Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145970.roa
File: AS145970.roa (raw, json)
Hash identifier: BEA8S3ChIFPY0EOKr+z8TkcVmh5cC7PGmflye7Jsn98=
Subject key identifier: F9:0B:90:F4:B6:1C:C7:52:72:89:5C:73:8E:F2:E5:73:EF:54:62:9A
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 65F5A18D66203FEF3E9768A0D807C77549D08670
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145970.roa
Signing time: Fri 22 May 2026 07:08:51 +0000
ROA not before: Fri 22 May 2026 07:03:51 +0000
ROA not after: Fri 21 May 2027 07:08:51 +0000
asID: 145970
IP address blocks: 240a:acf8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:f5:a1:8d:66:20:3f:ef:3e:97:68:a0:d8:07:c7:75:49:d0:86:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:03:51 2026 GMT
Not After : May 21 07:08:51 2027 GMT
Subject: CN=F90B90F4B61CC75272895C738EF2E573EF54629A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:11:a7:82:2d:d6:9b:63:02:ad:e9:c3:f3:74:
74:9a:6b:88:b3:46:4e:fc:68:e2:2d:7c:a1:f8:07:
64:0d:55:2c:67:c4:6b:19:61:41:e1:44:e5:6e:58:
f5:2e:27:c3:f6:b2:fd:d5:95:e7:36:07:ae:57:f7:
72:8f:29:d3:86:32:2c:ef:bf:75:1f:01:79:2b:d1:
0d:a9:24:12:b5:e2:7a:10:fd:60:19:70:ad:55:f7:
16:6c:1c:50:5b:bf:14:fb:3f:5c:0c:2e:26:2f:0d:
56:86:a4:b4:0d:d2:8b:46:e4:d0:4e:65:e9:67:7e:
0d:c0:fa:50:0b:a1:5e:30:94:13:27:6f:c4:32:39:
09:2a:c9:22:51:85:0e:82:3e:de:38:3b:7d:68:69:
55:bf:c9:99:b0:1c:42:54:82:65:4a:29:54:dc:57:
f5:f3:b7:d6:13:14:e2:f2:35:12:f6:b5:7c:09:f6:
89:b4:bd:d7:84:d7:c0:ba:43:13:5d:b3:36:3c:a0:
b9:1f:31:fa:12:0f:33:cc:11:bd:ea:48:e7:93:29:
4f:71:7e:c2:65:d4:01:1a:02:d7:92:1c:3c:a9:14:
65:7b:dc:4c:bd:29:34:be:85:4f:49:a3:81:75:e8:
2d:8a:d8:d1:90:de:a4:3a:f5:2c:3d:62:11:94:dc:
5d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:0B:90:F4:B6:1C:C7:52:72:89:5C:73:8E:F2:E5:73:EF:54:62:9A
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145970.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:acf8::/32
Signature Algorithm: sha256WithRSAEncryption
57:6d:fd:b0:ca:2f:35:21:3c:1d:ef:a0:ec:65:2c:34:d7:9a:
43:3d:10:bd:d6:95:2a:05:34:c5:a8:c4:00:a5:07:e9:05:4d:
74:05:f9:1b:f7:e1:5a:6c:cf:ab:4d:25:4b:9b:c3:98:20:b7:
ac:1f:08:d4:a5:c1:4c:a2:59:6a:56:7b:d0:ed:3c:3d:f0:03:
00:8a:40:9e:fd:a0:f0:37:c5:26:4c:49:b7:da:3c:aa:53:1e:
c7:e5:e7:7f:2a:ba:7b:3a:36:04:67:16:ed:15:68:62:9e:66:
f5:6d:f2:91:38:01:94:5e:25:ac:62:2a:99:82:6e:30:46:21:
67:b2:e3:2b:4c:c3:70:8c:de:27:11:ff:4c:39:62:1f:7b:c8:
eb:d9:36:8c:12:6c:d1:05:2f:10:c3:18:0e:f0:59:8b:9a:17:
4c:c8:ca:aa:c3:d3:ae:4c:80:ae:bf:0b:df:b4:76:bc:e3:42:
62:ac:fd:da:07:91:f4:de:31:5a:bd:12:35:66:23:61:05:b8:
73:e1:d6:48:71:61:42:11:d0:ad:96:d2:6a:f4:e1:d1:02:72:
25:4f:b0:76:58:12:91:da:5b:d8:5f:09:54:bd:59:f5:1c:bc:
2b:50:3a:17:78:86:4f:9c:67:f0:d0:88:84:21:49:aa:4b:d6:
9c:87:22:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:32 2026 by rpki-client