Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145878.roa
File: AS145878.roa (raw, json)
Hash identifier: C3pYuBowSbcie6P9bL/Mf9IiNAfvigzFqtAvZ1S7Bo4=
Subject key identifier: BD:CE:C6:9D:34:18:59:E1:79:5E:04:D9:B4:BE:4C:39:7A:4E:8A:5C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1826323212853D082C44C576205C088E0509A195
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145878.roa
Signing time: Tue 26 May 2026 02:34:49 +0000
ROA not before: Tue 26 May 2026 02:29:49 +0000
ROA not after: Tue 25 May 2027 02:34:49 +0000
asID: 145878
IP address blocks: 240a:ac9c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:26:32:32:12:85:3d:08:2c:44:c5:76:20:5c:08:8e:05:09:a1:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:29:49 2026 GMT
Not After : May 25 02:34:49 2027 GMT
Subject: CN=BDCEC69D341859E1795E04D9B4BE4C397A4E8A5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:30:00:00:c5:b5:46:82:f0:24:f2:16:86:9a:
86:43:67:6e:8c:7c:61:73:14:5f:cd:89:ee:f6:d9:
5f:4f:66:ce:27:e9:80:5c:a3:db:65:22:8c:63:b0:
29:83:6d:0c:e3:93:a0:79:35:5f:81:1a:b9:91:f6:
ba:3a:a2:2e:73:c5:4f:82:e3:9c:f9:e7:82:9d:6c:
c2:d3:44:13:cf:07:5f:e4:d1:8e:60:5c:dd:f9:f7:
48:d6:2a:ba:f7:48:bd:f1:15:e0:c6:48:79:ec:19:
75:05:5b:d6:a1:3b:1e:2f:b7:b8:2d:c8:d5:fa:c4:
69:de:b0:17:e6:4b:ba:1d:46:fb:d6:ce:48:12:d4:
61:f1:7e:8d:a0:e0:9c:89:03:f7:43:b9:fe:c2:47:
ee:9c:39:4f:61:6c:21:6b:00:11:4e:e6:e2:57:cd:
06:58:c1:4c:1a:15:7e:b9:ae:ce:1c:51:8d:97:e3:
01:6c:ba:99:1b:37:3b:c3:bc:9b:25:1a:01:23:62:
56:5a:fb:ae:ea:03:aa:4a:e1:28:8e:48:41:b3:80:
06:e8:5d:fb:67:6b:4c:41:fd:bc:41:2e:14:6a:40:
ea:5f:86:eb:d7:b6:fe:01:65:5d:af:7e:51:7e:de:
6f:17:58:03:09:58:3f:10:45:df:fc:15:33:09:f4:
ee:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:CE:C6:9D:34:18:59:E1:79:5E:04:D9:B4:BE:4C:39:7A:4E:8A:5C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145878.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ac9c::/32
Signature Algorithm: sha256WithRSAEncryption
7e:72:0c:5b:7a:09:50:92:e2:e5:67:d9:80:a9:d8:4c:83:de:
98:3f:82:d8:f3:91:66:47:4b:e9:00:2e:1a:aa:5a:5f:12:ae:
32:dc:cf:d1:23:a4:5f:53:a8:99:a4:97:19:34:9c:9e:e2:08:
bf:fc:e4:05:d4:54:e0:94:e4:e8:1e:9e:6e:41:05:04:8c:fc:
df:82:27:77:0a:0e:88:7a:e8:39:4b:d8:ff:10:65:9f:d5:ab:
bc:68:c4:92:df:45:eb:d2:bc:63:a2:c0:22:99:e5:9a:de:20:
9f:b6:bc:b0:32:0e:bf:98:a4:9b:c9:85:8f:f8:9b:d9:15:f1:
52:cb:77:22:6f:32:13:9d:59:40:4e:18:f9:3b:39:61:84:2e:
d1:f3:e2:b6:5e:83:57:51:f2:c6:3c:f3:2a:87:e0:31:6d:7f:
90:b1:e3:09:28:7c:49:ec:36:e7:d8:70:dc:a4:00:84:1a:85:
84:68:53:89:3f:4f:dd:f7:10:f9:7c:2c:de:42:b3:a9:88:01:
ad:ec:45:db:8e:08:47:4f:3d:b0:8e:9a:3b:31:f6:02:58:02:
49:09:ff:f2:66:40:e5:88:53:1a:34:3b:c6:16:8f:96:7c:0c:
d1:0a:fd:b7:e0:49:62:65:a9:a2:bf:08:99:2f:27:52:da:f9:
8f:3b:96:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:39 2026 by rpki-client