Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145872.roa
File: AS145872.roa (raw, json)
Hash identifier: Cw3goHdGEM61Sy9BTcnLSwPekHLE64heRRpmjTLa2iw=
Subject key identifier: 46:3C:2C:6E:26:AA:07:5F:9E:CB:22:0A:AB:EE:F6:97:B0:BE:F0:46
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 01A4076FCC56D1963498253B6A51F7EAF426F7E2
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145872.roa
Signing time: Fri 22 May 2026 07:24:39 +0000
ROA not before: Fri 22 May 2026 07:19:39 +0000
ROA not after: Fri 21 May 2027 07:24:39 +0000
asID: 145872
IP address blocks: 240a:ac96::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a4:07:6f:cc:56:d1:96:34:98:25:3b:6a:51:f7:ea:f4:26:f7:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:19:39 2026 GMT
Not After : May 21 07:24:39 2027 GMT
Subject: CN=463C2C6E26AA075F9ECB220AABEEF697B0BEF046
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:58:3a:a3:13:c1:60:1d:0f:41:ec:6c:f2:38:
9b:63:da:50:50:ea:04:e3:84:e7:aa:55:80:0c:9c:
33:cc:82:80:97:b5:fc:22:c6:5b:6d:50:75:d3:70:
ea:73:5c:fd:ab:d4:13:a8:2c:a5:26:21:72:07:cf:
3c:2c:04:28:3c:8e:7d:84:7c:7f:26:cb:93:ed:7b:
67:31:b7:90:bc:4c:d7:a4:34:28:b5:be:92:0a:e3:
a5:b0:2a:41:26:ab:d3:f3:60:64:b7:50:80:34:ce:
24:3c:c7:71:0b:06:9e:cc:a6:3f:9c:88:58:ea:b5:
ef:32:43:95:c8:51:fe:4c:7e:28:9d:b2:d5:39:3d:
9d:a5:c4:16:39:8b:3e:8b:73:5a:37:e9:0f:3c:12:
ae:ca:20:ff:97:2c:bf:80:13:37:7a:35:d3:11:42:
7f:28:18:24:53:22:94:e5:92:51:fe:98:fa:db:38:
f0:13:27:34:3a:b8:0e:48:d0:fb:98:1e:99:7f:e2:
b6:f8:21:51:bb:15:1a:de:cb:38:c8:1a:31:17:93:
d2:d4:76:46:cb:52:e9:bd:b1:bc:e4:2c:9d:e6:b4:
20:36:5d:bf:cb:f4:98:ee:c9:e7:1c:23:ad:a7:ce:
0e:e9:30:8a:98:be:a2:a4:d6:e9:35:36:16:74:69:
81:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:3C:2C:6E:26:AA:07:5F:9E:CB:22:0A:AB:EE:F6:97:B0:BE:F0:46
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145872.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ac96::/32
Signature Algorithm: sha256WithRSAEncryption
98:fb:e7:04:4f:2b:19:87:62:c4:0d:24:f7:d4:e6:6a:14:7b:
67:69:90:7a:ec:9f:b5:d8:bb:8e:a0:a4:54:3d:7e:bf:31:aa:
ea:27:08:d6:f7:81:30:87:d1:38:bf:fd:f4:f3:9a:d8:91:08:
f9:c7:53:06:35:eb:13:68:be:d1:13:7d:f8:3d:22:16:df:d3:
f0:f0:c9:27:47:52:d7:5a:2c:db:81:73:2f:09:41:34:50:9c:
5b:ed:0a:3e:de:6b:9d:7c:1e:12:86:b1:a6:06:72:73:0b:0d:
fb:33:99:5d:52:d9:77:43:64:3c:46:f3:79:39:57:22:6f:05:
2b:c3:65:64:fb:69:a4:fb:3e:2a:44:d3:73:89:ba:20:29:e5:
27:d5:b1:49:8d:44:0f:d3:f5:e0:0a:20:23:43:03:8f:b2:a8:
dd:8f:53:0a:24:ff:58:58:b9:44:8c:63:28:ac:91:c8:19:ff:
e2:53:d3:de:f1:bd:2e:d3:0b:46:e9:8a:ae:6f:36:b7:fd:f5:
93:4c:1b:af:87:e6:38:08:f6:e5:18:06:52:20:30:31:89:90:
eb:34:7f:f4:37:d4:9e:8a:7f:d4:d5:1e:72:4c:7f:d6:66:71:
58:86:d2:bb:d7:e8:56:a5:3b:11:37:8e:86:a3:39:4e:75:33:
d2:0d:9f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:50 2026 by rpki-client