Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145874.roa
File: AS145874.roa (raw, json)
Hash identifier: xQaTLlIk4y+lzjvcb30Qgb8oCCHRqC25UX7t7F65K8A=
Subject key identifier: 25:37:3A:0B:54:CC:85:A8:64:E5:9C:0A:99:FA:8C:B7:2A:54:78:C0
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 58111F60220636E4FE9BB74A35DA2E2634CA755A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145874.roa
Signing time: Fri 22 May 2026 02:48:02 +0000
ROA not before: Fri 22 May 2026 02:43:02 +0000
ROA not after: Fri 21 May 2027 02:48:02 +0000
asID: 145874
IP address blocks: 240a:ac98::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:11:1f:60:22:06:36:e4:fe:9b:b7:4a:35:da:2e:26:34:ca:75:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:43:02 2026 GMT
Not After : May 21 02:48:02 2027 GMT
Subject: CN=25373A0B54CC85A864E59C0A99FA8CB72A5478C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:c1:c9:c0:41:15:3e:0c:c4:0b:fd:bf:66:b9:
d2:e0:4d:96:69:08:c2:4a:96:e4:bd:a9:8f:d2:ba:
b2:7c:22:18:5b:55:f9:3f:e3:71:3c:19:ed:ba:31:
ef:11:ff:90:1a:78:51:37:01:7b:2b:57:6c:9a:a5:
10:ab:bc:5a:f9:6a:1b:fa:81:a9:e2:99:98:21:6a:
2e:b4:8c:6f:25:dc:9c:1b:0f:4e:37:69:61:5c:8c:
58:53:3d:40:89:09:d1:8f:21:4d:46:09:8e:76:e3:
15:95:6b:f2:fb:67:16:a1:e7:79:72:4a:61:54:97:
41:82:cd:97:79:60:88:43:17:00:09:1e:93:d7:50:
bb:29:bd:6e:a0:6d:de:ce:4b:80:a2:d1:92:8e:ef:
20:a7:79:69:73:fd:2a:26:8a:98:85:a5:c1:49:c9:
60:6c:88:86:60:43:6f:20:a7:9b:b0:8b:17:cb:6a:
a9:f9:be:77:f9:d6:37:b9:dc:76:72:da:ee:5d:0b:
32:14:d2:bf:ef:59:6b:81:68:d1:f9:ee:80:5a:43:
86:83:45:a3:60:24:9a:28:8d:4f:dc:b3:23:91:e2:
a7:ca:cf:bf:ee:8e:20:ac:4f:c8:e7:b1:cd:b7:59:
d9:ff:25:de:1d:19:23:ae:17:2a:b1:18:19:07:eb:
7a:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:37:3A:0B:54:CC:85:A8:64:E5:9C:0A:99:FA:8C:B7:2A:54:78:C0
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145874.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ac98::/32
Signature Algorithm: sha256WithRSAEncryption
55:de:5d:4a:7f:5a:00:ed:42:4b:1d:38:a2:56:c3:db:31:5c:
c1:6e:d5:c5:bd:02:28:29:3c:4d:35:3a:d9:45:21:57:dd:d2:
94:9e:b3:c2:96:c4:e2:4b:dd:dc:d2:d2:64:f4:38:e1:14:09:
74:07:3a:c8:7f:cb:60:3b:bc:b6:84:ec:c7:d3:5a:f2:a6:14:
fa:ba:6b:1f:ea:07:54:12:d7:80:a8:2b:59:31:0a:51:d9:b7:
55:bd:37:d8:d6:3f:a6:60:cd:98:a6:ff:49:95:ab:8f:79:5e:
37:8f:2a:77:cf:3a:22:a1:70:ab:c8:47:5b:45:a4:b4:6e:08:
c7:10:60:c6:d1:5d:d6:4b:f0:4c:ed:74:8f:1d:65:a2:42:3e:
77:20:7e:7c:f9:fb:bf:4f:d7:68:e3:bf:d5:77:2b:00:5b:d0:
66:0b:47:60:7c:6d:dc:62:67:b1:49:c4:fc:cc:4e:74:1f:12:
d1:fd:52:1e:77:71:04:c7:04:57:38:68:77:f7:fa:5a:c1:cb:
03:b4:12:bf:c3:ff:02:c5:b5:13:d7:b9:d0:38:81:a7:46:c0:
d3:1b:b2:13:ad:24:d3:0a:1a:6b:63:0a:a5:9a:b7:cd:b0:90:
82:dd:e8:05:da:8c:75:8c:e3:7b:d0:db:17:ce:38:c6:f4:b1:
79:a5:25:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:27 2026 by rpki-client