Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145897.roa
File: AS145897.roa (raw, json)
Hash identifier: Npd1aOmWUyIH8AYFhizVW84e7ROcrmf/dUqUCDwRZ0E=
Subject key identifier: E7:CA:2D:30:03:71:97:1E:A9:6B:12:BE:C6:76:1B:F2:E8:5A:D7:3C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5EE571DF2BD5F8D233AD21B4B58EC94CC25E4ED5
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145897.roa
Signing time: Fri 22 May 2026 06:46:23 +0000
ROA not before: Fri 22 May 2026 06:41:23 +0000
ROA not after: Fri 21 May 2027 06:46:23 +0000
asID: 145897
IP address blocks: 240a:acaf::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:e5:71:df:2b:d5:f8:d2:33:ad:21:b4:b5:8e:c9:4c:c2:5e:4e:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:41:23 2026 GMT
Not After : May 21 06:46:23 2027 GMT
Subject: CN=E7CA2D300371971EA96B12BEC6761BF2E85AD73C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9a:14:7f:1e:e0:59:9b:42:85:d1:a0:73:3e:
6d:2a:0a:47:81:2a:60:eb:8a:92:69:47:4c:6c:c2:
ed:3a:34:87:f7:d6:4a:c4:18:99:fe:89:56:c7:c7:
a5:6e:58:07:e8:84:6a:4b:41:0e:f4:01:c2:37:2e:
0a:a3:1d:68:0c:d7:08:03:35:3b:ed:a8:e6:c7:af:
e4:4f:26:2d:37:1b:c6:f4:e0:ab:cf:11:3c:0c:4a:
0e:1a:99:41:0c:6b:ed:4b:24:cc:70:22:ac:3d:f5:
d3:23:01:2d:26:47:7b:6c:c7:46:2d:30:ad:46:3b:
8d:94:e3:cd:94:e0:0e:2f:38:3e:8c:b6:49:39:62:
7a:3c:d8:40:a8:5a:ce:e0:03:ea:83:0f:2d:d8:42:
da:62:2d:9b:ce:0a:7f:09:2b:7b:fd:89:10:4b:38:
7a:62:af:59:04:de:39:75:1c:6f:dd:ab:4a:41:c8:
cf:02:5e:67:9a:0f:16:2f:d4:78:65:51:0f:6c:ee:
9e:dd:57:8a:5c:5d:8c:2e:c5:1a:28:ec:b8:88:6b:
82:9c:3d:e7:e5:e1:be:0e:81:2a:39:30:0a:fb:2e:
b5:f3:db:14:ab:4b:59:5d:37:0f:bc:66:2c:0d:a7:
45:45:55:cc:c3:c4:1f:5e:c5:f6:7e:93:08:f2:ce:
eb:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:CA:2D:30:03:71:97:1E:A9:6B:12:BE:C6:76:1B:F2:E8:5A:D7:3C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145897.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:acaf::/32
Signature Algorithm: sha256WithRSAEncryption
b2:f7:ba:b8:99:94:28:2c:7f:24:e4:d9:87:40:a9:5f:d8:e1:
d0:9f:da:31:0e:60:a2:53:7c:cc:22:39:a3:e0:11:35:d6:74:
73:0c:8a:a2:07:9d:e2:19:45:77:bc:b2:1b:d5:bb:1d:18:5e:
24:03:45:a5:4e:b9:ef:1a:fc:be:47:4d:32:71:31:71:72:7f:
56:3b:bb:2d:dc:6d:47:c7:0a:a6:48:81:b1:4a:07:90:ca:53:
8d:d4:f2:33:25:51:31:18:ad:4a:79:c0:19:4b:35:12:49:1c:
c2:79:39:49:01:29:7c:3c:59:64:66:5a:db:f1:cd:da:64:11:
94:e0:b5:0d:f4:62:0b:49:56:f9:94:cc:0a:10:1b:3c:54:f3:
64:dd:36:29:b2:2d:1b:21:94:95:71:12:19:f7:10:f8:1c:8e:
42:b0:be:b6:83:51:29:61:02:f3:cf:ca:0c:40:74:0d:f2:be:
31:31:71:ea:5d:16:04:ec:53:9d:e0:80:e1:3c:23:0a:8f:eb:
14:00:83:27:6b:e1:02:fb:77:34:7e:3a:28:d2:22:b9:45:f1:
e9:25:8e:62:f6:de:a8:00:49:74:7c:7b:e2:1a:b7:7c:f3:8f:
98:88:95:3b:67:13:b2:fa:34:95:2c:34:59:41:eb:7b:d2:40:
9f:2e:83:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:38 2026 by rpki-client