Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145954.roa
File: AS145954.roa (raw, json)
Hash identifier: Np5M9tFp9gcE1CQYQ31bbvz0BiOZn8xP+KucDzDIjl8=
Subject key identifier: C3:3A:BF:A9:A9:78:7B:7A:3D:D0:41:1F:1A:6F:05:08:05:03:B7:6B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3B909742F02A9BAF397E1D6322B93E5B091A18CA
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145954.roa
Signing time: Mon 25 May 2026 01:38:01 +0000
ROA not before: Mon 25 May 2026 01:33:01 +0000
ROA not after: Mon 24 May 2027 01:38:01 +0000
asID: 145954
IP address blocks: 240a:ace8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:90:97:42:f0:2a:9b:af:39:7e:1d:63:22:b9:3e:5b:09:1a:18:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:01 2026 GMT
Not After : May 24 01:38:01 2027 GMT
Subject: CN=C33ABFA9A9787B7A3DD0411F1A6F05080503B76B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:68:af:75:57:21:d3:e3:01:c1:6d:c2:b0:7b:
0d:89:40:eb:5d:88:db:64:9c:c6:4b:45:a5:d3:d8:
fa:c6:f1:6e:de:fe:37:a0:4a:b1:01:4f:26:1e:5c:
2d:20:64:9e:71:d9:5a:e4:b6:6b:26:4c:0f:bd:25:
86:1c:c1:c4:97:93:0c:cd:76:d0:10:65:45:64:f9:
b6:10:12:6c:fa:d4:22:df:d7:dc:42:a9:bf:0f:95:
e7:c7:f3:a2:1c:ad:c3:4f:f0:86:5a:01:71:fc:05:
4e:99:d9:d4:d5:d4:84:a7:ac:7d:17:bd:d8:87:b9:
f1:19:55:7a:93:0a:b5:e4:77:42:48:28:5a:40:c6:
ee:a4:cf:43:c6:bc:ba:7c:a6:e3:4c:ec:94:29:a7:
a9:d9:b2:f0:e3:ff:56:73:41:4a:8d:81:de:e5:dc:
2b:c6:65:5c:c9:ab:3f:fd:82:b4:c4:fe:0a:30:94:
4f:f2:18:a5:7e:3d:e3:28:a0:30:ce:ab:2e:fb:f2:
86:e2:ea:9f:09:c5:1b:31:5b:b8:21:31:e0:4a:52:
b4:c6:fe:2c:e9:05:f2:14:27:91:da:6c:9d:26:82:
07:64:a3:59:9c:61:8d:c1:49:c8:7b:5a:f2:95:7d:
19:ac:61:de:cb:6b:ff:6a:2a:95:7a:21:a0:3b:8c:
8d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:3A:BF:A9:A9:78:7B:7A:3D:D0:41:1F:1A:6F:05:08:05:03:B7:6B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145954.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ace8::/32
Signature Algorithm: sha256WithRSAEncryption
1c:bd:73:24:7a:a4:e1:f6:44:b0:25:00:dc:b3:1c:9a:5d:b9:
2e:e0:4d:a1:4f:9c:86:54:57:c4:74:81:c6:8f:6b:ca:41:90:
d0:05:06:7f:47:42:7b:7e:9d:c6:3e:00:cd:ef:4e:86:cc:56:
94:b8:f5:7d:a4:9f:57:6f:12:77:07:0f:e7:07:d1:1a:5c:9d:
e3:22:7d:ef:c4:97:6a:1a:a8:1b:a9:89:1d:82:f5:8c:02:9b:
81:c5:81:85:f5:de:f0:a4:81:47:51:0f:f9:9a:15:c8:a1:31:
96:76:f5:9f:61:41:37:2a:1e:65:94:e3:8f:ea:43:a1:cb:59:
6f:c9:9a:a1:47:af:f1:4e:3f:8f:b5:38:c8:84:6f:ca:94:78:
c6:4a:10:53:ad:61:4e:ba:bf:1a:00:c1:4e:b5:93:9c:5c:2f:
20:79:5f:cd:d5:62:18:d1:4c:c2:69:f7:ab:9d:94:66:94:fc:
90:29:bb:95:a6:1a:c5:dd:bc:83:de:c8:e0:95:77:65:6d:c9:
8e:cd:70:e6:22:28:99:2b:87:6b:96:59:79:d1:66:1e:22:57:
31:7d:b5:19:b9:a6:5f:51:91:d5:78:e7:39:8f:26:ed:b0:4f:
1d:aa:2e:e1:8f:09:db:88:28:15:17:12:6b:8c:fe:f3:e7:09:
b4:b1:79:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:50:03 2026 by rpki-client