Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145918.roa
File: AS145918.roa (raw, json)
Hash identifier: s0ort6ZY022mLtJ14p0GcG8depQ2qJSO/D+NwkVaeTs=
Subject key identifier: 58:55:37:13:C2:68:67:73:29:4F:09:7D:5D:CA:84:A6:7C:14:DA:BB
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 33C67FE9FBE58EB39331BEFF8F7A6FE8D0350BDA
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145918.roa
Signing time: Fri 22 May 2026 06:46:04 +0000
ROA not before: Fri 22 May 2026 06:41:04 +0000
ROA not after: Fri 21 May 2027 06:46:04 +0000
asID: 145918
IP address blocks: 240a:acc4::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:c6:7f:e9:fb:e5:8e:b3:93:31:be:ff:8f:7a:6f:e8:d0:35:0b:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:41:04 2026 GMT
Not After : May 21 06:46:04 2027 GMT
Subject: CN=58553713C2686773294F097D5DCA84A67C14DABB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:4a:4c:b2:ba:c8:e8:49:1a:e6:e2:95:9d:e1:
92:ec:4e:2c:b3:63:b0:07:e6:a4:b1:24:f9:12:36:
a9:c3:2a:f9:6d:8a:79:e6:b1:a6:f1:a8:af:b3:39:
35:04:56:8f:0e:6c:85:e1:7c:cc:fb:a7:bd:60:2b:
e5:a2:0b:51:9f:8b:79:64:23:4e:d7:79:3b:cc:7f:
e4:f9:3b:1e:15:91:3b:73:b5:fb:08:c0:a1:4a:f3:
c4:ab:21:b5:84:47:84:64:c5:8d:f3:d9:96:04:6e:
e4:3d:39:7f:d3:db:bc:62:95:fb:e1:a6:4d:42:22:
90:f6:34:33:e0:ad:0f:2f:69:6a:22:81:86:46:76:
62:4e:ee:c2:68:de:31:b2:ca:0b:8e:bd:6e:23:fa:
de:03:af:73:d0:c0:01:40:89:9f:63:92:c7:2a:99:
4a:b7:82:1b:be:79:da:9c:67:fd:89:98:b6:19:a2:
67:d8:39:67:1c:14:f3:c1:28:78:03:3b:25:a4:26:
77:d7:4e:e8:38:58:66:9e:b7:1b:e5:3a:b8:db:57:
8c:bc:38:e9:bf:21:d3:ae:02:0b:3b:4f:c1:61:cd:
6f:c2:91:2e:6a:24:4d:7b:1d:5c:03:68:47:8f:98:
83:c0:99:ca:f1:0d:f4:f1:44:ad:3f:b2:e5:1e:ca:
9f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:55:37:13:C2:68:67:73:29:4F:09:7D:5D:CA:84:A6:7C:14:DA:BB
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145918.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:acc4::/32
Signature Algorithm: sha256WithRSAEncryption
a2:8d:79:1e:a5:07:40:56:c8:46:25:ed:0c:23:b1:83:b1:f4:
f8:ab:cb:a8:a7:59:b2:f2:e5:4a:bc:61:da:46:b5:ce:63:6b:
93:22:83:c9:35:2b:1d:b6:42:54:1f:9a:5c:d5:95:dc:52:e4:
7e:53:e8:5f:31:b5:dd:bf:b4:2d:c7:9e:76:f1:97:fd:d4:38:
f5:35:0d:c6:67:d7:ed:a0:37:29:7a:17:ae:45:15:15:0c:0e:
0b:6f:b1:ee:dd:87:17:dd:3b:c4:f3:99:49:3f:7f:74:d7:96:
7c:b7:06:1e:fa:2e:cd:b1:87:d7:60:f7:29:ee:5e:cc:4e:61:
ca:e7:7f:06:33:33:b2:10:a5:f6:0d:c2:c2:bc:80:d4:b5:31:
61:30:60:24:cc:ff:c3:b9:b2:c4:df:09:8f:3d:09:70:18:fd:
28:d2:a3:86:25:e7:54:69:96:1d:20:48:52:71:52:88:a0:d2:
fd:e8:b6:4a:dc:d8:8d:d8:ac:65:d7:24:97:80:3b:cf:d4:a9:
3f:47:68:d1:b3:7a:3d:40:98:1e:ed:2c:f8:20:bd:9d:58:7f:
1e:81:f1:de:89:7d:2e:a8:da:c8:67:04:4e:89:e0:ba:e2:b1:
2a:f4:37:59:0d:20:37:97:5a:8c:e5:34:65:57:56:4e:f4:f8:
51:4d:3d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:17 2026 by rpki-client