37:DE:0F:91:56:06:9B:62:09:19:42:DE
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145851.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ac81::/32
Signature Algorithm: sha256WithRSAEncryption
78:58:44:84:61:b9:0e:00:42:fb:19:17:91:29:b7:f7:bb:1f:
9e:01:96:82:f2:08:56:a7:89:57:49:99:b3:4f:7d:32:dd:1e:
6b:2e:af:26:b3:a0:71:e1:3e:7b:e8:c8:95:c8:65:00:95:a1:
b8:1c:34:1e:9a:16:fe:ee:aa:29:60:cf:3f:d3:6b:7b:02:53:
1c:02:ef:e9:f1:97:6e:0e:3b:04:7d:7e:af:c8:35:70:d9:20:
af:0a:8e:67:ab:3b:39:1b:76:e6:1f:dc:f8:88:52:52:e3:7b:
b4:a7:c4:d7:2c:09:1b:64:7a:b8:3c:d2:14:50:dd:38:38:25:
79:20:64:a0:54:a0:91:6f:2b:04:65:ce:ba:19:1b:54:f2:46:
0a:2a:01:fe:32:0e:d7:90:18:18:7b:f6:63:13:3e:2a:3e:c7:
af:2a:ad:91:6a:42:7d:48:05:16:07:0d:31:ea:b3:86:0c:fe:
84:af:30:99:bc:9d:c0:40:bb:75:b0:88:30:97:36:b9:6a:36:
1c:41:76:6f:c1:80:3d:cd:7b:09:60:45:46:87:10:fc:ef:89:
69:47:6e:a6:dc:e4:76:53:51:3c:24:75:94:e2:17:09:9e:91:
ca:04:1d:85:3b:42:c7:a4:ee:e1:59:09:63:5b:c7:12:7b:a1:
42:24:2a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:59 2026 by rpki-client