Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145870.roa
File: AS145870.roa (raw, json)
Hash identifier: P83GKSuldEP6q00Qb6FG/E9ZGMuggSYsv1ctc8WLpqk=
Subject key identifier: 2B:7F:CC:B6:00:54:E1:A3:63:06:01:D7:A7:86:B9:EC:61:A1:66:20
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 54F3844298714EC2846DA2872CED631B6C1F1EB7
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145870.roa
Signing time: Fri 22 May 2026 06:58:51 +0000
ROA not before: Fri 22 May 2026 06:53:51 +0000
ROA not after: Fri 21 May 2027 06:58:51 +0000
asID: 145870
IP address blocks: 240a:ac94::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:f3:84:42:98:71:4e:c2:84:6d:a2:87:2c:ed:63:1b:6c:1f:1e:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:51 2026 GMT
Not After : May 21 06:58:51 2027 GMT
Subject: CN=2B7FCCB60054E1A3630601D7A786B9EC61A16620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a9:89:44:27:49:2d:3b:4d:bc:76:98:c7:e0:
f4:f5:31:20:8b:52:94:02:c8:f0:02:a7:43:3e:62:
58:a7:b5:02:7d:58:01:0f:f1:eb:dc:d0:4c:ee:a8:
f7:23:10:3e:66:43:6b:e3:39:9d:b3:18:04:83:9a:
49:98:5f:72:60:bf:37:5e:22:f2:35:4c:7c:24:74:
33:a2:52:31:49:ab:9b:27:f4:6b:90:fd:ce:f4:99:
43:70:a6:8b:11:6c:cb:6b:58:48:a1:81:a6:a4:31:
ad:89:44:63:13:19:3e:4e:4d:0a:fb:2a:c6:88:66:
33:fd:e0:b5:17:9f:cf:81:79:0d:61:11:9f:2a:c0:
12:37:3f:b0:f1:53:31:77:0b:17:0a:df:b8:5a:d9:
4f:55:1b:c8:39:5b:a7:58:c5:3f:cf:48:8f:af:b1:
e3:c9:62:bf:57:54:03:2e:cd:9e:3e:1a:34:c6:9f:
6c:99:31:ed:99:d0:04:9f:04:8d:8f:fa:c8:32:54:
ab:26:ff:66:5b:e3:27:bb:1d:87:bc:ad:48:b2:70:
2a:ee:23:91:da:47:33:15:fb:85:0e:d8:78:ae:98:
fa:f0:32:26:ee:13:87:a7:ea:fb:26:7c:ed:33:ee:
ac:15:88:33:4a:e7:1c:0a:d1:88:05:d7:13:40:61:
4a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:7F:CC:B6:00:54:E1:A3:63:06:01:D7:A7:86:B9:EC:61:A1:66:20
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145870.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ac94::/32
Signature Algorithm: sha256WithRSAEncryption
36:f3:94:4c:da:36:3f:c8:9d:0e:73:73:95:36:96:3d:eb:a4:
fe:79:ab:61:9c:bb:31:8c:d3:41:7e:d1:be:bd:b4:74:37:f6:
ca:1d:fb:2a:60:8c:9f:7d:9a:8c:37:08:c9:c3:d3:86:89:ae:
f4:29:fe:49:a0:9a:15:ac:f6:97:e9:f8:28:a7:27:3a:7d:70:
33:e8:b3:c7:a4:c8:55:73:02:11:34:f2:18:fa:19:f4:d0:ee:
f9:41:3d:52:2b:d3:c7:a2:e3:6a:2a:d5:85:b2:48:00:0e:c1:
d7:f7:c2:61:c7:69:2f:5f:90:fc:a4:6e:cd:5d:c6:f3:c7:40:
70:e2:87:46:ef:8c:4f:69:1e:e4:3b:6f:ef:b1:6e:59:34:3d:
91:f5:a9:11:47:3a:67:a6:9c:b9:c8:71:69:af:cf:6c:d9:2a:
40:2b:34:51:39:f3:b3:bb:c5:e2:dd:c5:28:85:cf:69:1a:af:
1a:a7:e5:3f:7c:7f:cb:56:e1:93:89:51:5c:c8:a8:e5:a5:3a:
9f:ba:2e:54:60:e0:2a:7e:11:7d:16:37:73:68:42:ba:4d:7d:
e3:4d:3e:11:8a:13:db:d5:b6:25:c1:fc:e7:14:20:2d:38:c8:
51:2c:ee:35:33:32:02:ea:cb:5a:d0:36:c2:21:98:17:e0:9b:
b4:ae:58:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:26 2026 by rpki-client