Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145960.roa
File: AS145960.roa (raw, json)
Hash identifier: vlQCt3W088Wglg1JDkFf+BXzDG9B8m0MwApIP2lAioM=
Subject key identifier: F8:4E:2E:0F:A1:5F:A5:DB:65:05:0B:0C:E7:1F:84:54:05:FE:DB:73
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3F88C11875DCF9F4F543F2D947F8839461185A5B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145960.roa
Signing time: Tue 26 May 2026 06:13:00 +0000
ROA not before: Tue 26 May 2026 06:08:00 +0000
ROA not after: Tue 25 May 2027 06:13:00 +0000
asID: 145960
IP address blocks: 240a:acee::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:88:c1:18:75:dc:f9:f4:f5:43:f2:d9:47:f8:83:94:61:18:5a:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:08:00 2026 GMT
Not After : May 25 06:13:00 2027 GMT
Subject: CN=F84E2E0FA15FA5DB65050B0CE71F845405FEDB73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a6:6f:4e:f3:e7:94:46:77:2d:da:c5:4b:16:
e2:1b:54:24:66:0a:b4:72:c6:39:ec:bd:f1:7e:fa:
c1:1a:41:92:7c:1e:e4:54:3f:cd:b9:fa:c5:4e:f4:
a9:e0:c2:c9:e2:64:be:79:27:7c:8a:6c:55:cc:3c:
0b:29:cf:96:14:a3:4c:eb:fe:6f:ee:2b:fc:ae:40:
c2:41:a0:6e:1b:38:21:16:ea:9d:93:f9:9f:b6:5c:
98:3a:17:09:98:ec:63:43:5f:9a:b6:cd:17:50:23:
b5:16:dc:99:86:3d:15:9a:2e:22:87:12:a4:8c:b2:
b2:fd:e0:d5:c1:2c:3c:e1:79:03:4c:bf:13:31:de:
8c:77:31:65:2a:25:50:6a:17:31:ce:24:9f:3c:3f:
fb:b5:f8:95:e5:89:26:35:48:dd:b8:4d:a6:cc:f6:
03:a7:ad:5f:39:09:4f:20:fa:e1:44:a6:f2:31:09:
99:97:c7:e5:36:45:64:bb:6e:72:b1:35:70:9b:c9:
43:47:59:bb:37:95:71:0b:b5:be:ae:dd:6a:f1:35:
2c:93:41:59:12:c8:a9:bd:39:20:0b:ff:39:e4:2e:
e3:aa:93:2d:21:fc:b2:76:97:46:ab:45:87:02:32:
4d:43:38:16:c9:1f:67:10:05:cc:58:61:29:11:0c:
31:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:4E:2E:0F:A1:5F:A5:DB:65:05:0B:0C:E7:1F:84:54:05:FE:DB:73
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145960.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:acee::/32
Signature Algorithm: sha256WithRSAEncryption
86:d6:2f:d4:35:02:36:98:41:39:9d:8b:ca:17:a0:60:19:e2:
4b:7e:57:23:dc:06:50:e0:eb:c5:31:73:1d:80:cb:19:3f:2e:
45:75:1d:53:a8:92:e1:6f:08:d6:a4:5a:7c:48:ff:2f:52:80:
5a:62:04:12:bb:81:13:af:d6:66:ca:09:e7:3c:b7:b9:3d:a0:
7b:1a:9c:56:74:9e:e7:98:58:a7:93:40:cf:a1:9f:fc:1c:59:
d5:6b:7f:07:f8:57:7b:49:cf:b0:62:c4:9c:b8:8f:d6:27:e9:
9c:91:fc:45:97:92:56:a0:7f:85:c1:0c:3c:d5:3a:c0:e8:b6:
3a:61:64:06:dd:d0:fc:5a:fb:23:fa:1a:da:f3:95:fb:f5:23:
4c:8f:bb:8b:32:75:53:ab:b6:33:c1:3c:43:3e:5d:8e:e2:90:
4c:b5:de:63:b3:10:cf:4d:d7:f4:ba:d2:0a:7d:3f:67:f8:41:
d8:31:c2:9b:31:e3:9f:4b:f9:e7:8b:f0:d7:81:77:ab:b3:02:
06:38:39:6b:98:3f:a7:7e:5c:44:c5:19:ec:bd:54:06:1c:8f:
74:c5:1a:cd:2e:ea:d0:d1:3d:59:09:8d:d1:cc:e0:b1:50:a2:
19:02:2d:2d:5c:16:da:18:7a:fc:98:a0:8e:70:53:9a:7f:fb:
3e:24:d4:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:21 2026 by rpki-client