Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145947.roa
File: AS145947.roa (raw, json)
Hash identifier: O9aDpGcIdu9LfXNbTYBvXyv7UksuuJtnP4eweY992uI=
Subject key identifier: 14:DF:F7:73:31:4D:B6:45:05:37:31:D6:51:12:8D:52:DE:64:3C:AD
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5FE2352B498B0FFCF0DEE3524539D7E847D23992
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145947.roa
Signing time: Fri 22 May 2026 06:28:09 +0000
ROA not before: Fri 22 May 2026 06:23:09 +0000
ROA not after: Fri 21 May 2027 06:28:09 +0000
asID: 145947
IP address blocks: 240a:ace1::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:e2:35:2b:49:8b:0f:fc:f0:de:e3:52:45:39:d7:e8:47:d2:39:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:23:09 2026 GMT
Not After : May 21 06:28:09 2027 GMT
Subject: CN=14DFF773314DB645053731D651128D52DE643CAD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:c7:d9:32:32:8d:46:05:cb:86:59:54:7e:4b:
bd:51:28:c8:0a:b9:4d:0c:3d:2c:51:8c:f2:22:cc:
bc:f5:45:69:41:0e:e2:73:97:57:1a:80:04:92:89:
58:00:43:3e:f1:79:29:46:a8:85:a2:74:2e:23:f5:
9c:d1:0d:64:8d:2e:07:05:ed:d0:47:19:89:df:28:
a7:22:ac:2c:2c:28:73:98:1f:1a:d7:92:80:ca:22:
3e:c0:3b:a8:2e:aa:6c:de:af:c5:a9:f2:a8:2a:6d:
66:08:cd:47:15:22:6d:6c:39:ed:a9:22:6d:a3:71:
55:37:36:31:6d:72:2e:43:83:15:47:2a:0e:45:55:
ff:0b:ab:55:ec:46:66:d1:3e:80:3f:88:47:35:d9:
fa:be:de:ed:93:42:89:2e:a8:f2:80:80:ba:57:33:
82:84:ab:34:68:f6:13:1f:e5:06:d4:ac:92:10:d5:
db:79:68:69:5d:4f:8c:67:6f:6e:e2:c3:d5:2a:92:
81:a8:27:87:fb:39:cc:de:82:6c:88:fd:0b:67:de:
ae:8e:0c:2c:83:2a:0d:52:72:bf:79:89:a2:46:bc:
99:cb:21:67:48:01:02:c8:b6:a5:0c:cd:7c:7f:fe:
1b:b0:90:ab:d7:ff:73:94:32:e6:5e:bf:fc:9a:81:
70:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:DF:F7:73:31:4D:B6:45:05:37:31:D6:51:12:8D:52:DE:64:3C:AD
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145947.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ace1::/32
Signature Algorithm: sha256WithRSAEncryption
94:39:4f:c2:e4:c4:23:d2:74:1f:1c:f3:45:bb:22:aa:c3:11:
e7:24:a4:3d:5c:d7:21:3f:c9:38:21:ca:56:c2:a0:ec:09:1f:
0b:2d:0d:ec:c9:09:84:84:a6:32:5d:7c:43:7a:8d:2f:58:09:
03:a5:6e:43:0a:ba:5d:6a:f4:f3:f2:98:0f:54:5a:cc:b6:63:
b5:d5:bd:66:5c:b9:f7:82:9a:8e:74:d8:5d:25:ce:cf:63:13:
7b:40:6b:1d:1c:68:6b:c3:cb:56:6b:26:12:18:a1:c9:6c:6d:
e8:6c:e7:8b:a3:42:02:a2:cb:89:40:68:6d:0b:86:a5:28:b2:
bc:3c:cf:94:c5:f0:b9:80:0b:de:4c:4a:24:1c:e1:45:b3:4a:
6b:ae:7c:b1:0a:6d:63:55:40:10:a2:c9:bd:c3:ef:5e:4e:b6:
8d:42:14:81:6a:e2:48:96:15:22:ac:fe:38:e9:ba:f3:06:bc:
8f:3c:b7:0e:ff:bc:a8:62:4b:e2:9b:e2:3c:e2:7c:fb:33:2a:
1c:3a:36:e0:e9:21:60:64:97:2f:35:52:c3:3e:3d:30:0c:67:
6e:17:c5:be:d5:a9:c8:03:53:cf:85:d5:07:10:5e:32:78:dd:
57:37:0a:12:6f:19:0c:f5:b2:a8:1b:0f:f3:c2:7f:0a:29:d3:
36:8d:ba:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:52 2026 by rpki-client