Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145879.roa
File: AS145879.roa (raw, json)
Hash identifier: sWbw21iTenNIOpDEjKWDQ6ZMIchpo+gS6Ky6tt9rTuQ=
Subject key identifier: 1E:2C:EF:CF:F0:22:B0:D5:30:F4:86:2D:54:9C:B6:49:F4:46:0F:88
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 65A9E717856E2F885AA4D36C17ACD38A714CED7A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145879.roa
Signing time: Fri 22 May 2026 02:48:02 +0000
ROA not before: Fri 22 May 2026 02:43:02 +0000
ROA not after: Fri 21 May 2027 02:48:02 +0000
asID: 145879
IP address blocks: 240a:ac9d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:a9:e7:17:85:6e:2f:88:5a:a4:d3:6c:17:ac:d3:8a:71:4c:ed:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:43:02 2026 GMT
Not After : May 21 02:48:02 2027 GMT
Subject: CN=1E2CEFCFF022B0D530F4862D549CB649F4460F88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:97:08:26:73:32:87:fe:54:23:33:c9:a9:49:
37:20:6f:02:3b:ae:6a:89:9f:a7:92:77:53:f2:5e:
19:4e:c4:a7:81:63:5c:45:5f:28:d6:a9:55:87:5c:
96:44:18:ee:05:71:92:bf:84:98:7e:80:ed:34:40:
44:13:f7:e7:c8:89:59:bc:f6:da:06:91:ad:e6:92:
60:b1:01:3f:4e:9b:0a:30:e8:42:80:43:86:aa:c8:
e6:24:2d:ab:19:ce:af:01:b4:a9:16:a5:05:b4:03:
77:02:49:bb:80:40:38:a5:af:86:21:53:db:96:06:
a0:66:bb:cc:54:0a:4d:d6:12:01:b5:6b:09:0f:40:
bb:4c:78:bf:a9:89:21:ca:f2:21:aa:a7:ba:36:35:
57:b6:ef:b0:2d:cf:0c:c6:a3:87:be:91:d9:4b:45:
de:fe:7c:fa:c1:35:63:30:77:d5:17:d7:f7:9f:9c:
ad:19:49:eb:4b:e6:67:e7:13:0f:40:b8:2c:57:a6:
79:1f:e4:d1:35:cc:77:ae:72:eb:6a:44:05:6f:32:
c9:a1:15:fe:d2:bb:e3:6b:50:94:1a:0f:6f:be:2d:
80:b7:6a:23:e4:16:80:da:50:7c:71:df:ac:af:15:
c1:89:a8:9f:08:91:9c:79:7e:2c:6e:5c:44:8d:7e:
e8:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:2C:EF:CF:F0:22:B0:D5:30:F4:86:2D:54:9C:B6:49:F4:46:0F:88
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145879.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ac9d::/32
Signature Algorithm: sha256WithRSAEncryption
3e:a6:62:65:54:64:3d:7b:d9:78:2f:25:71:5f:db:94:db:7a:
bc:e2:ad:51:be:43:84:39:24:e5:69:a4:d2:51:15:45:e7:09:
83:0c:7c:a1:6e:fe:f9:2f:9d:47:c9:18:a0:64:8c:10:ef:ee:
c6:38:9e:d6:c4:26:75:ea:41:df:fc:9c:2b:f5:5b:6d:f2:a0:
1c:8f:2f:48:bf:eb:cb:f2:17:9e:4c:ed:80:46:03:64:2c:41:
a1:cc:40:ed:d0:78:6a:38:e2:d7:43:98:49:a6:b7:a2:51:22:
f0:94:e6:d7:97:b3:73:e2:d2:80:c4:81:91:88:b3:04:a6:9a:
e1:7d:29:64:62:17:13:ee:f7:a5:2f:b0:46:ab:8a:27:9e:0e:
9e:48:73:fb:b2:3e:f8:f7:3a:05:ad:1b:c6:27:6c:e3:16:f5:
f5:d9:53:bd:a6:dd:ec:90:f0:cb:b3:c0:aa:38:ae:b4:33:a7:
5c:0e:e8:6f:61:e6:21:a5:9b:7c:d0:4b:9d:ae:6d:3e:a8:ed:
c4:6b:9b:ae:9d:c3:6b:9f:57:48:2e:e6:30:94:d8:dd:d6:61:
d8:3e:d9:7c:74:cc:e2:04:77:0a:09:99:88:13:8f:fd:59:2a:
3a:e1:ca:db:76:44:e8:46:22:e8:52:8b:70:f5:bf:d2:44:8d:
c0:30:54:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:41 2026 by rpki-client