Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145963.roa
File: AS145963.roa (raw, json)
Hash identifier: ArXo3fGpPPsTJt8PGFLO+9NMRYIYQYE2fx6+LCsZ5ck=
Subject key identifier: 8B:A6:8C:E6:83:BC:67:3F:7D:12:BA:59:8D:39:72:99:2B:6E:9D:00
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3F7292BA2CCFC55F83087A2391BF61CC0916D6D5
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145963.roa
Signing time: Mon 25 May 2026 01:51:10 +0000
ROA not before: Mon 25 May 2026 01:46:10 +0000
ROA not after: Mon 24 May 2027 01:51:10 +0000
asID: 145963
IP address blocks: 240a:acf1::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:72:92:ba:2c:cf:c5:5f:83:08:7a:23:91:bf:61:cc:09:16:d6:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:46:10 2026 GMT
Not After : May 24 01:51:10 2027 GMT
Subject: CN=8BA68CE683BC673F7D12BA598D3972992B6E9D00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:69:34:23:e0:cf:65:eb:3b:7a:70:f0:9c:e0:
47:cf:30:6e:98:4b:70:6e:b2:17:bb:82:39:34:ed:
55:20:db:bc:0b:45:46:3d:a7:f5:88:76:a8:2a:a5:
b9:07:2f:28:53:91:30:72:f1:92:62:bb:95:f7:22:
61:e9:cc:95:21:ec:8f:e8:93:27:18:4a:d0:05:ae:
43:4a:55:38:94:14:5e:cf:ee:40:5d:14:e7:e1:28:
52:1d:6b:08:3d:b5:e0:00:f4:cf:be:8e:2b:c6:75:
c0:f2:b6:62:de:a4:d1:92:da:7c:60:2d:73:76:43:
ec:be:e3:48:4c:39:05:fa:ec:73:39:d9:95:6d:34:
7f:a6:a0:61:a9:65:44:9a:ea:a9:19:d9:39:b9:46:
48:a5:92:02:02:06:72:f4:12:12:74:4b:5b:fb:43:
1b:e4:a3:8e:d0:14:fd:dc:ec:91:bd:b7:6a:3f:ac:
09:d5:c6:8d:e5:c7:04:6e:db:02:86:9b:15:b5:f8:
49:4d:17:12:c8:2a:4a:b1:02:8c:02:28:30:e6:24:
94:6c:a3:62:bf:8f:ba:56:5c:12:43:64:90:55:8c:
91:41:bd:d0:89:86:6c:21:4b:8c:e5:5b:96:39:79:
ff:2e:ab:51:13:d1:15:10:fe:47:a6:94:d0:88:6e:
67:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A6:8C:E6:83:BC:67:3F:7D:12:BA:59:8D:39:72:99:2B:6E:9D:00
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145963.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:acf1::/32
Signature Algorithm: sha256WithRSAEncryption
0b:90:43:e4:b8:5b:0a:d9:39:b8:8c:7f:33:c1:62:28:c3:c6:
b9:3e:06:94:34:d3:26:db:2b:df:e6:5b:fe:73:90:0f:99:02:
6c:bd:54:e1:6f:de:f2:03:96:83:ec:2e:5e:b8:b9:7f:b7:74:
b4:df:aa:a6:80:54:93:28:ca:40:d6:27:a0:37:fc:67:4f:09:
40:49:db:ea:a3:de:22:51:61:18:57:f1:52:5b:05:1a:44:a2:
28:c2:0d:af:19:7c:52:34:eb:7a:9e:b7:8e:d2:30:a3:ff:a2:
f7:ef:1e:ee:48:69:4e:3d:d2:80:b7:07:1a:eb:4e:84:47:e7:
c4:9e:bc:ff:95:ef:1a:d6:71:e6:ee:89:8e:f7:8a:6d:98:c4:
90:61:3f:5f:71:8d:b8:54:57:42:e0:52:df:3d:d8:87:5e:ca:
f3:54:24:6c:3a:2e:83:7a:5e:71:5f:c3:0a:07:82:a5:c9:62:
ca:30:86:b3:4f:c0:18:d1:95:2b:98:db:4e:d3:d4:fa:07:48:
b4:3f:40:6e:28:0a:51:4b:89:92:4a:b5:f3:59:dd:98:45:87:
2f:55:e2:f7:f2:30:6e:78:0c:ef:b9:2f:2f:ba:26:61:26:96:
fd:2d:ff:32:1a:f1:5f:4b:55:94:dd:da:91:7b:cd:ec:d7:50:
ad:24:23:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:03 2026 by rpki-client