Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145882.roa
File: AS145882.roa (raw, json)
Hash identifier: B8mPp4s3iX0MACksG3aIblSKFUNC2WpB7pOXgmHfbb4=
Subject key identifier: 2A:AD:E9:04:77:EC:79:92:DF:E5:CA:BA:2C:90:EF:35:09:03:62:1C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4217C7BDD3CAAE8CE3AA860F79866FEC1CDDB2F4
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145882.roa
Signing time: Fri 22 May 2026 06:58:26 +0000
ROA not before: Fri 22 May 2026 06:53:26 +0000
ROA not after: Fri 21 May 2027 06:58:26 +0000
asID: 145882
IP address blocks: 240a:aca0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:17:c7:bd:d3:ca:ae:8c:e3:aa:86:0f:79:86:6f:ec:1c:dd:b2:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:26 2026 GMT
Not After : May 21 06:58:26 2027 GMT
Subject: CN=2AADE90477EC7992DFE5CABA2C90EF350903621C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:0a:8e:e4:81:2a:d8:21:e7:b6:3f:6b:08:7f:
18:ab:58:55:b9:e6:85:25:c2:0a:24:00:ea:b7:e5:
75:52:91:83:f5:3e:55:98:2c:de:bf:5e:c1:b3:9e:
77:9a:bd:88:b8:ce:a5:8a:0d:98:b2:bd:69:00:0a:
38:34:e8:f1:15:1a:7e:59:ab:3d:ee:c0:53:d9:4e:
ab:e2:c5:6c:b4:4c:aa:40:a8:fc:a7:b3:32:e8:ce:
1c:8f:bc:37:5c:38:eb:06:e0:74:6b:2e:03:1a:ca:
6f:1e:82:3a:f9:dc:9b:01:ec:69:a5:08:08:4d:a5:
81:78:ba:42:71:ca:d8:3c:c2:de:5e:1f:44:eb:2f:
ce:c9:a0:cb:c4:f9:43:9d:df:55:13:65:bd:38:ab:
cb:33:48:74:a0:21:c1:d0:8b:b8:ea:41:e4:b1:4d:
3b:64:4b:2f:d2:4e:4e:e3:ac:0f:50:c2:eb:98:32:
a2:79:53:8b:b5:45:4e:25:e2:72:02:a3:fb:8e:2e:
2f:a4:a8:6f:2d:59:86:89:c6:04:92:16:92:16:f2:
10:7d:8f:7d:24:33:b7:b6:85:23:0f:e8:eb:f9:38:
46:29:08:ab:4d:dc:08:12:2d:dc:fc:ea:b6:0e:7e:
b2:60:0c:d1:42:05:4f:83:3d:67:f9:86:26:2c:a8:
0b:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:AD:E9:04:77:EC:79:92:DF:E5:CA:BA:2C:90:EF:35:09:03:62:1C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145882.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aca0::/32
Signature Algorithm: sha256WithRSAEncryption
4d:40:3d:1e:7b:8d:67:c3:37:00:ec:91:f4:d6:7f:4f:57:ca:
9c:c9:75:d8:05:36:2d:09:33:5c:55:e7:f0:92:39:dc:51:b1:
0e:80:30:2a:8c:25:01:e6:8c:38:fb:1e:28:36:1c:74:c4:e5:
10:d7:93:b6:9f:b5:ea:cc:45:d0:65:7a:10:6d:c7:13:d8:fe:
79:77:16:ba:fd:c9:0c:a0:d4:33:24:ed:d3:c3:eb:ef:74:fa:
00:d6:8b:40:ea:d7:71:3f:e1:a9:80:3f:08:7b:32:4a:ec:00:
87:05:56:30:69:e5:14:a8:bb:e4:81:fa:bd:08:29:32:41:e8:
9c:75:7d:11:32:3a:e5:76:cb:fe:eb:af:a8:d3:1e:d4:0e:28:
0e:81:98:f8:1b:d1:a1:f5:6f:c5:34:26:b4:dd:23:5d:99:ac:
b2:23:f6:2d:b5:29:6e:b6:11:13:1b:9c:20:a4:3a:c2:42:06:
c4:05:89:13:30:49:23:34:e1:b5:59:df:fb:50:ff:da:ef:aa:
d1:3a:ee:d7:60:33:72:b8:e4:4b:5d:70:2a:31:37:b8:3e:73:
9d:ac:32:17:cf:79:0f:de:d5:74:ef:3f:2b:08:ff:ce:e5:22:
c9:d8:3b:e4:4d:df:8b:a0:e4:e9:93:63:91:b2:fa:b1:b9:66:
cf:6f:51:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:30:13 2026 by rpki-client