Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145909.roa
File: AS145909.roa (raw, json)
Hash identifier: Pe2uBvAgaICPoSLqaT8iA3DYKblnuiUjCyNS/JkbtDI=
Subject key identifier: 91:85:EC:52:F2:1C:69:B8:E2:50:6E:DF:B1:26:D6:68:9B:DB:B0:A5
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 366EFAB9455E6ACA46101ED887DBDE56F73F37F3
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145909.roa
Signing time: Tue 26 May 2026 02:35:28 +0000
ROA not before: Tue 26 May 2026 02:30:28 +0000
ROA not after: Tue 25 May 2027 02:35:28 +0000
asID: 145909
IP address blocks: 240a:acbb::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:6e:fa:b9:45:5e:6a:ca:46:10:1e:d8:87:db:de:56:f7:3f:37:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:30:28 2026 GMT
Not After : May 25 02:35:28 2027 GMT
Subject: CN=9185EC52F21C69B8E2506EDFB126D6689BDBB0A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e3:e5:7a:d2:72:44:94:3a:24:a9:fa:7c:1c:
7e:ea:a0:c1:b1:f8:2b:3e:60:39:c3:da:bf:7b:06:
f5:e1:1e:94:d2:bb:2e:92:0d:89:5c:cf:06:74:42:
6d:78:42:85:d0:83:81:85:af:5c:40:cd:42:63:32:
7e:99:7a:b8:e3:f8:0c:6a:63:91:d0:3c:dd:db:d4:
d5:c5:db:e4:06:a4:8a:62:ac:5c:2f:34:91:0f:fa:
ad:3e:76:5e:94:e7:f5:33:bc:58:4e:b1:ee:15:22:
db:6a:00:05:02:44:0d:98:7f:c9:db:b0:67:b2:c9:
2d:03:49:50:77:58:c8:17:76:5c:54:25:ca:de:7f:
55:3c:33:b4:c2:fb:49:91:26:9e:a0:aa:04:31:06:
8d:86:f5:0a:0f:23:e2:1e:1a:ad:19:39:a9:f3:97:
a1:08:78:3d:44:cf:bb:8d:9a:3d:5d:3b:b1:eb:df:
f0:af:0b:20:cb:4b:cb:85:04:50:02:3c:7e:36:ba:
50:d7:b4:82:94:c0:15:0c:f3:05:e4:8d:d7:4e:64:
78:23:25:3d:6d:66:e2:ec:57:94:a8:6a:cb:18:b0:
e5:8f:b9:54:7d:00:f6:13:80:19:c9:e8:8a:33:85:
39:51:78:62:c3:fc:60:bf:a4:45:9d:70:9d:a9:f5:
17:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:85:EC:52:F2:1C:69:B8:E2:50:6E:DF:B1:26:D6:68:9B:DB:B0:A5
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145909.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:acbb::/32
Signature Algorithm: sha256WithRSAEncryption
94:54:f7:88:6e:15:e2:d1:2a:0d:85:cb:bb:2a:6c:34:93:f1:
ab:8b:65:4b:d4:b7:8a:be:3b:89:72:7a:3d:13:d5:d9:b0:2d:
ae:78:09:2f:c9:ba:10:3a:7a:9e:81:c0:60:e2:4e:79:61:53:
77:a3:65:fc:4e:27:66:ee:ad:9a:d4:36:e3:c9:de:a0:a6:ef:
47:fb:df:f1:e1:45:87:ec:c9:38:f4:18:84:95:2e:b8:f9:07:
60:c4:ce:6f:c9:96:37:bb:5b:06:8c:3a:dc:d5:d9:5e:7b:29:
00:b7:5f:db:fe:a8:4e:f2:d0:3a:11:2f:4e:d6:e6:82:c3:f6:
a1:93:56:a3:8a:e1:1e:e6:fa:66:9f:4c:2a:8f:d6:75:30:23:
8e:09:ac:5b:52:79:da:88:85:ce:8b:2f:f1:73:25:ec:4c:22:
c0:e7:4f:64:7a:56:8d:17:e2:f8:28:7c:e4:68:9b:d4:0b:27:
36:ae:e9:e1:f7:4f:b9:95:94:3e:b6:a1:9d:c8:d8:3e:cc:97:
33:40:7a:a5:05:21:e9:a3:c3:2f:f0:af:aa:73:e7:f1:19:58:
b3:20:b4:20:9d:b2:45:54:0a:c9:e7:a6:db:73:d5:7f:0d:2b:
17:fd:84:06:ad:3d:92:1d:d0:4d:c4:1b:68:be:35:b0:cb:04:
46:cf:b8:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:30 2026 by rpki-client