Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145900.roa
File: AS145900.roa (raw, json)
Hash identifier: yLqcQ8Mb8z8ZMkTfj7kwpDFT66KC6OHNx3cx7U8mJRg=
Subject key identifier: 2E:06:7F:B6:97:3C:26:36:3E:29:B8:E8:F7:95:0F:20:98:EC:BD:47
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 425DA245F012219BFD6994448D763C140105163D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145900.roa
Signing time: Mon 25 May 2026 01:51:26 +0000
ROA not before: Mon 25 May 2026 01:46:26 +0000
ROA not after: Mon 24 May 2027 01:51:26 +0000
asID: 145900
IP address blocks: 240a:acb2::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:5d:a2:45:f0:12:21:9b:fd:69:94:44:8d:76:3c:14:01:05:16:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:46:26 2026 GMT
Not After : May 24 01:51:26 2027 GMT
Subject: CN=2E067FB6973C26363E29B8E8F7950F2098ECBD47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:75:18:4a:63:a5:2c:b0:ab:ef:e5:cb:ff:3d:
34:7e:4c:04:99:01:98:6b:e1:fd:05:2b:33:2f:1c:
7c:5f:85:d2:ea:dd:40:77:b1:3c:85:ce:7c:ea:65:
74:84:35:46:81:95:cb:27:cd:d9:1c:83:b7:0d:76:
0a:d9:42:46:9e:9a:5a:b5:a9:af:5c:c1:af:bc:d4:
57:2a:fb:c9:fc:f3:8f:c1:2b:a8:cd:15:c6:97:bc:
59:b2:ec:cc:cd:a4:7a:a1:4c:ff:ad:2d:18:63:5e:
fc:f7:58:49:8d:b6:8d:6c:41:60:4a:45:40:e1:e5:
01:39:a9:7d:7e:b9:cb:52:e6:b3:0c:c4:2d:02:55:
50:66:d9:15:1e:49:dc:94:2a:35:54:ac:f3:d2:dd:
97:1a:72:8f:89:a5:0c:43:57:6c:3a:55:63:75:77:
21:f6:d2:f0:c8:f2:a8:19:34:bb:08:d9:34:c6:a3:
5a:63:0f:db:af:c2:f5:e0:90:9d:71:a1:fd:4c:1e:
f7:c1:45:a6:4f:23:28:e5:09:83:a3:be:fe:3a:40:
5b:bd:1e:6f:2e:be:e6:84:7f:ba:d2:f8:93:f7:21:
77:93:97:a8:00:1c:b7:4e:ac:63:0d:9d:16:07:50:
93:9c:74:87:43:dd:81:22:38:f2:46:16:1b:fb:99:
65:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:06:7F:B6:97:3C:26:36:3E:29:B8:E8:F7:95:0F:20:98:EC:BD:47
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145900.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:acb2::/32
Signature Algorithm: sha256WithRSAEncryption
22:f6:d5:b2:d3:b9:06:80:09:0e:8e:5d:c1:2f:6b:d1:78:e8:
40:46:fd:8c:be:b6:17:b0:ff:bb:0b:73:38:95:2e:f8:1d:5a:
0c:4f:de:4b:17:c3:55:18:3f:fb:32:14:b6:18:13:3b:65:89:
9c:0d:bf:3d:00:aa:6e:0e:1e:d5:7b:72:82:70:9b:28:7a:89:
ac:c3:39:fa:a0:19:fa:dd:8e:83:61:8e:04:a6:f5:46:3f:9b:
fd:ba:35:da:a2:00:97:23:d9:05:de:db:88:2d:13:81:f5:ca:
62:55:1b:e4:02:93:d6:1d:6a:19:d4:3b:78:4a:09:0a:fb:cd:
7f:90:80:8b:be:01:a0:3a:9d:7a:a9:5c:5f:99:59:1b:7c:a5:
4f:c3:b7:01:b7:dc:a3:53:99:c1:46:4a:96:41:62:8a:ef:79:
af:3b:cc:0e:d7:55:81:fa:d0:41:dd:41:19:df:87:4c:b2:91:
89:43:94:ad:33:25:cb:7d:7f:04:99:75:4b:49:f9:b5:3d:0c:
87:98:36:5e:36:20:5c:f4:b6:32:92:92:ed:ee:ea:4a:c3:d1:
47:0e:59:1b:63:19:e3:b3:2e:9b:9d:95:f1:ba:77:7c:0b:2f:
90:17:44:9f:09:77:84:1a:8f:50:31:70:59:47:9a:71:e6:d3:
1c:b1:15:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:41 2026 by rpki-client