Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145857.roa
File: AS145857.roa (raw, json)
Hash identifier: XP37qk3qXPMvx2jgjgUMb3136WOY2a46LQUyk2WOLGU=
Subject key identifier: 3A:1B:83:B9:20:4E:FF:9B:4E:6A:AB:E6:4D:52:4D:BE:C6:38:61:19
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 16B73C7DFA9E5C89C6BE7BD7287F0C0E5FDE7AE5
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145857.roa
Signing time: Fri 22 May 2026 02:47:32 +0000
ROA not before: Fri 22 May 2026 02:42:32 +0000
ROA not after: Fri 21 May 2027 02:47:32 +0000
asID: 145857
IP address blocks: 240a:ac87::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:b7:3c:7d:fa:9e:5c:89:c6:be:7b:d7:28:7f:0c:0e:5f:de:7a:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:42:32 2026 GMT
Not After : May 21 02:47:32 2027 GMT
Subject: CN=3A1B83B9204EFF9B4E6AABE64D524DBEC6386119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:86:86:6a:db:d3:49:a1:4e:e5:2a:79:e5:89:
41:5b:1a:0f:3d:6d:53:7b:60:02:c0:58:07:4c:05:
1e:60:82:49:36:d4:89:09:95:f6:ca:3e:a4:da:ee:
63:5c:18:72:e8:e4:36:5f:04:33:c7:f5:0b:c4:19:
1b:b1:e1:13:ed:ce:1e:f2:37:98:f9:bc:61:ec:a5:
28:8b:47:3c:34:2f:3b:7a:ae:57:01:33:33:de:13:
3a:ef:f6:1e:b9:f0:0d:63:3d:7d:54:ac:92:bd:b9:
ce:e4:ae:a0:8d:14:84:c0:9b:d4:87:d4:20:78:5d:
cb:f9:ac:d8:87:db:f4:a7:5c:ef:a2:18:37:e4:bd:
0c:e3:f5:1b:f0:28:51:02:e1:20:37:de:5b:34:88:
fc:ef:a9:4b:0a:db:c3:19:03:4b:11:0c:9c:4f:2f:
f4:9d:58:8d:96:2d:d6:ae:d1:4c:18:60:a1:a6:37:
05:0d:d6:25:79:7c:77:ef:d7:e5:2d:94:77:f6:04:
5a:d1:62:f7:9b:ae:64:c3:17:87:a8:fb:43:a5:7c:
3b:cb:bd:4f:55:16:a6:fd:51:51:56:0b:f4:87:f3:
83:b0:11:ec:29:1b:26:38:15:c5:ff:77:ae:89:95:
32:64:05:c1:f9:93:c8:ff:04:b3:f2:07:54:ce:ef:
15:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:1B:83:B9:20:4E:FF:9B:4E:6A:AB:E6:4D:52:4D:BE:C6:38:61:19
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145857.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ac87::/32
Signature Algorithm: sha256WithRSAEncryption
90:ed:3d:08:c2:24:6d:73:10:a0:02:67:ed:eb:14:af:ca:f3:
92:23:fd:de:c3:41:96:33:2b:65:ba:d6:9c:80:cd:42:8a:51:
bd:28:17:1e:28:e0:92:df:ad:2b:20:47:cd:7c:7f:9d:de:e4:
c1:c0:ae:e2:2a:4e:74:17:ce:d7:75:02:82:2a:1f:a3:48:b2:
97:2f:bc:86:c0:5e:fd:ef:14:7a:f8:80:9f:db:b0:87:e1:c5:
64:70:92:f8:ae:c5:42:9f:a9:0e:2e:7e:f2:a6:87:b0:39:71:
9b:7e:de:91:58:1d:06:ee:46:e0:ba:51:a5:36:45:be:88:fe:
49:e3:96:bb:8a:7d:76:65:61:8f:f7:d3:87:b2:10:f2:d8:2d:
9c:d2:e2:01:87:51:74:cb:3f:91:db:ad:20:ef:a5:d6:b7:f4:
11:48:a9:53:68:9b:77:5d:32:5a:c7:69:09:d2:e9:13:07:8b:
af:e3:ac:eb:ee:19:27:94:fc:2a:46:08:ad:a1:59:f8:f2:43:
04:7c:87:58:a8:82:13:81:86:d6:37:66:9a:83:50:65:3b:af:
0e:ae:c3:76:89:96:fa:19:9a:47:3d:e8:f6:ac:f9:44:0b:86:
5a:03:3d:bb:ac:f9:0f:a3:d5:17:ae:17:7c:09:34:ed:23:43:
fc:3c:90:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:14 2026 by rpki-client