Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145855.roa
File: AS145855.roa (raw, json)
Hash identifier: IA8MVMA8k1NPKrjLtYmxcgXo+KCi3gIwCqs8/0suQw0=
Subject key identifier: D4:37:56:00:47:F8:9C:60:4D:AA:87:CD:DA:B8:6C:F2:F0:5F:73:E2
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 11574ECE476447FE0878AC1D26696FC8F17B1A0A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145855.roa
Signing time: Tue 26 May 2026 02:35:03 +0000
ROA not before: Tue 26 May 2026 02:30:03 +0000
ROA not after: Tue 25 May 2027 02:35:03 +0000
asID: 145855
IP address blocks: 240a:ac85::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:57:4e:ce:47:64:47:fe:08:78:ac:1d:26:69:6f:c8:f1:7b:1a:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:30:03 2026 GMT
Not After : May 25 02:35:03 2027 GMT
Subject: CN=D437560047F89C604DAA87CDDAB86CF2F05F73E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f7:56:45:01:40:5d:c5:5d:9e:21:02:aa:8b:
c4:76:43:f8:20:36:92:6f:ae:f5:7f:e2:b7:04:07:
43:6b:51:b3:6d:2a:19:8e:4c:06:a9:f3:ef:1f:a5:
3f:43:01:42:d5:1e:55:3b:33:50:97:df:9f:95:df:
04:99:2d:fe:a2:3e:6c:31:44:c5:40:23:48:61:64:
07:51:f8:2f:82:06:ac:b8:5e:99:e9:7c:37:1a:c4:
36:e2:d4:33:bd:58:24:63:d7:17:5d:f4:6c:37:28:
c7:8c:11:b1:8a:ca:a9:d8:9a:b1:79:1d:6c:6d:ba:
28:7f:87:e3:55:0c:eb:e3:d2:6c:6a:e9:e1:ec:dd:
7c:f6:9f:c6:0a:f7:a6:19:b3:b5:9b:e7:3c:65:df:
cd:b1:f6:16:0e:af:c9:4c:c4:9a:d7:5d:27:34:81:
17:0e:3c:e2:5b:bc:84:ba:2e:90:aa:0d:f8:f0:36:
97:15:2d:e7:48:29:3c:84:01:5e:1c:53:1d:9e:a5:
cd:04:ee:d2:eb:c5:fc:a9:48:99:2d:ec:05:10:08:
af:13:e5:a5:5b:38:9a:76:07:37:24:7d:8b:d8:fc:
7f:7d:14:2a:cb:dd:13:cb:69:8b:16:9d:7d:ac:79:
2f:f6:e4:bd:9e:bd:d0:c0:fa:4d:ca:04:26:b1:fa:
a2:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:37:56:00:47:F8:9C:60:4D:AA:87:CD:DA:B8:6C:F2:F0:5F:73:E2
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145855.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ac85::/32
Signature Algorithm: sha256WithRSAEncryption
0e:2e:9a:d1:47:bd:d9:2b:47:42:df:91:9e:c5:8a:0d:db:30:
8b:4d:e6:56:0d:21:98:d5:42:3f:ee:2b:77:a3:fc:f5:a6:db:
40:0d:3a:c7:55:38:80:ee:4f:34:21:a3:51:0a:2e:a5:64:ee:
af:66:59:8d:6b:b0:90:07:07:ae:92:54:31:f0:17:b2:fc:f8:
4c:63:8f:c6:07:c8:1a:6e:91:e8:92:ee:72:e8:c6:11:eb:cd:
3a:fb:88:e1:fd:7e:09:07:7c:5c:dd:5c:eb:80:41:a0:83:f3:
50:3e:cb:23:b1:0c:bd:07:e2:3b:2f:fa:31:de:32:51:c8:02:
9c:84:ba:84:3a:72:92:cb:d5:19:bf:44:87:e8:e1:03:8d:7a:
fc:15:c6:9c:ec:5f:d4:81:ce:4c:90:fa:44:f0:59:7f:6c:f8:
3f:e7:b0:de:71:1f:de:1a:76:58:40:e7:e8:3d:3d:c5:89:2c:
57:44:88:1b:00:72:67:4f:e7:2d:74:4c:7f:7b:b1:f6:7f:ff:
ab:c9:4a:5c:31:20:8e:3f:da:87:93:04:bc:d1:a1:40:d1:64:
16:7a:24:09:c8:91:eb:b4:9e:67:b9:5a:24:ab:91:0d:cf:b1:
47:cf:d8:fe:19:1a:f3:9d:fc:5c:7a:23:c8:5a:96:6f:08:c8:
23:4f:dd:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:11 2026 by rpki-client