Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145972.roa
File: AS145972.roa (raw, json)
Hash identifier: sy0DnV8MJSq4N9u2KjbaUJUqtFzkpWUjEdqRtVpwCgk=
Subject key identifier: 9F:E6:68:0E:57:5A:21:02:5A:26:7D:67:D9:7C:8E:7B:08:A7:17:7B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 06E050A7A56625915CE58B6B3F1A4E8349F2999D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145972.roa
Signing time: Tue 26 May 2026 06:12:32 +0000
ROA not before: Tue 26 May 2026 06:07:32 +0000
ROA not after: Tue 25 May 2027 06:12:32 +0000
asID: 145972
IP address blocks: 240a:acfa::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:e0:50:a7:a5:66:25:91:5c:e5:8b:6b:3f:1a:4e:83:49:f2:99:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:07:32 2026 GMT
Not After : May 25 06:12:32 2027 GMT
Subject: CN=9FE6680E575A21025A267D67D97C8E7B08A7177B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bd:1f:92:bf:0e:a5:1c:ff:c5:0b:3f:23:cb:
44:ab:c1:8a:9a:7b:7e:5d:7d:24:92:fb:68:49:bb:
a5:b1:0c:fc:53:ec:de:81:7e:bf:fe:23:ce:0f:6b:
db:4c:72:97:8f:c9:4d:ae:a5:0b:46:fa:6b:14:5a:
37:58:f7:22:8f:92:99:b1:e2:db:83:8f:b4:39:94:
81:b1:34:48:33:a5:81:83:f3:25:f4:a8:4b:98:8b:
8b:60:17:b2:a3:9c:5e:b9:ce:8d:6e:d7:ae:2f:2d:
a3:09:6c:2c:3f:25:7f:4e:bb:16:d9:2a:30:26:aa:
d6:fb:bf:4f:7f:cf:7f:73:89:39:c7:7c:cb:e8:72:
32:58:0f:67:e9:33:2a:52:f4:78:3c:b7:7a:5d:5d:
c9:08:48:60:f4:cc:cf:12:5c:1f:2e:78:10:e3:31:
ea:f5:8f:f6:4d:0c:3b:0d:14:a9:03:88:f6:1d:31:
24:af:d6:53:2a:22:0d:50:52:0e:79:99:0c:3d:f8:
6a:5a:f1:42:0d:92:8e:41:88:d7:94:bf:44:ae:91:
fa:28:dd:f6:e9:4f:eb:44:d6:69:d4:30:6d:f8:1b:
3d:54:33:95:7c:2a:fc:9e:5d:9a:3a:bc:2e:b2:d1:
53:3b:b6:86:fd:db:bc:ff:ba:4a:7a:2f:7d:5d:fc:
3e:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E6:68:0E:57:5A:21:02:5A:26:7D:67:D9:7C:8E:7B:08:A7:17:7B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145972.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:acfa::/32
Signature Algorithm: sha256WithRSAEncryption
5b:34:4e:87:ea:72:91:a4:41:5b:0e:cb:64:17:cf:cf:fd:59:
2a:f7:f2:66:a2:db:64:f4:28:79:17:c8:f5:e0:1a:88:64:df:
d9:01:6a:38:35:5e:b0:aa:7e:0f:3a:4e:fc:72:89:06:67:6a:
60:44:8b:fe:39:94:48:c8:fa:e1:1f:a0:2e:d6:5a:93:6c:3f:
17:61:4f:1f:ae:41:00:53:91:bb:03:9e:07:9e:e3:90:0c:aa:
b2:ad:38:f1:60:52:c3:30:f6:de:0a:43:64:60:21:d6:c4:b3:
11:d6:b2:4d:d4:3c:73:85:60:41:76:46:53:db:7f:d0:fb:e0:
38:0a:0b:a5:78:33:c2:3b:45:2f:95:ce:6d:a4:4f:a7:8d:29:
45:f0:74:74:1a:fa:18:49:93:b9:6d:a2:5f:1c:58:57:46:56:
a3:92:c2:7c:b1:76:9a:7c:3b:b8:7a:46:17:92:d9:05:b9:1c:
f3:5d:a4:17:99:1a:72:d3:e2:81:ec:e3:e4:f3:64:73:6e:1f:
fe:16:c3:51:75:c7:d0:d7:eb:f9:6d:59:fe:fc:35:08:4d:dd:
7c:1e:f1:fa:b3:78:e0:d5:47:da:bc:d7:03:39:80:19:7f:06:
26:db:70:86:ca:86:f9:23:0b:a1:dc:8a:73:15:9f:21:05:51:
dc:30:9e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:56 2026 by rpki-client