Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145898.roa
File: AS145898.roa (raw, json)
Hash identifier: ry1RfJgd6fBzi7oQDmR8XjhdrQNJzJmPUyLVSSopYsY=
Subject key identifier: CD:B3:B3:67:AC:DC:19:82:AF:CE:80:85:D2:61:3B:1A:AC:8A:3C:F2
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 397CBF7B2989A1F36F50409CAB9197F72AB53AE8
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145898.roa
Signing time: Fri 22 May 2026 04:27:09 +0000
ROA not before: Fri 22 May 2026 04:22:09 +0000
ROA not after: Fri 21 May 2027 04:27:09 +0000
asID: 145898
IP address blocks: 240a:acb0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:7c:bf:7b:29:89:a1:f3:6f:50:40:9c:ab:91:97:f7:2a:b5:3a:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:22:09 2026 GMT
Not After : May 21 04:27:09 2027 GMT
Subject: CN=CDB3B367ACDC1982AFCE8085D2613B1AAC8A3CF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:11:88:6c:2d:a9:b3:3c:a2:7d:1c:d8:26:51:
ea:0b:cc:87:6f:32:a0:f9:eb:27:2c:f1:e4:0c:61:
18:e8:2d:7c:35:61:68:4c:a0:58:77:dd:1d:1e:0a:
a5:51:a3:29:5e:f6:0b:cb:bb:68:2b:1b:a9:1a:88:
46:6d:4e:f4:dd:e9:53:09:a2:45:c4:22:9f:b2:53:
b6:de:68:19:a6:44:83:5c:c5:c0:3c:9e:65:68:86:
81:97:be:b6:c5:38:68:fb:96:e5:7e:c4:42:b4:3d:
87:34:ac:09:ac:7e:d5:30:fc:45:56:bf:9c:0d:9d:
73:34:e3:19:b9:1a:4c:82:49:62:68:d8:53:3c:81:
ee:bd:7a:c8:f9:13:c5:ba:d9:fc:df:4d:62:c3:f9:
52:a6:09:ea:26:28:58:05:f1:26:e3:1a:40:4c:b8:
bc:99:53:3a:a2:be:f0:1d:2f:24:e1:70:86:d5:8c:
5f:16:aa:c0:5e:d0:d2:17:77:b4:8f:0e:35:c1:3a:
cb:61:03:e6:5e:df:32:44:4e:66:c8:f0:76:32:32:
39:a3:f1:1f:f6:8e:28:c3:2d:b9:7a:38:ff:78:58:
52:cb:02:fc:79:27:d0:02:65:d9:b7:5c:e5:8c:ed:
9e:fc:39:55:76:2c:2f:3f:61:a4:0a:dc:35:28:ca:
39:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:B3:B3:67:AC:DC:19:82:AF:CE:80:85:D2:61:3B:1A:AC:8A:3C:F2
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145898.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:acb0::/32
Signature Algorithm: sha256WithRSAEncryption
2a:72:87:90:80:38:3b:c9:ba:0b:92:30:a8:b8:d2:84:c5:99:
f2:c9:3d:4b:d9:28:de:ce:ac:4b:42:17:c5:ff:e8:44:56:1b:
2c:0f:cf:df:ed:71:9c:35:16:59:79:32:00:6a:b5:25:71:2f:
53:46:87:34:6c:08:c9:19:4c:48:e5:74:20:94:72:4c:db:32:
a8:39:0c:fa:10:4a:4f:57:03:e5:0f:30:0c:fe:42:82:99:49:
d6:06:6b:3e:a2:a9:55:f8:af:92:45:ad:4b:f8:81:78:15:68:
ee:58:a4:e1:15:88:2e:f3:51:16:16:18:08:92:37:8e:68:4d:
fe:f1:31:95:c1:8e:42:7a:ef:22:77:fd:bd:de:6f:7c:ad:1e:
78:9e:95:cb:9f:2b:dd:ff:f0:df:f5:26:a1:d2:c3:98:d2:59:
1c:70:1a:ab:09:67:23:04:e1:64:b8:c5:14:a2:33:4c:21:9b:
0a:59:a8:29:ee:3f:a4:4b:ef:9b:0a:3b:a0:3c:80:9f:0b:27:
3d:3c:af:5c:0e:b7:79:a4:b0:63:65:d2:cb:6c:83:7a:17:af:
54:7e:43:1c:1c:3b:97:03:eb:24:41:eb:a3:f0:1e:91:48:0c:
5f:9c:12:15:c7:61:45:05:73:6b:86:30:c2:79:0f:4a:cc:12:
e9:d9:e2:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:06 2026 by rpki-client