Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145859.roa
File: AS145859.roa (raw, json)
Hash identifier: mxsWy5iU+CT2D3s3E9Gy1WH02Ems7xzpVUy6Nb2SLKI=
Subject key identifier: 2D:30:57:55:3C:5B:4F:5D:1F:1D:CA:32:5E:C6:D3:69:5A:16:0A:96
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1D32450F6236D9BE8A10DCE5CE2EF622C3C30BBE
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145859.roa
Signing time: Tue 26 May 2026 06:30:39 +0000
ROA not before: Tue 26 May 2026 06:25:39 +0000
ROA not after: Tue 25 May 2027 06:30:39 +0000
asID: 145859
IP address blocks: 240a:ac89::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:32:45:0f:62:36:d9:be:8a:10:dc:e5:ce:2e:f6:22:c3:c3:0b:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:25:39 2026 GMT
Not After : May 25 06:30:39 2027 GMT
Subject: CN=2D3057553C5B4F5D1F1DCA325EC6D3695A160A96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ec:42:7e:e3:09:b9:73:f5:21:88:f2:05:2d:
0e:3a:64:46:c7:fd:ea:5c:d1:6a:75:50:af:1d:fa:
9c:6d:5c:ef:ba:9d:90:ef:59:d6:5e:33:f9:de:0d:
ee:46:69:44:c2:cb:fb:5e:f1:84:85:31:58:75:3b:
8f:a0:a1:5b:f8:93:ba:a4:b9:55:5e:6e:a3:c7:75:
9a:97:86:e2:25:99:ac:7d:cb:7a:80:02:97:35:31:
29:f3:e1:92:23:4c:d1:1e:af:a9:ba:3c:97:eb:cf:
e0:b4:07:c8:f6:3d:b4:1c:11:4e:39:58:d1:37:64:
e7:3c:ab:14:55:59:fe:50:9e:e9:1d:a6:b6:50:95:
15:1d:e2:05:ca:6d:93:b1:4c:a4:bf:ab:e6:b5:7c:
f7:4a:c8:4e:97:08:7a:1e:b0:17:36:45:68:8d:09:
81:9e:eb:0d:74:83:50:5b:63:78:f9:f5:ec:fc:1a:
be:11:ac:d4:fa:ac:dd:f1:ad:12:94:26:fe:e4:85:
97:a4:e0:4e:43:a7:05:4c:b8:39:e5:ba:61:4a:2a:
8e:c2:32:f5:48:aa:a9:02:42:19:b1:60:ec:2d:80:
e8:da:e4:be:34:5d:8b:dc:8b:58:8f:d5:b8:40:50:
1f:9f:ca:38:54:ac:fa:ec:96:37:0f:96:f8:f9:64:
0f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:30:57:55:3C:5B:4F:5D:1F:1D:CA:32:5E:C6:D3:69:5A:16:0A:96
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145859.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ac89::/32
Signature Algorithm: sha256WithRSAEncryption
b2:c3:fb:58:8a:19:40:8c:8c:56:f9:4e:03:6b:78:bd:46:f7:
ee:0c:d7:fe:e0:09:a2:ed:2f:d9:75:79:db:28:ed:18:c9:8f:
2b:64:88:51:eb:56:91:92:9c:1d:bf:7f:15:ec:94:5d:5a:37:
31:97:35:ca:02:4d:b6:f6:66:a4:c5:ca:2a:de:9c:f3:f6:09:
e7:f6:89:f8:6b:56:28:c5:07:c6:c3:de:0d:27:60:67:88:63:
da:17:a5:1d:85:71:cb:7e:47:d7:23:02:75:ae:dc:5a:89:2b:
91:00:6f:38:3f:a9:8e:01:f1:5c:b7:56:29:0e:71:e6:0d:d7:
12:a9:a3:be:85:4d:3b:21:4d:cf:8a:b7:26:d1:18:62:1c:9d:
a7:61:76:49:14:ca:a0:e5:de:bc:6f:6d:d1:74:2c:a3:9e:b5:
6b:15:e7:68:df:a6:98:f7:6d:22:58:4a:57:3a:a2:bf:db:95:
09:57:26:aa:f3:e9:ad:8b:b2:6e:aa:f8:3e:85:e6:b2:87:6f:
c7:62:e5:78:eb:b1:b9:49:ba:a0:0d:3b:02:bc:9c:ee:df:9c:
a6:19:3d:67:4d:16:f8:ef:6c:a8:69:cb:b5:fb:82:7c:e8:8b:
43:02:c9:e8:29:19:b5:04:7e:c6:5c:c7:8c:7b:50:b2:49:a6:
9e:b3:c0:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:28 2026 by rpki-client