Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145944.roa
File: AS145944.roa (raw, json)
Hash identifier: bsVIT8lPIKlI29oFgsWJh5e22Oo9kjV0ivlPrRhQD+c=
Subject key identifier: 3A:B2:56:60:70:08:57:7A:8F:D0:0A:67:0F:F2:B1:AF:A5:F6:C0:CD
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 08CB2EFC3D945F79C95AB28FC4DACFAD3FC314E2
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145944.roa
Signing time: Fri 22 May 2026 07:09:01 +0000
ROA not before: Fri 22 May 2026 07:04:01 +0000
ROA not after: Fri 21 May 2027 07:09:01 +0000
asID: 145944
IP address blocks: 240a:acde::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:cb:2e:fc:3d:94:5f:79:c9:5a:b2:8f:c4:da:cf:ad:3f:c3:14:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:04:01 2026 GMT
Not After : May 21 07:09:01 2027 GMT
Subject: CN=3AB256607008577A8FD00A670FF2B1AFA5F6C0CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d1:14:68:1c:13:68:d0:a2:13:89:76:dd:f5:
85:32:20:b2:6b:03:1f:9e:f4:93:eb:a3:64:55:49:
dd:aa:d5:31:ba:1b:89:b5:a5:32:77:dd:8f:0d:05:
f0:cc:bd:3b:92:67:6c:af:ad:6d:08:b1:19:1c:5c:
39:53:55:f1:52:02:fa:c5:05:cf:60:37:fd:66:d7:
51:5c:53:6a:4a:69:52:40:89:56:f2:18:cf:8f:c8:
a8:7f:b4:d5:f3:9c:82:db:d2:09:fb:f9:98:5d:1d:
9d:5f:e7:12:55:4c:c6:7f:b9:d3:ab:04:69:3f:a7:
30:fa:ad:51:52:2c:ca:19:43:62:fa:af:0a:bc:b1:
5a:39:c1:a9:d0:21:03:b4:a6:6f:17:e1:30:56:3e:
0b:b8:77:b1:ef:57:44:36:ef:17:88:97:6e:a0:e0:
e9:84:16:d5:af:ef:ec:1e:1c:9c:cc:f9:84:7b:c6:
d2:5d:69:48:fb:3b:f9:65:99:b5:0d:4f:49:f9:65:
7c:a3:08:3e:e2:c2:ab:13:7f:df:cf:e8:0d:66:24:
69:df:95:40:15:64:c0:c9:8a:96:e2:5a:84:75:6e:
4a:05:03:f9:80:48:2e:f2:2f:ef:e4:14:d6:0e:29:
90:92:68:df:b2:c7:d4:95:75:f8:3d:1f:ba:08:d9:
e0:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:B2:56:60:70:08:57:7A:8F:D0:0A:67:0F:F2:B1:AF:A5:F6:C0:CD
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145944.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:acde::/32
Signature Algorithm: sha256WithRSAEncryption
77:f3:57:3b:6f:14:a5:e5:2c:9b:7e:e3:bf:e0:c7:5b:fa:2d:
3b:e8:ac:18:6f:65:9e:a2:36:60:8b:94:8b:b3:05:75:03:d8:
a1:8e:22:ec:01:21:04:d6:c6:55:a8:35:ad:64:5d:13:b0:77:
39:73:e3:04:c2:f1:7a:65:be:4d:28:2c:83:ac:9b:a6:70:22:
9a:97:69:9c:81:d4:5e:35:5c:05:f0:d0:72:5c:63:07:d7:10:
52:bb:35:3a:92:b5:98:12:5a:02:3a:16:ce:ae:17:e4:0f:65:
3c:47:bd:00:dd:99:41:6b:be:1b:fb:6c:a9:0d:14:d9:b6:7f:
86:38:4e:ea:a0:43:1a:50:e2:39:60:09:ec:bc:de:fc:cd:dd:
33:9d:94:38:ae:ba:92:1a:bb:45:42:a2:c5:f3:af:be:05:91:
43:31:03:9a:8e:6b:bc:16:fc:8b:d5:81:61:a4:0b:cc:1c:b7:
c6:bb:08:52:4b:e5:cc:35:9c:d1:66:68:63:c5:b7:af:ff:90:
d7:58:75:85:9e:a9:82:3f:3a:14:b8:b7:da:a3:a2:dd:dc:c5:
18:7f:c4:20:fc:cb:ea:f8:db:aa:c7:1d:97:3a:1e:94:b3:88:
de:6c:d0:06:ef:c2:7a:55:fb:68:cd:7c:f7:3a:b4:ae:25:c8:
48:20:19:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:16 2026 by rpki-client