Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145907.roa
File: AS145907.roa (raw, json)
Hash identifier: +g2+QZcnuH8ruhXs4GC5+ui5xBwvmWqeo3yrkhZcxCA=
Subject key identifier: BF:E7:0E:FD:2C:34:4F:83:B4:87:8E:29:DF:A3:07:58:19:41:DF:EC
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1C30463E0AE05AC513B6125938F5613158C02534
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145907.roa
Signing time: Fri 22 May 2026 06:45:59 +0000
ROA not before: Fri 22 May 2026 06:40:59 +0000
ROA not after: Fri 21 May 2027 06:45:59 +0000
asID: 145907
IP address blocks: 240a:acb9::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:30:46:3e:0a:e0:5a:c5:13:b6:12:59:38:f5:61:31:58:c0:25:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:40:59 2026 GMT
Not After : May 21 06:45:59 2027 GMT
Subject: CN=BFE70EFD2C344F83B4878E29DFA307581941DFEC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:50:94:12:32:70:c8:e2:c2:0f:fa:a6:64:ae:
5f:50:07:8b:ee:23:56:96:ee:8b:37:c3:69:ac:dd:
b3:1b:25:91:c5:cb:ba:2a:bc:f8:87:f9:e3:01:10:
0c:4b:26:c6:bc:42:83:32:e4:da:3a:7b:81:94:57:
6a:41:ed:ea:7a:60:ca:66:68:c8:eb:fb:f1:7b:00:
1b:7d:f9:2b:3f:a6:1a:de:d1:92:a0:54:b8:20:9c:
69:03:c8:8f:91:1b:ae:8d:72:2c:de:99:25:03:30:
03:87:85:12:6e:33:78:fb:54:6c:e8:53:d5:bd:35:
4b:92:c2:10:08:65:19:4d:42:f6:00:0a:b6:09:63:
96:1d:10:91:8f:a3:d4:43:02:9e:e0:2f:94:7d:ee:
fb:46:d8:8d:a9:89:5c:b0:f4:9f:02:60:cd:61:8d:
3c:c0:c1:52:b1:b3:fc:60:f5:5d:d0:4a:9e:4e:a2:
e5:87:3c:dc:f6:03:31:02:20:eb:13:64:bb:9f:b9:
57:3b:3a:fe:de:b2:22:b4:5e:14:be:fa:53:c9:c1:
f6:e2:90:00:40:d4:2f:74:ef:08:f3:56:1e:23:28:
2c:b5:12:5e:a5:8d:8d:c4:c7:ef:37:de:de:cd:78:
04:3e:c7:14:35:ed:90:5a:2c:17:cf:a8:d9:e8:f0:
b4:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:E7:0E:FD:2C:34:4F:83:B4:87:8E:29:DF:A3:07:58:19:41:DF:EC
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145907.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:acb9::/32
Signature Algorithm: sha256WithRSAEncryption
82:4e:dd:59:e0:74:8b:56:b6:66:0d:ba:d5:d7:a3:e1:dd:fb:
a2:95:8f:9c:99:b9:bf:a9:90:c3:70:32:fe:1c:8e:0f:18:b6:
c2:33:af:76:bd:cd:b8:6a:08:12:1a:ed:79:7c:42:f4:05:c7:
ef:c4:77:f4:65:dd:87:d7:af:32:1a:ec:5d:d7:b4:65:89:4c:
2a:60:03:16:f9:94:43:a1:a4:0e:8c:00:e6:25:ce:b1:2c:26:
f1:df:93:50:05:62:51:62:4d:9d:08:26:8d:c4:54:33:f2:52:
ab:9f:d1:53:91:de:87:4d:8a:51:90:18:81:62:76:6c:7d:05:
37:47:b7:0d:23:d6:ff:43:30:a1:41:a6:be:41:46:d9:a9:9e:
ce:9a:03:ac:7e:24:14:f1:51:65:d9:be:ad:61:03:1e:1f:e8:
08:64:c2:e4:4e:d3:30:38:dc:ff:79:ab:25:9b:11:e0:bc:0f:
81:4e:8e:26:e4:ad:7f:bd:3d:15:36:15:70:08:24:7b:12:63:
51:39:3e:07:4c:fc:88:25:1b:12:9a:cd:18:06:14:c1:a4:17:
62:20:88:25:23:8a:2a:2d:1a:64:81:1b:0c:10:dc:95:d3:a7:
51:91:1e:88:1f:0d:10:27:20:39:56:9b:a5:8c:77:49:2a:ea:
f0:bd:30:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:45 2026 by rpki-client