Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145887.roa
File: AS145887.roa (raw, json)
Hash identifier: eSRBHSyphh6AZcaCwx1ZBvfcw7dGKv0G+H3kMkDBAo8=
Subject key identifier: 41:54:DF:5F:8E:35:A3:82:26:30:E9:BB:CA:B5:43:93:50:26:E5:02
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2051F65D140CAABE25BABE2C90A0BBE28CA5105F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145887.roa
Signing time: Fri 22 May 2026 02:47:39 +0000
ROA not before: Fri 22 May 2026 02:42:39 +0000
ROA not after: Fri 21 May 2027 02:47:39 +0000
asID: 145887
IP address blocks: 240a:aca5::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:51:f6:5d:14:0c:aa:be:25:ba:be:2c:90:a0:bb:e2:8c:a5:10:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:42:39 2026 GMT
Not After : May 21 02:47:39 2027 GMT
Subject: CN=4154DF5F8E35A3822630E9BBCAB543935026E502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:05:53:68:a8:7b:8f:e7:cf:cd:bd:6b:c6:fb:
33:4f:4e:86:cb:6c:22:0f:2c:72:3d:7a:ae:df:24:
83:97:b6:eb:7d:37:a0:19:fc:0d:ff:20:94:c3:f6:
cb:40:d2:d7:5f:0f:23:81:0a:b7:1e:c5:6e:7f:a5:
e1:a1:d7:ee:c8:bb:c1:7c:06:1b:78:3b:ee:b2:ce:
0e:f4:54:c2:f4:63:8a:5d:b7:9d:c4:f4:fd:1a:e7:
a7:1d:62:3d:da:37:66:54:35:56:68:ae:42:88:f1:
6d:e3:89:d4:e2:3c:7a:9a:72:51:60:e0:b5:96:31:
40:53:c9:ad:1a:c0:c8:26:00:e2:06:59:33:53:f7:
b8:ce:c7:8e:69:c7:24:af:3a:16:d4:1a:89:5d:fa:
32:07:cc:b7:4e:ca:26:a1:aa:70:ff:ba:5f:4f:39:
e5:09:25:7f:f1:cc:00:84:4b:9e:dd:5a:ce:2d:c2:
1f:16:9e:69:44:b9:ba:43:1a:3a:f9:19:8a:dd:cc:
64:0e:a4:05:a4:09:92:fa:f2:39:8f:32:d8:49:65:
b3:e4:c9:77:b0:4e:21:e9:7e:5a:d6:79:bf:34:38:
5e:e5:60:4b:c5:39:c6:ed:f2:88:6d:6d:94:e5:4a:
d7:cd:f5:5d:45:31:3e:91:e6:78:ce:b5:fc:0e:3a:
aa:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:54:DF:5F:8E:35:A3:82:26:30:E9:BB:CA:B5:43:93:50:26:E5:02
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145887.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aca5::/32
Signature Algorithm: sha256WithRSAEncryption
00:3d:d2:ba:53:a8:c2:8b:0a:44:7d:6f:12:1e:24:21:2d:e3:
80:b3:a9:4f:62:7c:39:d9:05:10:cb:83:98:ed:13:87:c8:79:
17:52:e1:ef:be:7c:77:6d:3a:9b:af:b0:8a:0f:fb:28:5a:47:
8e:7b:c7:03:3c:85:27:fb:fa:50:34:7e:42:f3:0d:54:2f:d1:
e6:2f:f8:61:bd:27:7c:ab:14:35:3b:58:1d:c1:cf:a5:a9:6b:
45:4c:2e:f6:7b:27:5e:55:f0:15:77:a9:81:f1:92:55:a1:ce:
de:99:81:f5:4a:c4:ae:50:4e:4a:53:b7:0c:af:25:49:70:61:
e0:10:f5:dc:bb:fa:8a:4f:2e:1a:34:87:79:f7:37:2f:6c:29:
fa:7c:fd:62:78:bf:e9:fe:5c:63:db:b7:d1:f5:7a:ef:41:6f:
3c:dd:68:ef:8e:a4:4a:49:75:ef:6d:a5:ad:ca:f3:12:de:b2:
e2:b1:01:45:e2:9c:57:dd:98:4e:e3:4a:ec:7b:99:44:eb:0b:
5b:7b:84:14:92:f0:c5:37:d7:a4:f6:10:18:a2:d7:54:44:7e:
de:6b:2c:fc:81:18:aa:cd:ca:b7:6a:1c:d0:1d:b1:24:79:d3:
fb:a1:cd:06:06:cb:fe:c8:ec:33:96:3b:df:4c:7d:79:99:40:
7b:9a:21:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:25 2026 by rpki-client