Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145868.roa
File: AS145868.roa (raw, json)
Hash identifier: 9C1ok6W7aTW4zXt6vrTGyoK0AoXDOlyaRLz90LlHYN4=
Subject key identifier: BE:08:BF:A3:67:20:BA:1C:91:AD:23:7D:F8:9C:B8:8D:EF:A9:EB:F0
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 684AA8C6E0BF9369CCC6F3CFC312F5B69F30CBFA
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145868.roa
Signing time: Tue 26 May 2026 02:35:29 +0000
ROA not before: Tue 26 May 2026 02:30:29 +0000
ROA not after: Tue 25 May 2027 02:35:29 +0000
asID: 145868
IP address blocks: 240a:ac92::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:4a:a8:c6:e0:bf:93:69:cc:c6:f3:cf:c3:12:f5:b6:9f:30:cb:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:30:29 2026 GMT
Not After : May 25 02:35:29 2027 GMT
Subject: CN=BE08BFA36720BA1C91AD237DF89CB88DEFA9EBF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:9b:d6:b3:34:a6:18:b6:f7:cb:05:2a:08:b9:
52:e7:e7:d3:25:1a:dc:f8:f3:45:d9:ea:cf:39:da:
c8:57:95:5d:85:f3:db:e9:c5:09:4f:ef:4d:7b:c6:
9f:c1:c2:e0:b5:7d:25:56:2a:86:fb:0c:61:93:c7:
18:bd:cc:85:85:0b:62:51:18:0b:7b:00:6f:54:f5:
db:c7:9e:3f:a2:2d:14:54:5c:96:91:59:8f:04:b5:
c8:5f:68:7d:f5:6a:ee:69:ee:a8:e5:e1:67:b1:19:
e5:7d:1b:c3:12:fa:67:38:83:fc:0f:ee:ca:41:dd:
5f:e9:ea:ef:d2:52:02:df:de:42:fb:f3:31:f5:23:
50:94:4d:c0:49:4e:44:65:dd:16:40:13:1d:ea:a1:
88:a3:69:40:81:c5:76:72:07:16:16:14:6b:2c:95:
21:43:88:99:6f:15:2f:eb:c2:94:80:13:01:ad:57:
a5:c1:c5:fe:31:6b:7c:bd:c3:8f:ae:b4:b2:34:be:
84:43:a7:76:8d:c2:81:75:14:06:12:36:7a:65:e5:
21:21:37:cb:22:16:14:88:31:d4:33:8f:8f:f2:9c:
47:15:c8:7a:f6:9f:96:24:96:24:7e:22:70:52:18:
a5:c4:ad:3e:d3:29:48:01:85:56:31:e2:35:f5:8d:
db:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:08:BF:A3:67:20:BA:1C:91:AD:23:7D:F8:9C:B8:8D:EF:A9:EB:F0
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145868.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ac92::/32
Signature Algorithm: sha256WithRSAEncryption
10:5d:dd:18:f1:26:4e:6e:82:04:ac:eb:16:7b:12:18:ef:80:
00:e5:82:dd:28:15:ba:ac:d7:2c:ee:41:32:1f:7c:35:7c:8f:
bb:4e:d6:9a:78:e8:8c:2a:19:4d:18:43:9d:2d:e4:89:88:e8:
3d:86:78:6c:ac:e9:74:da:02:c2:c8:2f:0a:85:a5:6c:b6:3f:
90:9e:e8:0b:21:f1:01:43:1e:ee:c4:1c:a5:3a:6a:b1:40:c6:
e0:2d:57:fe:a5:39:3e:10:0a:cc:08:0a:27:83:4b:2c:eb:d1:
2b:8b:b1:18:8e:97:4b:5c:80:c0:a0:19:90:d7:ba:fd:5c:c4:
01:d8:2e:f4:7c:5c:59:f1:0b:b6:eb:b1:e9:a6:cb:56:dc:12:
d9:fe:d9:02:f8:2a:ec:48:a2:17:ab:5f:57:7a:f9:9e:b1:39:
2f:ec:4d:49:35:cf:b2:11:bc:fd:4f:a3:7c:54:b0:28:d7:5e:
45:38:74:83:9f:68:c8:b7:22:a4:bb:c3:ca:9b:d7:39:1b:d9:
dc:05:63:25:b7:a6:60:28:a4:58:d3:f9:00:dd:6d:2d:49:8b:
40:c6:d4:3d:1d:20:e9:cd:27:44:e1:62:f3:42:8f:47:f6:59:
46:fb:33:7d:83:42:e8:73:41:3d:44:d5:1a:c6:08:0d:fc:54:
dc:da:e9:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:51 2026 by rpki-client