Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145921.roa
File: AS145921.roa (raw, json)
Hash identifier: B+5nGGyvfFM55cK1Qjyb5pQf+6w9qc056cNK0YSRQs0=
Subject key identifier: 1B:5A:C9:3B:67:FD:66:06:FB:BC:9F:0A:5F:35:4B:64:07:AD:32:8C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 20E2CB08503534F94901047D6E21C64E8AF762D7
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145921.roa
Signing time: Fri 22 May 2026 07:09:14 +0000
ROA not before: Fri 22 May 2026 07:04:14 +0000
ROA not after: Fri 21 May 2027 07:09:14 +0000
asID: 145921
IP address blocks: 240a:acc7::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:e2:cb:08:50:35:34:f9:49:01:04:7d:6e:21:c6:4e:8a:f7:62:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:04:14 2026 GMT
Not After : May 21 07:09:14 2027 GMT
Subject: CN=1B5AC93B67FD6606FBBC9F0A5F354B6407AD328C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:7c:05:a1:08:06:0f:c1:fa:49:6f:58:ce:11:
e5:ae:88:26:e4:cf:1b:6b:cf:b0:24:db:dd:2a:e2:
4a:5d:25:21:93:e8:d1:bc:53:d6:4f:cf:77:17:24:
cf:78:f4:ab:9f:96:dc:2e:68:b4:e0:00:6a:27:cd:
30:ed:fb:11:a3:d3:eb:81:47:49:90:5f:f0:5a:34:
68:80:9a:3d:09:eb:c3:e8:9c:0c:1a:51:e1:14:29:
7c:8e:3c:35:0b:bf:30:42:04:09:2b:17:b6:03:30:
e9:33:7b:d8:49:22:ce:d4:ac:34:7d:ad:d5:30:cc:
69:e1:f7:e0:1c:41:43:ce:54:96:39:5e:a8:d0:6e:
78:bf:4f:f1:87:99:e6:a8:fd:a0:b2:66:6b:cb:3e:
67:c9:21:ed:63:79:72:04:37:26:67:f8:9e:5d:45:
94:19:1b:4d:f8:9b:0b:4b:4f:ad:de:9a:fa:8b:f9:
bf:08:c9:e9:df:40:76:e2:22:1f:9b:a6:2a:e8:69:
5a:11:01:7e:0a:d6:71:03:e0:59:70:ab:c8:0e:17:
ee:7c:4d:4c:32:01:fa:40:ab:b1:c1:83:3b:92:a1:
e7:fc:52:11:fe:49:85:04:ae:a9:ea:f0:eb:c1:ea:
7b:50:c0:bb:68:84:93:5a:ba:0e:3c:e9:cb:bd:be:
13:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:5A:C9:3B:67:FD:66:06:FB:BC:9F:0A:5F:35:4B:64:07:AD:32:8C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145921.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:acc7::/32
Signature Algorithm: sha256WithRSAEncryption
4f:81:93:05:16:27:26:21:92:44:47:91:1b:31:5e:b0:af:48:
b2:37:0d:60:1f:34:09:fc:f0:3a:4c:69:cc:f3:97:06:d2:3a:
fc:88:69:9c:04:40:ad:e3:2b:7e:92:21:34:a3:ad:f3:9a:f1:
cc:1d:d6:d1:8d:0e:cf:f6:af:8a:ff:85:36:ec:85:c2:7e:8b:
36:c6:a3:77:2a:72:a8:dd:34:19:11:cc:0c:e4:68:7b:dd:f8:
48:63:e3:c3:51:05:25:ad:a3:83:ab:b3:64:00:f2:52:c2:20:
38:5e:ef:1a:6c:96:d4:37:40:2e:bd:6c:af:31:2e:d4:7d:82:
c4:ec:e9:30:95:bd:bf:b1:90:27:d8:42:0c:0c:49:67:a4:c7:
70:34:30:1d:f3:b0:f5:aa:19:95:9f:fb:d3:54:0d:c5:fa:59:
17:bc:4f:ee:bc:2a:1e:e4:50:2e:49:ce:d6:53:58:41:b5:a3:
17:ec:48:8e:20:a2:6a:90:ab:69:2f:00:a2:de:2f:99:2c:ad:
4d:d6:b4:cc:62:8a:b5:bf:49:b3:b9:ee:49:31:0f:91:43:d0:
9b:15:20:ef:48:38:f9:d0:f5:26:ff:79:28:7c:fb:04:2f:76:
d5:8c:5f:34:5e:c9:db:e6:22:7b:15:58:58:f9:90:5b:e0:a2:
2c:09:9f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:57 2026 by rpki-client