Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145888.roa
File: AS145888.roa (raw, json)
Hash identifier: E7h6Alf/O00Y/+yZrbW5eEbePVdw2Z3o+lnKeqMN9Vo=
Subject key identifier: B4:66:66:71:69:48:0A:B6:C8:0E:DA:BC:EE:18:25:8C:67:33:F1:13
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1EA429BBC1E3ACCED835EEAE733CC9C6797D0E1B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145888.roa
Signing time: Fri 22 May 2026 04:27:02 +0000
ROA not before: Fri 22 May 2026 04:22:02 +0000
ROA not after: Fri 21 May 2027 04:27:02 +0000
asID: 145888
IP address blocks: 240a:aca6::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:a4:29:bb:c1:e3:ac:ce:d8:35:ee:ae:73:3c:c9:c6:79:7d:0e:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:22:02 2026 GMT
Not After : May 21 04:27:02 2027 GMT
Subject: CN=B466667169480AB6C80EDABCEE18258C6733F113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4c:1e:1b:1a:de:7c:e0:3a:73:bb:e2:a7:93:
59:f9:e3:d8:a0:d0:e5:60:46:c0:a6:ca:62:2d:88:
09:60:df:5c:39:79:f4:7a:36:43:f4:e4:d3:2a:72:
76:53:0f:91:dc:14:a7:17:a5:24:75:8c:a0:99:8d:
79:8d:f7:82:af:2a:5a:a7:79:75:c5:93:f8:7d:45:
23:67:cc:60:45:32:4e:7e:c0:e5:c4:cf:be:0c:78:
b5:0a:eb:35:d8:f1:cc:9f:cb:5c:12:bd:cd:09:e4:
7e:67:40:d0:2d:1a:4d:c4:9f:56:85:f3:26:59:ca:
07:25:2d:0e:ef:03:4d:af:a7:e2:a1:2c:11:93:4e:
9f:81:b5:c6:a7:82:87:1d:15:cc:72:02:f3:f5:80:
d2:f2:cc:16:ce:a8:36:a9:18:00:45:a0:1f:f5:e1:
a8:1a:2a:03:62:7c:9f:a6:0e:1a:03:5d:fa:57:7a:
04:55:67:a7:d2:37:78:74:9c:72:24:6e:fa:0e:79:
32:60:e7:1c:3c:7e:04:85:fc:cc:81:69:0f:81:a9:
f0:ae:a5:5f:00:3b:71:0b:d5:28:ad:4f:a9:a8:9b:
ac:2c:5b:dd:ef:79:ad:54:db:d9:aa:ba:5d:25:35:
91:72:8b:58:da:ed:04:71:a4:19:48:8f:1a:b5:79:
2f:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:66:66:71:69:48:0A:B6:C8:0E:DA:BC:EE:18:25:8C:67:33:F1:13
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145888.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aca6::/32
Signature Algorithm: sha256WithRSAEncryption
32:72:bc:ca:00:72:bb:7e:88:8f:53:c3:3c:73:e7:4f:0d:56:
0c:10:1f:53:40:b2:62:33:4c:71:f3:87:c1:13:5d:57:1a:26:
cf:73:f1:ea:68:99:ad:85:95:af:80:10:2d:a9:83:4c:5b:24:
95:7b:c6:c2:cc:11:8c:bc:e7:e6:83:f8:89:99:b0:6b:9f:e5:
00:5f:3e:28:c7:52:fd:9f:80:98:a5:c5:08:86:10:9e:3b:f5:
73:81:0e:84:2a:f7:5e:71:0d:2f:66:12:56:cb:9a:20:b3:08:
df:69:0e:cf:a6:76:29:37:2e:32:07:c4:7d:2d:c9:9d:35:44:
2b:79:c6:40:57:a3:3b:1f:60:53:7c:43:b6:05:41:5d:3a:e2:
65:29:dc:41:cf:4e:5f:b3:81:c5:c0:0f:4d:ef:eb:a4:ee:d5:
e6:3c:8b:ce:fe:30:29:d6:5d:56:c7:36:ee:41:7f:c9:d4:9c:
77:ef:16:ee:5f:99:44:cc:b6:dd:5a:a1:d5:c2:fb:54:7b:b7:
d6:2b:a1:27:12:77:7f:ad:22:01:57:24:8e:67:a9:f9:d8:27:
d4:9a:88:b3:bd:35:f1:2b:71:84:54:4e:70:9f:1b:c4:9f:55:
bc:61:f6:7f:c5:48:de:02:a0:8c:5a:c6:4a:f7:ca:25:26:79:
80:65:a6:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:50 2026 by rpki-client