Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145943.roa
File: AS145943.roa (raw, json)
Hash identifier: alc6Xklta0gdptjmFYSXmIqNsN26Kgj7LRAHw6/lHzM=
Subject key identifier: 85:B7:A1:42:C6:0A:49:1E:4A:49:79:00:6A:84:19:82:0F:B9:7F:08
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 08856E0D700F312140C7F0E5CB7F8C0257795B95
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145943.roa
Signing time: Fri 22 May 2026 06:46:09 +0000
ROA not before: Fri 22 May 2026 06:41:09 +0000
ROA not after: Fri 21 May 2027 06:46:09 +0000
asID: 145943
IP address blocks: 240a:acdd::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:85:6e:0d:70:0f:31:21:40:c7:f0:e5:cb:7f:8c:02:57:79:5b:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:41:09 2026 GMT
Not After : May 21 06:46:09 2027 GMT
Subject: CN=85B7A142C60A491E4A4979006A8419820FB97F08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fc:ac:2e:61:9a:9f:32:51:f4:07:a1:6d:65:
ff:09:a1:7d:49:cc:24:04:dd:10:c9:31:22:38:f3:
1a:04:56:f8:be:63:a5:da:ed:2c:a9:1b:4e:64:3c:
a9:cb:17:b1:e8:2d:7d:b3:75:6c:63:4a:b6:99:19:
ae:b1:8e:b2:c6:51:a2:9e:3b:e2:83:2b:ed:48:61:
7f:a3:19:1c:7c:59:4c:b7:54:5d:76:52:05:ec:25:
b5:24:fd:9f:44:a3:05:e4:29:bd:8d:d1:38:76:da:
9a:53:87:5a:74:ee:4e:c2:3c:1c:d2:09:32:02:a1:
e0:30:4f:7d:c3:25:8f:e0:0a:98:9c:12:8a:c0:f7:
a3:b6:af:b8:c9:05:d0:15:6c:c5:35:df:09:4c:cc:
9b:2f:3a:82:b5:b5:b5:f4:75:60:22:e4:eb:86:26:
ab:57:fa:93:70:c9:f0:b2:ac:a5:91:d8:f3:bc:c7:
02:cd:c8:7c:d3:65:aa:af:36:bb:23:88:26:d3:7a:
d0:0f:2b:97:a8:2a:4e:e1:88:aa:54:fc:da:05:dc:
7f:e1:a2:d1:74:9b:93:ae:83:58:6e:03:59:1f:4d:
83:0e:a1:e0:ec:91:70:22:e3:a0:b5:5a:fb:02:b9:
f4:e1:57:48:c3:0f:8f:35:50:b2:e0:e3:52:33:e0:
76:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B7:A1:42:C6:0A:49:1E:4A:49:79:00:6A:84:19:82:0F:B9:7F:08
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145943.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:acdd::/32
Signature Algorithm: sha256WithRSAEncryption
0b:b8:bd:ba:89:c4:3e:03:f8:4c:af:47:77:4c:80:c6:bd:cb:
8c:03:59:79:2b:ac:1c:56:91:44:d8:dd:28:ee:34:74:67:fc:
a8:af:b4:23:d1:f2:c9:e6:03:e8:97:b5:8e:e0:90:1a:6b:36:
4a:a4:37:c4:40:27:91:d4:66:3c:a0:33:cd:64:c7:51:4c:9c:
99:b4:5c:24:0b:8d:da:b6:19:c7:d3:03:f4:43:c6:0d:69:5c:
70:85:cc:73:04:6f:fa:0d:93:2c:0c:ac:78:8f:f5:78:f0:43:
0b:c4:f4:a8:c4:36:35:54:cc:13:02:53:11:c1:b2:2a:03:52:
eb:c1:81:e3:71:fb:12:54:95:eb:c7:b7:cc:02:79:ca:85:4f:
dc:94:cc:f7:c5:73:73:dc:eb:df:14:96:5f:7f:14:98:98:d3:
2c:92:14:1f:66:17:a5:67:97:3f:4e:81:85:19:92:e8:e4:ae:
6c:ea:b6:80:36:98:6d:80:fb:6f:56:d0:9f:71:27:a8:2d:cc:
6f:90:55:4a:c7:6c:59:70:1f:08:ce:78:bf:f2:24:09:50:69:
f6:df:fd:62:fd:1d:3d:ce:e5:b7:d6:d6:21:4e:76:9c:cf:00:
02:77:15:18:e2:d7:4f:bf:95:d7:b9:cb:c1:d0:84:24:de:07:
5a:ab:ef:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:37 2026 by rpki-client