Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145904.roa
File: AS145904.roa (raw, json)
Hash identifier: HqhJ2WpK26nO5BjY1m97M8KPordo9s7RsH9H9TCGzic=
Subject key identifier: 85:49:D3:37:E5:70:1B:44:F3:26:CF:3D:96:E4:D1:C4:4C:CE:C0:6C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0D62D2B234257A2B02E6E8D184686EFEE9B6CB4C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145904.roa
Signing time: Mon 25 May 2026 01:20:12 +0000
ROA not before: Mon 25 May 2026 01:15:12 +0000
ROA not after: Mon 24 May 2027 01:20:12 +0000
asID: 145904
IP address blocks: 240a:acb6::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:62:d2:b2:34:25:7a:2b:02:e6:e8:d1:84:68:6e:fe:e9:b6:cb:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:15:12 2026 GMT
Not After : May 24 01:20:12 2027 GMT
Subject: CN=8549D337E5701B44F326CF3D96E4D1C44CCEC06C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:41:d3:00:2c:89:e2:65:75:68:a9:f3:e0:51:
a2:31:e9:54:af:e3:12:e5:16:eb:d0:eb:84:1d:d8:
e8:4b:cc:20:7f:4d:e6:72:13:d2:87:3c:00:35:de:
68:13:93:da:b4:d6:48:90:f7:30:a5:5e:71:e7:3b:
5b:4a:78:d2:08:95:6c:c1:37:3c:3f:2d:75:20:32:
a4:40:b3:cf:03:d0:a5:5e:be:80:0e:1c:be:88:d2:
61:e8:6a:5f:58:dc:33:d0:2b:ad:ac:f1:fe:54:6b:
41:47:4b:c7:6f:6f:08:59:d3:9e:b2:6e:fd:96:a3:
25:9f:ce:40:49:11:c6:33:78:67:51:d4:3c:70:14:
6d:54:92:fd:89:27:9a:d3:a8:d8:09:34:76:fe:a1:
ae:3c:1e:1d:f8:35:61:97:50:08:7a:53:25:0a:9e:
8e:3b:05:3d:f4:1b:19:2e:a1:25:cf:de:f4:fe:91:
d3:9e:27:f3:e0:01:5d:87:99:7c:ff:f8:6c:98:10:
04:44:01:63:7d:21:98:04:36:54:f0:f1:51:e0:29:
7d:7f:00:15:10:c3:3f:15:45:ab:44:66:55:19:69:
2e:e6:20:2c:c9:bc:eb:5e:53:6f:36:83:84:6d:f3:
7a:e5:12:8b:04:92:88:2e:6f:7a:9f:35:36:57:99:
8a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:49:D3:37:E5:70:1B:44:F3:26:CF:3D:96:E4:D1:C4:4C:CE:C0:6C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145904.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:acb6::/32
Signature Algorithm: sha256WithRSAEncryption
42:ee:e9:82:4a:a2:89:b6:a2:1c:dd:3e:50:78:34:ab:43:33:
cd:93:34:3d:09:fc:c9:f2:a2:98:17:62:f2:9e:4c:86:c3:0a:
f8:07:5a:f8:0e:8d:45:e2:95:7a:f2:20:6a:54:72:41:e4:08:
55:08:7b:9e:50:bb:82:51:58:3c:3b:1e:8e:a0:e6:82:c5:47:
bf:0b:c8:5f:9b:64:d7:68:50:3d:49:4d:e4:a3:68:7e:b3:a6:
cd:36:3e:26:13:5e:2f:fb:85:a4:fa:09:c2:1e:3b:09:61:d6:
6d:35:10:00:e2:30:c4:21:63:47:2b:b5:c7:40:eb:37:8b:2a:
28:2d:90:f2:11:46:d6:8e:09:85:e3:79:b0:b1:0a:44:7d:be:
c5:ef:e4:b7:76:18:b2:f6:62:03:61:76:d7:11:24:30:36:f6:
25:4a:b8:99:87:4b:58:59:62:6c:1d:48:06:02:e0:37:be:d2:
53:c1:ad:21:bf:66:3f:c0:30:49:92:cd:ff:b1:aa:c3:43:1a:
aa:06:45:02:97:c8:ce:cc:17:14:f3:54:13:eb:fd:bf:17:a4:
ac:00:1c:c0:d3:6e:df:9e:a8:1d:9c:84:d1:e1:8b:e2:26:0f:
eb:e1:4c:95:98:c4:c3:e5:72:b1:50:c8:f1:f5:6f:51:84:f8:
6a:89:82:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:17 2026 by rpki-client