Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145863.roa
File: AS145863.roa (raw, json)
Hash identifier: V08UpSlU6ZvCFwWAr4wk4blCBvMLe4lIMMSFVQtyv0g=
Subject key identifier: AE:0B:EE:CB:5D:8D:AD:EA:D0:3D:92:1F:93:A2:F3:CE:0C:34:88:03
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7D94B600CC5E0E4CC4E41A0D1C265C14E8643AC7
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145863.roa
Signing time: Tue 26 May 2026 08:52:54 +0000
ROA not before: Tue 26 May 2026 08:47:54 +0000
ROA not after: Tue 25 May 2027 08:52:54 +0000
asID: 145863
IP address blocks: 240a:ac8d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:94:b6:00:cc:5e:0e:4c:c4:e4:1a:0d:1c:26:5c:14:e8:64:3a:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 08:47:54 2026 GMT
Not After : May 25 08:52:54 2027 GMT
Subject: CN=AE0BEECB5D8DADEAD03D921F93A2F3CE0C348803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c5:2c:88:96:b1:c4:d6:78:f7:41:24:74:af:
37:1d:4b:20:6a:d5:b9:46:1e:33:44:a9:5c:b8:d8:
44:e8:26:29:98:af:58:d4:38:0c:2c:5a:bf:d1:ed:
28:05:4e:36:7d:e8:56:e7:88:c3:6f:b9:8a:2d:b8:
aa:0e:55:ef:d0:5d:0f:d6:b4:eb:c6:86:97:c0:cd:
2c:25:3e:d2:50:2b:fa:11:7a:c0:16:3e:f4:ff:50:
bd:96:5a:4b:3e:db:6d:55:55:9a:b2:49:5c:92:88:
c3:21:b9:3a:5a:1d:03:6a:dd:c1:d7:55:4a:a9:67:
c0:3b:26:36:f3:36:1a:d0:d7:5c:a2:cd:5d:5f:e1:
34:dc:ab:1e:cb:4e:2c:69:57:90:fb:7c:2e:1b:fe:
24:7a:75:92:00:6b:f1:e2:b8:56:03:9c:73:69:8b:
88:af:68:dd:e3:9b:b8:5a:62:51:46:cd:5e:c4:11:
3d:50:0f:5e:0a:2d:3c:53:66:b7:e6:d3:ab:42:3b:
f4:d5:b2:18:34:9c:5d:9c:e0:66:7b:5b:db:6f:64:
0d:8b:f7:52:8c:c7:5f:b9:fa:5b:de:ae:60:6b:bc:
80:24:25:a8:08:00:00:60:7b:6a:96:5c:39:ab:8e:
a9:61:f8:9d:99:9d:bd:fe:9a:99:8b:45:be:8f:28:
ec:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:0B:EE:CB:5D:8D:AD:EA:D0:3D:92:1F:93:A2:F3:CE:0C:34:88:03
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145863.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ac8d::/32
Signature Algorithm: sha256WithRSAEncryption
8e:54:61:a4:22:0d:b7:54:ad:98:94:95:19:a6:eb:6a:b7:56:
67:b4:2c:0b:32:5c:0f:91:03:f8:24:c9:1e:a1:05:ea:e0:cd:
a7:ed:5d:ee:38:af:04:c1:80:f6:ca:29:eb:5b:d7:54:05:f6:
9a:6c:30:c5:8e:5e:42:9c:57:7d:e3:fc:e2:df:a2:13:5a:b7:
05:c7:cb:15:69:ce:4b:29:44:2d:8c:f9:ee:cd:67:b3:26:0d:
5e:57:30:e9:ac:57:56:9f:af:e8:20:b0:db:67:cb:5b:c6:d3:
47:74:97:94:a2:8e:41:15:3f:e0:bc:96:7a:5d:50:ee:38:9e:
21:1e:0b:5e:e7:4e:9a:0a:21:07:38:e0:44:4f:d8:ae:10:fb:
98:22:a2:19:36:d1:6c:d9:b2:b1:20:a4:99:78:60:9f:46:ae:
0d:5b:3d:59:5a:b1:c9:f8:cb:bf:33:1e:c9:b0:d5:be:60:03:
44:a7:e8:6c:2b:41:c5:9a:3e:19:10:4e:33:8f:d5:c5:66:7b:
b9:fc:33:6a:32:20:d4:5c:ce:b1:a5:85:d2:bf:30:87:dd:6f:
f9:42:74:71:5f:aa:dd:8f:1b:b1:b3:30:9d:49:4a:f7:34:b3:
5c:f1:80:25:d7:6c:3e:de:2d:cb:e0:19:91:f8:58:95:29:00:
a7:01:22:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:05 2026 by rpki-client