Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145967.roa
File: AS145967.roa (raw, json)
Hash identifier: 2q7WnmQhn9HgByyYagDE52oNtEZziKOPoqJdG4fNBe4=
Subject key identifier: 03:D0:A6:75:FD:21:0D:A1:7D:A2:C9:07:01:DD:82:43:25:F3:C4:BF
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1CFF1086FC6F3FF67A3E01128830A1D13C244488
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145967.roa
Signing time: Fri 22 May 2026 07:41:06 +0000
ROA not before: Fri 22 May 2026 07:36:06 +0000
ROA not after: Fri 21 May 2027 07:41:06 +0000
asID: 145967
IP address blocks: 240a:acf5::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:ff:10:86:fc:6f:3f:f6:7a:3e:01:12:88:30:a1:d1:3c:24:44:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:36:06 2026 GMT
Not After : May 21 07:41:06 2027 GMT
Subject: CN=03D0A675FD210DA17DA2C90701DD824325F3C4BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:81:9c:f4:89:6b:1d:85:30:a6:c5:d2:98:a4:
f9:b3:d6:c8:e1:39:4e:df:7e:48:19:71:bf:d8:8c:
7c:30:0a:98:22:68:f6:4b:4c:47:88:0e:de:93:c6:
85:f6:e9:fd:36:59:d6:ce:5f:b7:19:fd:1e:b3:58:
cd:ff:d1:9c:36:3e:45:49:b6:01:bc:a9:19:44:bf:
29:63:9e:4b:0c:2d:61:57:de:9d:1d:02:89:9f:7f:
62:36:f2:62:8d:2b:6f:3f:c7:f4:9c:33:6f:24:e6:
d2:08:8d:2d:76:ac:94:bf:a0:dd:d9:54:ce:d0:02:
ae:04:0e:21:d0:31:55:28:c8:59:2c:35:75:1c:e2:
99:fb:98:5b:37:13:ba:58:d8:74:53:a2:dd:f1:a1:
57:c2:10:2b:5a:ad:6d:a2:e3:c7:a2:26:fc:69:6d:
f1:65:79:14:f3:25:e8:b7:88:63:67:73:2e:e4:32:
58:fc:53:cc:2e:da:ff:14:40:b5:f5:00:83:42:c0:
8a:ef:52:3c:fa:d1:0a:98:cf:30:35:c2:fd:98:e5:
fb:af:be:95:c9:fc:95:b5:f2:0b:c8:f1:e6:47:9b:
0b:5e:bc:6a:92:16:cc:98:92:c9:a9:d9:42:7a:b1:
af:c6:a9:b6:80:71:cd:62:03:62:f6:66:79:b3:e5:
a3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:D0:A6:75:FD:21:0D:A1:7D:A2:C9:07:01:DD:82:43:25:F3:C4:BF
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145967.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:acf5::/32
Signature Algorithm: sha256WithRSAEncryption
bb:04:a7:56:34:fb:bd:58:73:3e:67:1a:c8:5f:96:9f:65:a7:
31:4c:b7:c3:90:3a:d5:15:16:a2:3c:9a:cc:19:21:72:fe:05:
b3:c7:e8:de:8e:d3:af:b7:64:14:8a:61:95:c3:1f:5a:de:35:
6a:4a:f9:2f:08:79:9e:ec:0b:f2:8f:97:48:3f:9a:d9:d8:46:
c0:b7:da:71:4d:d1:4d:c7:d7:20:31:aa:65:fc:1e:a8:68:da:
da:12:58:43:bb:0f:df:cb:6d:be:42:d7:32:6e:53:db:01:5d:
7c:84:2c:c5:75:09:2c:77:96:8d:e0:4a:62:07:e5:61:43:5d:
d5:eb:52:ee:6d:6e:5e:6b:a6:b8:8f:34:7f:e3:ec:ca:3d:e7:
ba:c4:15:fe:9c:5f:58:32:6f:ec:04:ed:91:e1:eb:52:50:bc:
5e:de:4c:eb:0c:11:ce:c5:d2:a5:2a:a7:ec:4d:54:50:3a:59:
e7:ad:7b:35:38:a4:c1:17:3b:86:ef:5a:e9:f3:09:f7:ee:f5:
59:f6:5d:2f:23:23:f9:b1:08:ac:2f:05:d0:07:a7:8d:19:04:
bb:6e:d0:58:29:65:dc:00:ee:63:0e:7c:83:97:20:d4:b5:ec:
4e:7f:df:bc:b4:07:2f:fd:10:d5:76:5b:2e:2b:ed:21:18:29:
b2:f1:d5:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:29 2026 by rpki-client