Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145931.roa
File: AS145931.roa (raw, json)
Hash identifier: vbzmvae3gt6bQYQS/EGXQ56ZttBeFFfgIDbh9fnQ1Zc=
Subject key identifier: 7D:B7:9D:61:A4:DF:AA:C0:F8:2F:7B:02:17:AF:36:BE:97:57:9B:4C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3B1796AB9FAA27219C3CA5325053D3A1C2305B0E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145931.roa
Signing time: Tue 26 May 2026 06:30:38 +0000
ROA not before: Tue 26 May 2026 06:25:38 +0000
ROA not after: Tue 25 May 2027 06:30:38 +0000
asID: 145931
IP address blocks: 240a:acd1::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:17:96:ab:9f:aa:27:21:9c:3c:a5:32:50:53:d3:a1:c2:30:5b:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:25:38 2026 GMT
Not After : May 25 06:30:38 2027 GMT
Subject: CN=7DB79D61A4DFAAC0F82F7B0217AF36BE97579B4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:98:bc:ed:85:41:87:51:d9:a7:72:e3:86:ca:
b2:61:bc:59:e8:e0:f4:bf:0c:87:72:83:0c:6b:70:
34:f5:a4:a3:70:15:3b:56:fe:f3:aa:76:aa:9d:87:
12:7a:eb:39:7b:8b:f1:d1:45:a7:45:f8:3f:a9:fd:
0e:9f:bd:8c:ac:be:5a:4f:c8:ee:31:fc:fb:48:4a:
0c:03:f1:cf:f3:c3:8b:00:f5:56:bb:ac:7a:a3:af:
43:8a:3e:e7:40:de:a4:e3:30:17:c0:6a:c1:05:dd:
6a:f9:c1:f2:77:07:5a:17:be:08:8e:d5:7d:78:cd:
9a:70:d1:d3:8b:53:08:06:35:2b:e9:a8:cb:3d:e8:
ce:30:7d:9e:33:f4:80:cb:59:4f:5f:c9:5c:aa:c4:
3b:1f:60:d7:4e:55:4c:3e:ad:74:bd:dd:99:29:5e:
e1:d3:40:68:56:b2:70:91:f7:76:55:0c:76:a8:b3:
57:00:63:51:77:cb:7e:3b:6f:f6:b1:fc:c0:ac:db:
cd:38:a1:81:c3:47:29:93:47:ad:4d:87:9f:a9:06:
8d:f6:5d:83:97:92:7c:38:c1:14:9b:ed:04:f0:03:
6b:d5:80:8f:bb:31:51:cd:16:62:7a:21:a7:e1:ba:
d6:bc:e4:23:55:81:96:c9:86:24:3c:ce:7e:a9:bc:
9f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:B7:9D:61:A4:DF:AA:C0:F8:2F:7B:02:17:AF:36:BE:97:57:9B:4C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145931.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:acd1::/32
Signature Algorithm: sha256WithRSAEncryption
64:86:e8:50:4c:1d:f5:f3:20:6f:c8:1d:83:12:da:d0:03:3e:
53:c1:2c:a0:9b:0d:4e:7c:39:df:c1:af:4e:cd:bb:c7:00:30:
93:b0:f6:9a:a5:60:86:8a:5b:de:27:23:67:01:71:c1:c1:fe:
35:73:9b:61:29:e3:c6:e5:47:93:b2:49:24:5c:83:97:75:8d:
bd:7c:8e:a3:4e:25:79:fc:2a:37:58:bd:ec:47:3e:9b:92:4b:
be:b6:f9:2e:26:27:21:a0:6a:a9:a2:6d:14:c0:e9:b4:b3:82:
0e:ac:f6:1b:d3:dd:6e:27:93:da:f1:2a:35:6e:55:4d:ae:16:
c8:ea:5c:49:ce:83:52:7f:8a:85:09:a1:dc:f7:50:d2:b0:93:
b1:3f:50:9d:42:61:0d:a2:ef:03:8a:df:ce:0f:63:b2:b1:67:
34:b3:49:5b:07:e9:c6:b4:47:b7:cc:f0:57:3e:1f:64:33:b5:
a3:db:5c:8a:06:f5:68:8a:0b:03:b0:46:73:c3:49:14:d9:92:
46:67:79:c0:15:d9:e9:6b:08:2e:6a:e2:31:68:52:b4:0c:f9:
21:4f:00:97:d7:2c:6b:4c:84:65:03:b7:e4:06:4b:16:ab:e5:
63:80:e8:fa:c7:8c:1d:af:b4:53:67:01:94:38:a8:0c:63:ef:
3d:ae:88:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:12 2026 by rpki-client