Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145883.roa
File: AS145883.roa (raw, json)
Hash identifier: V+UXjyEBP1SXM459Wp+mJBPvdJfmfXXCjSUpG3U+6Gc=
Subject key identifier: E3:E7:A6:12:E4:54:01:F6:5B:61:64:65:DC:8D:8E:80:CF:6C:01:D2
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1FD2C9C16FE51B5A30487983849FFD70187C17FD
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145883.roa
Signing time: Mon 25 May 2026 06:28:25 +0000
ROA not before: Mon 25 May 2026 06:23:25 +0000
ROA not after: Mon 24 May 2027 06:28:25 +0000
asID: 145883
IP address blocks: 240a:aca1::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:d2:c9:c1:6f:e5:1b:5a:30:48:79:83:84:9f:fd:70:18:7c:17:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:25 2026 GMT
Not After : May 24 06:28:25 2027 GMT
Subject: CN=E3E7A612E45401F65B616465DC8D8E80CF6C01D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3e:a6:91:27:b0:40:0a:e9:e8:f1:d7:95:94:
32:ca:7e:62:ef:08:34:f3:c4:d7:c4:c7:74:a6:73:
47:d3:d9:50:70:a3:27:8e:3d:bf:74:6b:7e:73:a8:
69:dd:6f:3e:de:0b:3b:01:23:99:2e:09:ec:56:ad:
70:b1:72:19:d2:37:37:ac:b6:e0:7a:f2:ec:d2:e6:
03:1c:ae:b1:21:b5:d5:c4:2b:dd:77:18:e3:9c:2e:
70:29:88:8e:66:c4:aa:00:fc:4b:0a:6f:e3:c9:c7:
78:5e:2c:63:a4:0b:62:64:49:4a:75:6c:76:59:fb:
63:46:14:54:a6:57:d0:4b:64:fb:fa:e8:7e:f8:58:
b3:0a:97:32:ab:39:8f:c4:db:a1:78:d1:4d:f0:38:
ee:6c:dd:f4:a4:ed:29:89:41:ed:c6:f8:f5:f3:9f:
dc:9b:b2:78:7a:a2:17:57:95:fa:48:85:f2:bd:1e:
99:c7:15:b0:25:7c:55:9f:a8:e3:2d:46:0d:1c:10:
af:69:f8:da:0a:61:ac:a3:7f:91:db:46:e9:0c:74:
c4:59:ee:a8:aa:a7:60:b4:ba:81:13:c4:22:21:ea:
1c:16:6a:16:39:e5:59:f7:d4:d6:10:c0:75:40:3c:
ba:56:e5:28:fd:ab:7c:35:36:2f:0e:26:9d:55:2d:
5b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:E7:A6:12:E4:54:01:F6:5B:61:64:65:DC:8D:8E:80:CF:6C:01:D2
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145883.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aca1::/32
Signature Algorithm: sha256WithRSAEncryption
54:27:ca:69:eb:f5:49:29:d2:fb:2e:b9:20:c4:fc:b5:33:51:
d1:28:23:24:f4:fe:79:fd:11:30:d7:26:6b:00:1d:e4:40:ee:
0a:06:f4:cf:17:f1:25:7d:91:ea:cd:42:7c:15:ea:46:ac:de:
90:c0:d6:92:d8:53:47:a3:9a:26:d3:27:e7:7a:d8:15:c3:35:
2d:98:72:75:c5:02:0b:a4:48:9f:af:d1:45:aa:9c:07:d6:40:
ba:bd:cf:06:9c:5b:16:5e:67:a1:0c:09:ef:1c:8c:a0:6a:33:
62:4f:60:6b:7c:ba:dc:c7:18:cb:02:56:c1:65:71:51:8a:ee:
21:22:05:97:97:94:fa:d5:15:e3:2a:49:60:a3:79:06:3e:4a:
af:91:0d:50:09:f8:20:ee:cf:cf:4a:3f:6f:e9:e8:f7:93:9f:
a3:f3:75:0a:c7:15:35:2f:5c:d0:62:1b:5b:e2:98:e4:d9:dc:
7d:e5:a9:4c:17:cb:5b:de:35:21:f4:05:7d:81:e0:be:63:2b:
e2:e4:f6:41:f7:1c:d5:b4:90:7b:be:a0:ec:9e:7b:db:03:57:
c8:52:49:5f:d8:00:59:44:c8:fd:56:85:52:42:77:b1:30:9f:
4f:f1:f4:c9:06:8b:f8:89:25:0f:6b:79:87:cc:04:b5:ad:a6:
86:cf:1a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:42 2026 by rpki-client