Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145894.roa
File: AS145894.roa (raw, json)
Hash identifier: qwMTdHg0LxK6Zu9XtsoIld0QNogr/YHpFspxCI0AKqI=
Subject key identifier: 88:DC:EC:9F:C0:8C:99:F2:1B:DF:A6:09:DC:9E:2B:F6:52:D8:8E:57
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1C47503C2F72CE35549F6407EDEEF1E242C64F5E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145894.roa
Signing time: Fri 22 May 2026 06:28:02 +0000
ROA not before: Fri 22 May 2026 06:23:02 +0000
ROA not after: Fri 21 May 2027 06:28:02 +0000
asID: 145894
IP address blocks: 240a:acac::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:47:50:3c:2f:72:ce:35:54:9f:64:07:ed:ee:f1:e2:42:c6:4f:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:23:02 2026 GMT
Not After : May 21 06:28:02 2027 GMT
Subject: CN=88DCEC9FC08C99F21BDFA609DC9E2BF652D88E57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:26:03:21:af:0f:b1:44:e2:44:77:e4:e7:bd:
60:0f:a6:52:f3:79:60:11:2c:8a:ff:2a:91:03:af:
d4:f9:1c:2a:03:6f:fb:2a:59:8b:0e:7f:d3:70:8a:
d2:e6:cd:60:21:60:ee:f6:0a:77:45:06:1f:58:91:
1c:b0:4b:08:51:a6:a0:ce:61:89:67:7c:c9:61:85:
ad:bb:48:9c:d6:15:b1:f8:9f:4d:1a:29:1d:e3:5a:
da:81:db:eb:93:95:60:9b:c6:a1:fd:03:b9:24:4e:
17:4c:66:c3:7b:04:c3:0e:0c:c1:2b:79:d4:1c:e0:
f5:05:85:5f:0a:1e:9d:af:0c:c7:8f:cc:10:d0:7d:
47:19:9d:2a:d7:22:67:e9:e0:ee:f4:96:6b:41:f2:
6f:51:6f:01:63:ee:72:4a:57:b1:b9:8d:82:35:64:
f4:22:ad:4e:98:52:ea:f9:50:99:9a:cf:42:c7:6c:
e5:48:f9:36:29:bb:19:96:30:52:9d:d1:49:97:91:
1f:1c:9d:49:e5:86:13:6b:ba:02:bc:2f:ff:4a:0a:
c3:53:80:1d:7b:c2:71:97:de:43:97:6b:b8:5f:0c:
79:bb:fe:61:03:92:73:31:f3:71:14:89:6d:ed:47:
67:51:43:4c:cf:4b:11:4b:7d:36:4d:4e:9c:c1:9e:
74:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:DC:EC:9F:C0:8C:99:F2:1B:DF:A6:09:DC:9E:2B:F6:52:D8:8E:57
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145894.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:acac::/32
Signature Algorithm: sha256WithRSAEncryption
83:e8:23:c3:55:ad:b3:8e:87:0b:b1:64:64:f2:3c:99:12:1e:
10:4e:95:54:97:0c:4d:67:08:68:18:54:2d:1e:87:1f:01:b3:
c7:ec:f5:c1:fd:a7:98:56:c2:38:0a:94:b7:2f:2b:92:84:e4:
e3:16:92:20:93:af:80:db:5f:3d:c7:3c:bf:a6:29:66:f4:42:
c1:16:d8:68:f3:09:05:2b:6d:91:75:9a:e8:68:1a:8c:0d:3e:
e5:6a:78:69:83:3e:ea:51:23:01:82:0a:07:0c:9e:09:86:85:
1e:d4:a4:19:8e:85:e9:48:31:53:30:07:27:c2:76:20:19:12:
05:0b:87:6c:f3:c6:30:e6:57:1c:29:64:1d:6e:70:69:08:bc:
dc:bf:76:d1:7d:cd:d2:63:13:d9:fe:1e:2f:bc:9e:a5:73:9a:
9f:92:9a:94:7f:e2:af:1d:c0:8e:13:60:4a:5a:cb:1d:53:95:
86:d4:29:55:f4:e1:eb:15:e8:da:e5:8f:6b:c9:70:47:48:55:
ef:c4:9d:56:32:2d:3d:76:4f:56:77:9c:58:14:2e:4e:b6:e8:
44:63:6e:4d:e7:de:28:95:c3:5f:56:90:6c:1a:fe:fd:72:ae:
9e:2d:bc:e9:c3:30:9f:11:f0:16:3b:7c:aa:6b:6b:39:25:25:
d1:ec:1c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:10 2026 by rpki-client