Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145923.roa
File: AS145923.roa (raw, json)
Hash identifier: b/FYnb5MB0wgcbS6Vm49bfXKJAZbiC5Gyj30HW68Lbg=
Subject key identifier: C9:55:09:27:EF:26:22:F8:26:0B:66:24:00:6F:FC:E8:68:D5:00:EA
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 362611B1DD31A5E3D385CC532A7AB7886A752152
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145923.roa
Signing time: Mon 25 May 2026 01:51:26 +0000
ROA not before: Mon 25 May 2026 01:46:26 +0000
ROA not after: Mon 24 May 2027 01:51:26 +0000
asID: 145923
IP address blocks: 240a:acc9::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:26:11:b1:dd:31:a5:e3:d3:85:cc:53:2a:7a:b7:88:6a:75:21:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:46:26 2026 GMT
Not After : May 24 01:51:26 2027 GMT
Subject: CN=C9550927EF2622F8260B6624006FFCE868D500EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:96:ef:46:c6:44:3b:61:98:95:98:1d:d2:d8:
af:3e:57:b2:cd:73:15:15:f3:ec:27:0e:39:00:e6:
ab:28:f8:0b:b7:63:00:38:b1:cd:4c:5a:95:f4:d2:
2b:f7:0d:11:05:c6:ea:ff:04:6c:95:58:d7:b0:5e:
b2:f9:d8:8f:51:0a:a6:63:07:75:b5:f5:75:6d:a2:
aa:5c:f9:63:be:dd:db:52:02:e7:b8:4d:d2:43:30:
58:56:76:ea:dd:65:98:81:f6:43:38:b3:bd:4a:97:
10:b8:6f:94:18:cf:82:d7:d1:11:25:59:e6:0c:ef:
bd:74:3d:ae:a6:4e:98:95:fe:1c:d2:d8:53:bc:20:
e8:b0:78:41:5d:0a:bb:0a:ab:c1:f1:8a:0f:58:e3:
2b:16:e3:c5:4a:99:10:f8:ff:19:26:12:00:db:03:
0d:44:66:df:30:f7:61:a9:bc:4c:09:d9:29:23:58:
e7:6e:18:72:ab:84:cb:3c:f1:ea:1f:66:94:27:79:
39:79:21:ae:5b:f5:56:45:66:0f:d0:20:3b:01:23:
49:bf:c6:ba:fb:84:e8:d5:71:cb:dd:46:c5:92:b7:
a2:a2:0a:87:25:1f:c1:1d:f0:44:69:f9:ca:8c:7f:
4c:11:f4:89:1d:01:3e:69:c2:87:51:61:34:4f:b4:
d7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:55:09:27:EF:26:22:F8:26:0B:66:24:00:6F:FC:E8:68:D5:00:EA
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145923.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:acc9::/32
Signature Algorithm: sha256WithRSAEncryption
3c:e3:75:8a:1c:d3:8f:0c:b0:6b:10:5b:02:b7:a5:f9:8d:cf:
c2:57:3c:bc:e0:17:17:54:36:3e:f4:03:94:ee:39:8c:c8:05:
9b:f0:84:24:6b:fd:67:24:d6:cb:50:7f:cd:4f:61:59:4d:33:
b3:fc:d0:24:82:91:0e:fa:b8:c7:74:e3:75:58:18:e2:40:92:
46:c3:8f:6d:41:1a:76:c8:ec:5d:ba:b9:8d:0f:c1:7c:62:00:
17:57:a2:7d:78:5b:87:1a:13:cb:f3:84:09:32:7c:71:f3:b6:
d0:82:3f:bc:4c:b0:77:d9:e4:57:2d:5d:ff:bb:af:78:6e:87:
23:c7:39:22:8e:50:2f:42:a0:84:9f:2b:e3:05:fe:b1:2f:4d:
c9:2f:be:a8:f2:93:06:71:3a:24:78:7f:0f:89:f2:e7:66:46:
eb:24:f7:c2:23:10:23:01:8b:ff:0e:43:2d:24:4e:98:18:4e:
25:46:d3:02:4c:16:b9:4c:12:09:7d:18:06:10:c0:9c:7b:5a:
a5:d9:eb:b5:ff:e7:bb:f1:3a:0c:70:9c:a8:ed:e6:f6:a2:41:
c3:f6:58:8e:54:79:fb:cf:d3:c0:84:a5:23:fd:2e:3e:16:dd:
04:18:8f:91:27:3c:a0:4d:a4:8b:58:01:54:ac:57:c8:64:47:
cd:38:66:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:11 2026 by rpki-client