Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145935.roa
File: AS145935.roa (raw, json)
Hash identifier: hLlovqCGMP1ignaSXNM9n3et7t1cXE41PfiAes80T8w=
Subject key identifier: DC:CE:0C:D9:11:B3:CD:3D:69:53:A4:EA:39:A8:34:1C:F7:24:F6:61
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6581A59F279AED9AC151017A26041B5328D59193
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145935.roa
Signing time: Fri 22 May 2026 02:47:55 +0000
ROA not before: Fri 22 May 2026 02:42:55 +0000
ROA not after: Fri 21 May 2027 02:47:55 +0000
asID: 145935
IP address blocks: 240a:acd5::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:81:a5:9f:27:9a:ed:9a:c1:51:01:7a:26:04:1b:53:28:d5:91:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:42:55 2026 GMT
Not After : May 21 02:47:55 2027 GMT
Subject: CN=DCCE0CD911B3CD3D6953A4EA39A8341CF724F661
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ed:7d:75:45:63:40:46:16:ec:b0:17:9e:b9:
89:b7:ec:08:bf:99:58:8b:cd:96:ce:a5:e6:7b:6d:
4b:36:5e:6c:f7:40:d8:68:6b:a9:97:0a:dc:e1:a3:
2c:ba:8d:ec:86:c1:08:8d:14:56:3d:58:a7:41:d2:
ec:92:25:06:c3:74:5c:a1:ea:0d:0c:6a:1d:f6:61:
9f:ff:d3:b1:b1:61:c7:56:72:fb:eb:0d:e0:d4:6b:
71:e9:d1:5e:a0:ed:5a:d1:be:1f:c4:d2:6e:95:0c:
7a:98:04:26:20:83:36:a0:e5:03:fc:c3:6f:55:fe:
af:da:03:b7:0a:ff:e3:db:e3:b4:ef:e6:f2:50:34:
c7:e8:e2:bc:ca:44:dd:4e:1c:89:f5:74:b8:c0:66:
43:88:31:01:1a:5f:aa:8b:26:94:82:77:3e:25:37:
b3:b2:55:2f:0a:b5:af:00:f6:99:28:ef:24:c6:ce:
16:53:87:41:fb:27:f7:59:01:b2:ae:13:8e:db:4e:
1f:64:d9:7e:87:4f:d9:5b:0c:8a:e9:7f:64:18:b9:
34:a5:e8:eb:f2:69:ec:0d:14:7f:c0:ef:70:b4:89:
3e:0d:81:3c:e4:43:e9:90:41:1b:48:47:58:86:77:
91:08:a2:4b:e8:10:7a:15:c2:f7:49:f9:62:a4:0f:
0a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:CE:0C:D9:11:B3:CD:3D:69:53:A4:EA:39:A8:34:1C:F7:24:F6:61
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145935.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:acd5::/32
Signature Algorithm: sha256WithRSAEncryption
b9:f5:7d:72:17:ee:b7:5f:67:5d:70:92:da:3e:93:ca:b8:ed:
71:25:3a:9c:74:8a:38:66:f3:aa:3c:fd:43:7d:6b:22:4a:27:
dc:b7:84:5f:fb:11:31:c1:3a:58:06:5a:e1:7b:14:e0:b5:96:
a7:e7:45:eb:05:8f:7e:95:56:99:79:19:5b:42:ce:9d:14:10:
c8:6d:64:e3:83:03:23:29:6b:fb:51:24:37:ac:24:da:1a:fc:
2e:41:1d:e8:cc:16:1b:32:2b:83:8c:c0:38:70:c1:bb:12:a3:
26:cf:ee:c6:1a:67:2a:e6:05:fb:0f:a5:c4:29:61:b0:de:b3:
ff:dc:7e:8d:b5:d0:5e:a3:c8:23:72:35:ed:09:79:7b:dc:80:
d6:07:db:51:3e:4f:31:f1:f8:c5:f7:3d:7c:bd:34:c0:99:6c:
45:1a:32:72:94:ca:d1:41:ee:ca:68:2a:7f:34:8c:d5:9d:69:
39:c6:5e:d0:45:38:8b:d7:ab:99:07:81:e3:5b:8a:33:1c:60:
6f:43:f5:1b:90:9f:c0:ee:ec:d7:8c:11:e1:5f:e0:00:3f:09:
bb:d2:cb:71:fc:8a:25:d4:69:4c:67:a7:89:18:bb:14:88:08:
ad:10:7c:27:10:74:2e:51:03:8f:0a:80:e7:28:2f:be:d6:ce:
68:e9:4f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:26 2026 by rpki-client