Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145886.roa
File: AS145886.roa (raw, json)
Hash identifier: sZ2vOwDT8GqLyp+xFzorR31TIPvmlofm5It0rfoRrIk=
Subject key identifier: DC:86:0F:63:E5:30:83:BA:33:71:74:ED:AF:E3:4E:80:23:DF:92:48
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 04244BB33C88F80D2B518D02253E352671C99CD8
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145886.roa
Signing time: Mon 25 May 2026 01:38:36 +0000
ROA not before: Mon 25 May 2026 01:33:36 +0000
ROA not after: Mon 24 May 2027 01:38:36 +0000
asID: 145886
IP address blocks: 240a:aca4::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:24:4b:b3:3c:88:f8:0d:2b:51:8d:02:25:3e:35:26:71:c9:9c:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:36 2026 GMT
Not After : May 24 01:38:36 2027 GMT
Subject: CN=DC860F63E53083BA337174EDAFE34E8023DF9248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:e3:fe:31:d6:48:c5:15:32:d6:4c:e7:be:44:
d2:d2:db:44:3d:12:a9:f0:7c:1c:25:e6:40:dc:55:
d2:51:80:7b:73:39:ba:53:4e:2f:62:e2:71:a6:45:
39:d9:b6:91:8a:3f:87:7d:2a:da:cb:4a:d4:1f:79:
c4:c1:fc:cd:77:bd:fe:b0:7d:b1:3f:d5:00:9f:29:
26:b9:ca:41:e3:bc:e0:3c:45:6e:4e:a1:bc:6b:a3:
d4:ef:33:19:ac:c0:59:30:37:44:9c:78:10:00:b3:
6a:ac:49:83:b2:9e:eb:be:1d:fc:c8:2c:79:18:fe:
ab:29:4b:d1:27:d5:67:11:56:80:44:08:8a:6a:e8:
71:8d:d1:de:99:77:96:ab:a2:ee:03:3f:1e:c8:b4:
bb:ef:74:ab:31:59:aa:7c:dd:00:27:8a:c6:93:49:
27:6f:a0:93:38:d1:fb:70:70:e1:8b:a4:20:a2:b2:
75:f9:59:fd:9a:42:fd:8a:3b:95:7f:31:bf:65:78:
a7:bf:0d:f7:0e:ae:3b:69:83:c8:97:b4:59:f3:14:
41:82:21:be:94:72:fa:e8:94:fb:14:b1:fb:99:e7:
a2:19:e3:2b:72:2e:d3:41:5c:98:74:c4:11:cb:4c:
10:85:ca:ae:07:a4:bc:f6:c3:02:f0:08:93:9b:18:
cf:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:86:0F:63:E5:30:83:BA:33:71:74:ED:AF:E3:4E:80:23:DF:92:48
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145886.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aca4::/32
Signature Algorithm: sha256WithRSAEncryption
14:8d:02:f6:ac:d0:61:4d:b4:ed:f0:5d:b8:a0:a3:86:f2:34:
38:7f:b7:42:e4:0f:30:67:1f:29:67:a6:82:8b:50:69:29:32:
96:be:6f:9d:14:08:2e:92:64:a6:ee:67:20:bf:1d:23:fb:bc:
5d:38:6f:9e:31:85:71:fe:c1:ea:f7:7f:89:82:4e:0b:2c:60:
dc:91:b5:4f:92:1e:6f:fc:06:f6:53:7f:4a:a0:cc:d7:50:0e:
67:e5:e3:17:8b:39:44:56:f2:bb:a7:12:66:29:f7:7f:90:31:
8b:2b:56:fd:b6:cb:c3:3a:d0:ce:05:97:4c:7d:ac:49:5b:4e:
b2:fd:a8:1d:1c:91:22:ee:17:e2:ba:3b:ce:46:65:27:ba:74:
2c:85:2f:46:d9:f9:e7:b9:e1:e9:bf:94:99:5c:2a:12:c9:e4:
9d:9b:5e:8f:f4:75:87:a6:af:17:0d:fa:22:1f:07:e6:ba:60:
e6:df:78:11:c0:4d:dc:04:0e:a3:23:88:ae:b8:70:3d:39:eb:
09:a9:e2:a9:48:ba:9c:90:67:b3:01:8e:27:61:03:ce:bb:9c:
93:eb:1f:b1:b5:34:fe:10:cb:e9:b0:e8:ac:ef:f2:d1:9b:bf:
fd:74:a0:f0:bb:d9:77:7f:fd:1a:fb:b6:5f:5d:5f:10:50:4a:
4b:a7:d5:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:16 2026 by rpki-client