Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145938.roa
File: AS145938.roa (raw, json)
Hash identifier: q2juRG0iAM/ffSXRWXcqJcWxQA3Wkula0exEWFBYncM=
Subject key identifier: 9F:2F:54:CD:DB:45:8F:5F:00:4C:91:82:26:4A:A7:6B:C1:18:11:38
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2D4E0DB4D4EBF0527D1C87FE655B983DDD09E73C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145938.roa
Signing time: Fri 22 May 2026 04:07:51 +0000
ROA not before: Fri 22 May 2026 04:02:51 +0000
ROA not after: Fri 21 May 2027 04:07:51 +0000
asID: 145938
IP address blocks: 240a:acd8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:4e:0d:b4:d4:eb:f0:52:7d:1c:87:fe:65:5b:98:3d:dd:09:e7:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:02:51 2026 GMT
Not After : May 21 04:07:51 2027 GMT
Subject: CN=9F2F54CDDB458F5F004C9182264AA76BC1181138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:df:33:84:5f:99:3a:0f:a9:3d:41:00:54:37:
f2:05:01:fd:9d:97:9b:d7:b3:6e:10:03:98:44:5c:
78:a4:0d:17:99:e8:95:91:10:f8:08:51:19:63:0c:
ac:91:59:19:0b:60:1a:bb:c0:e6:95:8c:cd:1a:e8:
cd:ee:14:ed:96:79:c8:3d:cb:55:66:18:84:fd:54:
5a:f8:20:24:78:9d:cd:d5:b1:0c:5b:59:57:94:ff:
3a:fe:c3:a0:71:52:cc:72:bb:2b:d4:c3:28:92:3e:
59:28:14:60:47:00:14:27:7a:de:ac:8d:45:36:13:
44:8b:c7:59:1e:b2:36:a9:b3:01:28:fa:14:a1:e8:
5e:8e:29:0c:5f:a8:fe:15:a4:cd:bc:56:4c:7b:46:
a0:4c:48:ca:62:ba:d1:28:2f:9e:df:8a:7c:76:4f:
17:3b:1a:1d:aa:b4:66:ca:42:74:5c:c0:2a:63:96:
50:f0:09:fa:f4:65:87:19:72:6f:7f:ca:2c:35:0b:
aa:a4:49:69:44:ed:a1:07:ed:50:29:fb:25:3d:64:
f4:43:7b:bf:f1:af:09:24:ab:7d:8a:20:2f:05:b7:
8a:59:64:a0:a2:26:5d:18:a0:c3:6d:21:04:2c:52:
4d:98:24:56:a2:81:24:e1:f6:f1:36:95:35:20:90:
48:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:2F:54:CD:DB:45:8F:5F:00:4C:91:82:26:4A:A7:6B:C1:18:11:38
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145938.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:acd8::/32
Signature Algorithm: sha256WithRSAEncryption
82:33:46:fb:1b:ce:96:65:08:68:38:04:81:4c:5a:ba:de:e5:
a6:bb:c8:f8:5e:83:3d:4f:16:6b:cd:69:2d:0e:f8:5f:62:5d:
ef:13:17:50:c2:19:34:94:cb:4c:2d:9b:b6:44:42:22:da:8e:
6b:1c:33:65:58:a4:81:64:39:24:1c:b8:03:47:d2:d3:2f:c0:
f2:ca:17:ce:73:b6:8e:1f:83:aa:c9:98:82:3b:ee:13:ff:0e:
e6:99:19:3b:2c:ef:40:5b:60:76:93:f4:3c:d3:b1:f8:fe:06:
93:e1:f5:66:6e:97:03:f1:9f:83:ed:0b:b0:77:74:49:93:d3:
b2:05:9f:9b:78:d4:2f:fd:11:e9:1c:7a:a4:74:69:95:ca:60:
2b:30:ad:56:70:5e:79:3b:7e:60:56:44:2e:ed:e7:44:6f:b1:
f3:73:5a:b6:1f:1d:9a:40:8d:a4:b7:68:c9:49:22:07:78:18:
23:a5:5a:4e:22:64:bb:c2:06:d3:5e:ff:fe:d2:8d:00:ed:aa:
98:9c:99:d1:8f:bd:a6:4b:cb:9b:2e:7b:6a:d5:6d:f2:53:f8:
e9:58:1c:4f:32:03:92:f7:38:82:30:2e:ed:57:09:2a:c1:b9:
7d:0e:b4:00:b5:d9:90:53:a0:f6:a8:b0:f9:f0:05:8e:b5:68:
94:dc:19:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:59 2026 by rpki-client