Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145951.roa
File: AS145951.roa (raw, json)
Hash identifier: rVoqgUfPt+6RFDfoq8qTiYoO4MLtyQ31D3i9q7a0gsc=
Subject key identifier: F8:80:C3:27:E0:AF:88:4F:D9:E1:93:09:2D:23:08:73:F4:8E:F6:E5
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2F9DE48E236A1238978F73340B9510F6F70B136B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145951.roa
Signing time: Fri 22 May 2026 06:46:00 +0000
ROA not before: Fri 22 May 2026 06:41:00 +0000
ROA not after: Fri 21 May 2027 06:46:00 +0000
asID: 145951
IP address blocks: 240a:ace5::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:9d:e4:8e:23:6a:12:38:97:8f:73:34:0b:95:10:f6:f7:0b:13:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:41:00 2026 GMT
Not After : May 21 06:46:00 2027 GMT
Subject: CN=F880C327E0AF884FD9E193092D230873F48EF6E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:49:e8:70:5c:67:b4:02:2b:4b:63:75:15:5a:
98:24:ee:94:07:7b:ab:3b:35:82:6f:e2:da:b0:d2:
23:40:96:c9:7e:2f:93:19:39:6d:45:68:d6:f1:9b:
52:02:24:fb:40:bb:13:b6:60:60:e7:8f:40:08:0f:
09:3f:53:bf:10:77:1b:5d:12:15:13:83:29:24:95:
22:3f:60:98:60:9c:d1:75:93:e0:a4:bc:63:7e:08:
2c:55:4c:f8:97:39:10:b9:cb:9f:a6:0c:b8:ed:a9:
dd:6d:ea:c9:3f:da:cb:81:10:5d:64:7b:14:6b:c9:
59:ce:2f:7a:02:6d:42:eb:e9:90:53:a4:81:fd:73:
d4:95:c8:f9:95:b3:a2:d5:9d:3b:18:8d:0b:5a:4c:
a8:06:12:ad:be:51:56:91:09:ec:39:88:e4:14:70:
1d:50:62:6a:5b:e0:ca:e9:33:9f:d4:92:0f:1a:f1:
5b:28:c4:e5:db:f2:71:f1:69:3c:12:40:7b:3d:f2:
8c:fd:ba:6a:61:99:42:0b:36:79:5a:53:1a:11:e6:
31:a1:61:de:54:d9:68:ed:4e:3a:aa:90:6a:79:bb:
99:47:36:6b:77:4c:86:90:00:15:aa:5c:59:bd:7b:
20:fb:7e:1a:b4:50:88:fb:3b:69:23:c2:8d:31:9e:
a9:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:80:C3:27:E0:AF:88:4F:D9:E1:93:09:2D:23:08:73:F4:8E:F6:E5
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145951.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ace5::/32
Signature Algorithm: sha256WithRSAEncryption
06:a9:d7:dc:9d:bb:01:87:9c:12:a6:e2:2c:ba:a9:3c:65:1f:
2d:22:31:b7:77:17:67:93:41:7f:0f:a2:ed:3d:4e:75:51:3e:
d8:d1:cb:2a:8e:28:e7:b3:94:7a:19:7c:cd:8a:3b:25:ff:b7:
58:b5:05:79:7b:85:8b:25:6b:93:95:b4:f6:a8:ed:6b:92:fb:
7a:6e:23:63:d9:80:88:4b:13:5a:b1:13:7d:d3:b3:55:7f:d9:
ed:0f:06:03:0f:99:3e:2b:b1:18:8c:b8:8a:61:5a:98:07:43:
e6:30:17:87:a7:df:80:07:25:2f:45:bf:30:35:66:e0:b0:3c:
5c:4d:27:b6:b2:37:0a:fa:b5:c8:4b:b4:13:19:58:bd:15:d6:
c7:22:c1:1c:a7:86:7a:90:a0:4d:08:a6:03:3f:d7:bf:d0:2b:
f3:70:21:ee:0c:af:06:1f:ab:5e:32:0d:1b:a9:69:9f:1f:46:
17:a2:bf:a6:21:88:44:95:d5:70:87:b8:86:5b:14:3f:c7:2d:
25:a4:92:10:f0:81:45:e2:35:ff:06:f1:03:e8:0f:8c:b0:d6:
d9:ac:9e:a9:05:e3:7b:79:1b:5c:b7:6b:91:a5:a7:8b:9d:38:
bf:eb:d9:91:82:1f:ca:70:5d:24:77:0f:d3:ca:f6:cd:6e:b0:
fb:80:c7:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:50:02 2026 by rpki-client