Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145913.roa
File: AS145913.roa (raw, json)
Hash identifier: RzcEcz2ofowFv5zs7MmEYVF8cFfy5IbaffThNkv0Dck=
Subject key identifier: 2A:33:1C:CC:23:B4:25:C1:56:A5:AE:AD:46:E1:B9:F5:72:94:AA:8B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3F52267072A8673B2493FF0E7A596C40325CFE3C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145913.roa
Signing time: Tue 26 May 2026 06:12:26 +0000
ROA not before: Tue 26 May 2026 06:07:26 +0000
ROA not after: Tue 25 May 2027 06:12:26 +0000
asID: 145913
IP address blocks: 240a:acbf::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:52:26:70:72:a8:67:3b:24:93:ff:0e:7a:59:6c:40:32:5c:fe:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:07:26 2026 GMT
Not After : May 25 06:12:26 2027 GMT
Subject: CN=2A331CCC23B425C156A5AEAD46E1B9F57294AA8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b8:b4:dc:bb:3a:58:16:8f:c9:ea:71:01:e7:
9b:cf:98:11:59:bd:31:b6:d4:95:94:12:1c:5a:7e:
81:9c:0f:a7:03:60:dc:90:51:24:2e:ff:2d:8c:93:
fe:e1:65:3c:b2:f0:6a:ee:de:59:f8:ca:37:85:cb:
31:4f:5c:3b:27:76:fe:7d:78:ef:81:22:dc:76:d9:
d8:78:2e:cb:6f:7c:6d:49:0a:3c:22:63:64:6e:ae:
24:25:b5:b0:cc:8a:c3:99:7e:44:f2:29:2a:7e:df:
00:89:39:64:c1:69:4b:80:e1:47:8b:0f:3a:a2:9c:
99:3e:d6:d5:75:0c:43:8d:e7:85:85:7a:ea:5b:07:
23:b9:42:93:8c:1c:5f:14:21:d3:83:75:0a:98:1c:
73:58:e6:04:d4:fc:98:ef:a1:35:6d:00:b0:75:9d:
72:40:02:f4:68:28:0e:34:41:39:27:b9:68:1d:69:
59:ba:c2:b6:f8:44:ac:f8:12:fe:3c:65:ac:b1:35:
f0:9d:2d:ed:5d:57:55:bd:41:d7:06:2f:78:39:8d:
68:97:46:83:b4:51:04:fc:2c:f0:50:91:e3:41:ab:
d5:ac:f4:0d:e7:fb:06:92:06:40:e1:86:84:09:57:
60:3b:85:e9:e8:69:34:5f:11:4b:97:86:05:89:b6:
2c:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:33:1C:CC:23:B4:25:C1:56:A5:AE:AD:46:E1:B9:F5:72:94:AA:8B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145913.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:acbf::/32
Signature Algorithm: sha256WithRSAEncryption
b6:29:ae:0f:db:a9:05:79:be:aa:9c:15:50:65:78:26:3d:e9:
60:ef:75:b5:60:8c:b8:a1:32:6d:19:b9:7f:eb:ac:dc:62:7f:
71:98:81:80:37:7b:ca:ec:a2:60:1d:81:c0:4e:da:fd:36:b8:
ef:e5:35:f0:67:49:8b:3b:f3:fb:9b:ee:83:e6:4e:e6:cd:d5:
88:c2:04:49:41:27:ff:62:2a:d5:a3:e4:d8:0d:8c:70:b2:eb:
49:b1:af:ae:83:19:f8:d8:a7:48:39:8d:49:89:23:b5:18:48:
17:16:53:19:7c:eb:8a:72:5a:a8:ef:4b:ae:8e:a9:b8:5f:f7:
79:e8:9c:a4:d1:c8:fc:ca:ee:04:9f:36:7a:cf:61:a6:56:c7:
cf:ee:bc:c3:6d:8c:c0:1f:46:de:c6:5a:ce:f9:17:6e:3d:76:
59:0d:9b:e3:87:1e:e2:00:1f:10:42:be:04:a9:16:fd:04:94:
4a:b9:76:2f:b3:a6:b5:f7:9c:0a:37:8a:94:b0:4c:fc:9e:58:
28:55:e9:bd:13:30:26:64:53:1a:80:a3:1f:ef:bd:9f:18:81:
93:83:a7:7a:a8:c4:45:94:73:ea:01:89:70:88:4c:a4:45:a7:
6a:4c:72:95:b5:91:f4:c7:99:db:0b:29:46:af:13:7e:23:b6:
28:95:bb:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:05 2026 by rpki-client