Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145873.roa
File: AS145873.roa (raw, json)
Hash identifier: wiB4zLnVYAQ0/w9OxO5xtGHpxLt5or+U77afF+WmZlA=
Subject key identifier: 62:66:70:7B:36:54:DD:C9:5C:48:C0:4C:0A:D4:A6:56:42:27:83:99
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1EC751921498843E6E4CBB9D1B3078940C40BECC
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145873.roa
Signing time: Mon 25 May 2026 01:20:31 +0000
ROA not before: Mon 25 May 2026 01:15:31 +0000
ROA not after: Mon 24 May 2027 01:20:31 +0000
asID: 145873
IP address blocks: 240a:ac97::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:c7:51:92:14:98:84:3e:6e:4c:bb:9d:1b:30:78:94:0c:40:be:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:15:31 2026 GMT
Not After : May 24 01:20:31 2027 GMT
Subject: CN=6266707B3654DDC95C48C04C0AD4A65642278399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4d:77:07:2b:c7:dc:1d:e1:0c:af:73:01:16:
e1:8e:20:9d:97:28:b4:ac:38:ea:15:e3:23:67:26:
a7:9e:f9:a8:5d:47:02:71:26:d2:84:48:75:1c:36:
6e:30:7f:ca:1a:a9:fe:c1:01:0f:96:cd:4d:c3:22:
26:ab:db:85:52:e8:2d:70:e7:92:be:0f:56:72:ed:
81:01:cf:2a:06:a0:ab:70:8d:15:6c:83:dd:6e:6e:
a3:ec:fe:08:9a:f6:13:e8:17:64:9e:28:21:59:cc:
c4:a8:59:b9:37:99:00:dc:59:ba:6f:2d:2c:83:55:
f4:2d:9c:c2:82:86:0e:d6:c5:1c:f7:9a:b2:31:94:
4d:2e:11:a7:a2:49:cb:8c:77:aa:fd:d4:18:73:bd:
72:a3:2c:9c:aa:bc:69:af:04:48:fe:cf:c0:5c:21:
29:68:21:7e:21:86:93:71:aa:1c:f3:41:ea:20:fc:
f7:0d:13:37:ec:32:43:4c:db:4e:d7:e0:63:ca:0a:
8f:0f:a1:66:2e:cc:24:1c:59:bc:5e:59:80:db:5f:
98:88:0d:18:3d:1a:a8:de:7f:da:af:24:86:6d:d3:
29:fc:75:11:ea:0a:d0:a5:ea:69:dd:96:47:1e:ab:
96:34:aa:bc:41:9e:5e:58:31:02:09:a8:4e:33:91:
ff:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:66:70:7B:36:54:DD:C9:5C:48:C0:4C:0A:D4:A6:56:42:27:83:99
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145873.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ac97::/32
Signature Algorithm: sha256WithRSAEncryption
3a:9d:1e:c2:ba:30:47:69:62:73:bd:6d:13:d7:46:17:e2:3f:
ca:3c:ad:bc:1d:3c:3d:21:94:cc:65:ca:c0:2a:7f:91:cf:3f:
70:c9:73:b7:7f:27:c4:2f:1f:40:e3:88:79:f7:58:19:f5:07:
85:fd:6b:aa:24:44:0e:d9:95:0d:e1:10:aa:6d:9e:3b:f2:44:
5b:96:57:00:fc:6a:39:36:51:c4:2e:09:f2:fa:65:87:48:bf:
c0:a6:5b:96:da:10:a5:87:e6:55:93:28:10:26:29:49:b2:f6:
9b:16:7a:6a:2c:e3:de:1d:05:f0:6a:13:67:88:a9:a0:e7:6b:
b1:26:8d:22:c6:69:55:8b:9b:f3:19:3b:7f:f2:80:d0:7f:da:
c0:c5:b0:26:da:f5:75:ab:1f:23:55:14:ab:49:99:9c:4f:79:
ca:e8:cd:38:9e:28:2c:1a:37:e3:38:5d:a6:79:64:c8:5c:e1:
1a:b5:e5:e8:07:e0:4e:d5:24:e6:6a:c2:88:67:37:c3:ef:f9:
5d:91:36:2b:9d:a3:50:c9:63:4e:75:7f:fa:29:77:62:de:ea:
5c:bc:ed:98:62:bf:ec:50:b2:0f:0b:90:dd:00:0b:31:4a:fd:
df:71:01:c9:f6:a2:39:be:eb:15:ee:7a:3d:b6:2c:1e:e4:51:
73:1f:42:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:57 2026 by rpki-client