Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145856.roa
File: AS145856.roa (raw, json)
Hash identifier: +DCKXJed3xtWBPZ+za9LDHL6Zsqb63sjdNyC6OSLlaI=
Subject key identifier: 15:9A:53:93:B2:ED:29:8E:3A:FE:AC:27:00:50:1F:36:79:36:CC:84
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 740873F87DACDD68F81948F302471601FDF95F13
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145856.roa
Signing time: Tue 26 May 2026 03:17:17 +0000
ROA not before: Tue 26 May 2026 03:12:17 +0000
ROA not after: Tue 25 May 2027 03:17:17 +0000
asID: 145856
IP address blocks: 240a:ac86::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:08:73:f8:7d:ac:dd:68:f8:19:48:f3:02:47:16:01:fd:f9:5f:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:12:17 2026 GMT
Not After : May 25 03:17:17 2027 GMT
Subject: CN=159A5393B2ED298E3AFEAC2700501F367936CC84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:47:7c:67:d5:f3:3f:bc:d1:7b:42:c0:52:1f:
8a:3d:c4:52:28:10:ad:30:fb:a6:fa:49:ff:27:35:
cf:7c:32:2f:fc:7e:68:62:3d:e1:30:40:6a:86:f6:
7c:46:eb:47:13:c7:a6:00:7b:ac:85:7a:c0:d7:91:
72:20:0d:e5:51:47:e4:60:db:1a:2d:03:c7:13:e3:
ae:8c:e8:a3:60:e7:fd:13:36:f4:44:67:70:09:65:
f1:98:00:f6:b9:73:61:49:82:ec:98:1e:fd:ab:e9:
00:9f:88:7b:6f:79:25:96:48:95:2d:02:f9:27:58:
a4:a0:d1:b0:6f:16:25:96:ed:4a:19:0b:53:b9:a6:
58:a2:0f:0b:b6:b6:54:fc:b4:fb:2b:cf:be:48:68:
e2:75:7a:e2:e2:d0:61:fa:b5:37:04:a1:bc:e9:b9:
06:46:55:2e:c5:ce:65:05:c6:31:7c:da:ae:ab:96:
2d:4f:e9:38:cf:09:75:e0:0b:41:4f:35:14:8f:43:
46:f1:3c:55:56:db:a4:15:a6:46:a4:4b:87:1f:2d:
36:99:d0:8a:49:a6:21:a3:ac:6e:11:16:d6:80:56:
5d:d2:6a:b6:23:d6:ef:b1:56:77:0f:66:3c:cd:69:
6c:57:c9:93:c3:38:11:7f:7d:bf:5b:3a:71:c3:22:
e5:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:9A:53:93:B2:ED:29:8E:3A:FE:AC:27:00:50:1F:36:79:36:CC:84
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145856.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ac86::/32
Signature Algorithm: sha256WithRSAEncryption
ab:6d:c6:55:24:35:7e:f9:5d:86:57:b1:2a:e2:46:d9:b9:f9:
57:a1:d7:44:c9:84:ef:bf:a7:5b:5a:89:34:c2:2d:b5:11:e1:
05:02:92:76:d3:b8:f2:e3:02:1f:e4:98:6c:42:cc:01:b8:19:
e2:cb:af:26:92:ec:ef:68:17:27:34:79:ee:d9:57:27:05:98:
f4:3c:c5:e0:b1:e8:80:f0:5d:d4:94:45:ea:7a:06:67:bf:41:
1d:cf:2e:1c:2e:a5:8a:5b:5b:f3:7c:6c:96:b3:bc:8d:60:a2:
e5:c7:61:48:79:aa:d8:48:70:c4:41:a0:ae:d7:60:0b:57:eb:
88:38:c3:3b:54:a3:31:46:51:62:d8:d0:96:c1:79:45:c2:b6:
54:2c:2f:75:87:3c:26:8e:73:72:81:95:f3:84:2b:1f:81:8d:
fa:5c:ea:ca:7c:60:c4:22:06:3a:94:ec:7e:c7:81:e3:dc:02:
07:37:d2:dc:a5:9a:1c:e5:63:7d:2b:1f:e7:b8:8c:46:25:77:
a4:9a:c1:83:2c:20:25:cb:9a:7f:cf:e2:d7:78:ed:21:f1:55:
b5:31:42:93:19:e5:51:78:43:16:46:fb:3c:a7:bf:e8:e7:28:
9f:ad:d7:ba:a6:b3:28:bf:bd:c9:6a:8a:ab:77:e5:1e:c4:96:
2b:0e:5c:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:53 2026 by rpki-client