Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145933.roa
File: AS145933.roa (raw, json)
Hash identifier: MrMVavLXTSK6CCkW6RkDz+K4Iirytz8ZUw9FOFeNLJM=
Subject key identifier: A7:D4:D5:BA:05:44:6A:51:52:F6:1F:9B:6C:94:46:9F:36:7B:13:0C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0A349D357F0C8447090985B4F4E837321BB68A95
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145933.roa
Signing time: Fri 22 May 2026 06:58:50 +0000
ROA not before: Fri 22 May 2026 06:53:50 +0000
ROA not after: Fri 21 May 2027 06:58:50 +0000
asID: 145933
IP address blocks: 240a:acd3::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:34:9d:35:7f:0c:84:47:09:09:85:b4:f4:e8:37:32:1b:b6:8a:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:50 2026 GMT
Not After : May 21 06:58:50 2027 GMT
Subject: CN=A7D4D5BA05446A5152F61F9B6C94469F367B130C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:cf:36:12:2e:3c:3d:c0:4b:6a:e2:c8:57:2c:
f3:97:d1:5d:e5:39:cb:40:2c:a3:2f:73:6c:9d:d8:
17:a0:e4:3c:0a:3b:6a:2e:89:1d:89:fa:34:57:9e:
78:d9:49:ee:67:c6:c8:b0:ca:59:cf:95:20:18:82:
a7:7f:04:e4:05:df:d4:4a:ab:9f:d8:a0:21:bc:e7:
5a:a5:b6:8b:df:ed:f8:37:c8:fa:2f:5e:6e:4a:9b:
98:70:13:83:81:c9:ab:d8:d0:2c:a0:43:7e:88:13:
ca:c5:ed:bd:88:08:e0:2d:ed:53:86:cb:89:8d:4f:
e9:b8:e1:f1:c9:ed:f0:d2:da:9b:e7:56:e5:5b:22:
b5:fc:ba:72:b8:86:ee:c7:85:f6:a0:b8:d0:f9:8c:
5a:66:71:b2:0d:89:82:c3:f9:a9:84:78:c0:a2:8d:
78:47:a3:9d:8b:8a:73:60:15:7d:09:26:98:3c:33:
11:32:ff:e1:de:2f:10:0c:5e:be:c6:bc:25:cd:94:
56:be:8c:91:fb:71:ed:94:21:ca:36:f6:20:26:76:
ef:08:a3:13:e8:a8:b2:6f:a7:5f:1b:3f:ee:0d:d4:
0f:91:d5:70:ff:e2:88:fd:75:f7:4d:36:15:fc:9b:
a3:13:d6:19:4f:92:a4:7b:f7:2a:f3:a6:98:ac:93:
b2:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:D4:D5:BA:05:44:6A:51:52:F6:1F:9B:6C:94:46:9F:36:7B:13:0C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:acd3::/32
Signature Algorithm: sha256WithRSAEncryption
a0:6c:7e:d9:8f:b5:42:5e:84:31:f8:73:ef:bd:b7:64:7a:e2:
b5:33:7e:9f:1c:67:54:2b:7a:8b:d5:4c:8a:8d:23:77:f6:8f:
2b:2e:b7:cb:fb:81:5c:0d:65:1a:39:2a:2c:24:26:cc:92:e3:
f2:a9:16:ae:09:5b:9a:70:b0:31:64:4b:90:27:a2:e8:a5:fc:
26:1b:10:06:b8:49:b0:6a:d0:05:29:3c:c8:d8:0c:38:04:37:
3d:62:6d:80:14:53:0f:2b:dd:82:46:db:24:50:8a:d7:c7:df:
a3:99:41:11:cf:06:cd:d9:75:41:22:2c:7e:ba:8a:2e:b3:00:
12:b2:d9:54:ff:b4:2b:37:ca:89:cd:d2:45:e8:ef:ae:df:5b:
eb:08:98:c9:df:60:77:7a:6f:c8:af:f7:71:a2:06:ea:8c:3d:
e0:15:42:99:3c:22:bb:3b:f6:18:10:8f:34:aa:e3:b0:48:4c:
6e:85:1f:f8:e3:37:8a:d1:03:47:d7:84:e3:24:b1:61:db:71:
cb:26:d1:2f:4b:f5:11:fc:f1:d9:02:98:cd:fe:b5:34:d5:39:
a5:b3:12:8e:dd:e6:d0:c3:35:b1:b7:8a:8e:39:31:c0:72:15:
3c:23:28:67:59:04:4b:f1:6a:16:61:54:2a:18:6a:30:f7:a2:
63:0b:fc:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:35 2026 by rpki-client