Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145905.roa
File: AS145905.roa (raw, json)
Hash identifier: L9LSl8mtlOyfVJhnQLNM3ziCGrbSjL/gd/2g0bdppeA=
Subject key identifier: 00:45:4B:21:26:88:64:9C:40:ED:42:63:33:4C:A2:0C:87:53:F8:D7
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 468F8B8A07CD43C56F93B1AB8A113E0FF2C9FF44
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145905.roa
Signing time: Tue 26 May 2026 01:13:16 +0000
ROA not before: Tue 26 May 2026 01:08:16 +0000
ROA not after: Tue 25 May 2027 01:13:16 +0000
asID: 145905
IP address blocks: 240a:acb7::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:8f:8b:8a:07:cd:43:c5:6f:93:b1:ab:8a:11:3e:0f:f2:c9:ff:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:08:16 2026 GMT
Not After : May 25 01:13:16 2027 GMT
Subject: CN=00454B212688649C40ED4263334CA20C8753F8D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0a:d5:53:fb:a5:e1:b3:3b:0e:90:d3:9c:e0:
f4:bf:f1:74:ec:55:06:c4:18:c4:0a:14:24:9d:f3:
e9:fc:ed:12:a3:e1:a4:77:f5:62:24:d6:1a:33:74:
02:34:f3:93:81:f1:54:36:1d:47:f4:d6:39:f4:40:
13:9a:c2:3c:ae:2b:d2:73:5f:b6:6c:45:80:01:e9:
b3:3e:aa:ca:25:05:76:93:b1:20:1e:cd:15:74:df:
01:56:f9:16:79:04:0c:0e:d1:bb:c9:94:1e:90:9b:
0e:cc:b6:8c:d5:bd:5f:f1:ab:f9:08:f1:24:1b:de:
8d:98:b9:99:ad:a0:ad:ed:8f:e4:24:16:bf:b0:2b:
f6:1e:50:e5:78:ec:08:71:09:5e:e6:b9:5e:7c:b4:
bd:30:3b:30:d2:81:f9:12:5c:fc:98:ed:e6:de:91:
05:f7:d8:3b:c1:44:ba:84:93:b3:05:4f:47:17:d1:
e5:7e:2e:d6:98:76:6a:96:60:be:29:9d:45:28:99:
5f:52:4b:37:d5:ae:83:ce:2b:63:81:0d:2b:04:5e:
13:f2:90:e1:d8:b0:72:44:11:c3:f9:2c:c6:1c:6e:
78:db:5f:5c:fc:30:e8:c9:ac:b0:05:ef:fb:69:2f:
bf:ef:58:2e:28:7e:4b:0b:ae:11:e7:d9:65:dc:15:
3e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:45:4B:21:26:88:64:9C:40:ED:42:63:33:4C:A2:0C:87:53:F8:D7
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145905.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:acb7::/32
Signature Algorithm: sha256WithRSAEncryption
62:a1:22:37:30:e5:4b:a2:f6:91:3c:a6:87:66:bb:f5:c3:ad:
c5:55:b0:23:3d:e9:a2:83:1f:05:68:df:1b:36:50:06:1d:e3:
e2:3f:d1:f7:fa:18:1c:f6:50:1c:68:56:10:ba:31:c9:d9:3b:
5d:87:4b:bd:06:37:c7:73:8a:65:78:8e:bf:ab:34:9b:0b:db:
5d:89:35:79:2a:7f:a9:70:a8:19:0b:47:d4:bb:28:61:10:64:
83:31:0a:a3:b9:e5:56:65:c7:dd:06:0e:4b:49:60:a5:34:53:
3f:d2:07:38:5b:be:2b:d9:f8:d6:d7:04:dd:47:05:77:0a:0f:
85:a6:db:d8:9e:50:8f:ae:b8:c6:38:6b:64:4e:65:10:3c:f2:
2a:ee:a5:2c:79:10:cf:8b:58:d5:72:25:9d:13:92:84:b2:0f:
2e:86:e5:23:44:1e:7b:71:4b:37:72:21:7a:e4:4d:99:95:fb:
23:9c:7e:d0:c0:23:17:38:4c:a7:7f:9a:a5:92:4a:70:0d:a6:
cd:96:ea:b7:2b:15:a4:0d:c3:16:16:a1:da:09:c8:ce:cc:7f:
6f:83:9e:55:b3:56:a6:e7:71:b4:68:ec:d4:43:ae:d0:dd:6a:
dc:64:b4:4c:d4:f7:71:15:b3:ad:cd:1f:92:fb:b1:f6:59:0d:
a4:56:4d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:16 2026 by rpki-client