Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145881.roa
File: AS145881.roa (raw, json)
Hash identifier: 8JBJRUP7kQKS+0+xsM+7TErHbN5MAeCADukNzeeTpXc=
Subject key identifier: 70:F3:2C:37:47:4F:1A:C6:A6:BC:C1:E1:ED:CB:3E:0B:BB:97:F0:37
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 12E3A8AF03A62DDFA7C49E30C9800A32E38E4D74
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145881.roa
Signing time: Mon 25 May 2026 01:38:12 +0000
ROA not before: Mon 25 May 2026 01:33:12 +0000
ROA not after: Mon 24 May 2027 01:38:12 +0000
asID: 145881
IP address blocks: 240a:ac9f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:e3:a8:af:03:a6:2d:df:a7:c4:9e:30:c9:80:0a:32:e3:8e:4d:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:12 2026 GMT
Not After : May 24 01:38:12 2027 GMT
Subject: CN=70F32C37474F1AC6A6BCC1E1EDCB3E0BBB97F037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:43:04:e2:96:b4:75:27:63:48:8a:b7:82:51:
84:6a:0f:af:77:b5:1e:f4:3e:ea:e5:20:a9:e5:37:
11:d4:28:66:29:08:88:b6:58:70:09:99:dd:4b:00:
2d:bf:1b:a5:3f:28:ac:3d:4e:bc:de:31:ca:a3:83:
94:ad:42:bb:62:e2:29:6c:f5:7f:50:8c:06:69:3e:
b4:07:9f:7d:2a:38:27:23:1f:1d:fe:1b:f8:58:62:
aa:d4:dd:4b:98:28:40:c6:b6:96:e2:4d:72:a8:be:
6b:a8:f8:e5:f6:64:4c:52:57:43:c6:b9:5f:72:82:
96:6e:8a:78:f6:fb:dc:84:ac:be:72:fb:5d:0b:fa:
b0:aa:87:55:95:2f:44:8c:89:fd:51:ac:7b:12:13:
4d:ce:5b:a5:3a:bc:3f:de:56:2e:4a:0d:a0:3a:51:
07:b7:0f:e1:af:11:d0:32:70:6a:fc:f6:c7:fc:02:
a8:d5:11:64:ab:21:23:14:7c:80:05:77:33:2a:a6:
54:f1:de:12:84:9e:ee:72:97:20:ec:94:d1:e8:62:
ae:83:8a:ee:83:8b:21:9f:e2:34:99:86:7c:94:89:
50:d0:e3:d8:c0:c9:e0:2e:59:cc:fe:94:15:c2:b5:
6c:46:62:f0:49:22:63:55:15:15:f0:5f:bf:b5:6d:
ab:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F3:2C:37:47:4F:1A:C6:A6:BC:C1:E1:ED:CB:3E:0B:BB:97:F0:37
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145881.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ac9f::/32
Signature Algorithm: sha256WithRSAEncryption
54:80:e0:44:33:2a:eb:52:49:9e:80:a8:99:96:7e:a1:0f:f5:
a1:a4:7a:d8:bf:d3:2d:5b:af:86:ff:9f:e2:df:b6:c4:6b:d0:
ee:65:ff:06:68:e0:00:f7:bd:96:a4:64:db:0a:18:f2:53:9b:
77:6c:4d:d1:c7:e9:80:05:58:bc:38:e3:42:f0:df:54:da:f1:
29:07:86:f2:4c:0f:19:df:b8:1a:3d:11:a5:e0:c1:33:2a:13:
d4:77:7b:d4:15:35:f2:d2:fc:7a:56:9c:90:bb:fb:48:b8:65:
4a:d0:df:31:88:82:c4:90:36:12:db:6f:9b:05:f0:0f:00:53:
04:a3:46:b1:2a:70:6a:51:f4:ad:b7:07:63:8a:6f:09:78:17:
48:5d:e8:c9:be:b6:84:a3:c7:f6:c8:24:70:10:2b:24:0d:7a:
e2:04:1d:97:3a:21:49:80:03:12:b3:cc:a6:a1:fb:dd:ea:7b:
35:7a:46:f3:b7:39:18:89:7e:56:bc:c8:b8:95:07:13:48:24:
38:c0:df:1d:f9:f0:71:ef:2a:6f:93:29:a5:09:47:5e:41:23:
f7:1b:89:f9:69:04:66:44:9f:74:37:6d:3d:88:74:6d:06:8e:
4f:69:78:bc:11:11:d3:7f:e5:7f:88:a8:d8:bb:69:f7:02:8c:
07:6d:b8:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:24:31 2026 by rpki-client