Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145973.roa
File: AS145973.roa (raw, json)
Hash identifier: r5LqdUyj09LZEZUfSjdCnTvmkvMq2psxSOpgJRIaT2c=
Subject key identifier: 03:DC:08:4B:30:86:F7:69:FC:3D:B3:46:41:AF:96:B7:F9:E7:7D:86
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 30E9F3F39B28A4FA2D3A89B0F1F3F4E6A6DE4D41
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145973.roa
Signing time: Fri 22 May 2026 01:50:44 +0000
ROA not before: Fri 22 May 2026 01:45:44 +0000
ROA not after: Fri 21 May 2027 01:50:44 +0000
asID: 145973
IP address blocks: 240a:acfb::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:e9:f3:f3:9b:28:a4:fa:2d:3a:89:b0:f1:f3:f4:e6:a6:de:4d:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:44 2026 GMT
Not After : May 21 01:50:44 2027 GMT
Subject: CN=03DC084B3086F769FC3DB34641AF96B7F9E77D86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:7a:b2:c3:d1:8d:76:9d:e5:3a:5b:0b:41:13:
68:32:60:af:28:91:6e:8f:95:0c:01:3d:7b:50:8f:
6a:00:95:92:06:aa:ef:ab:c8:f0:b2:8f:f0:7e:c6:
38:07:65:2b:fd:b3:2e:5b:4c:be:58:fa:50:5b:f0:
77:b1:3f:ba:31:a5:8b:ef:f8:ea:c5:73:4d:46:0f:
be:b2:6c:73:36:28:1c:2e:8a:dc:61:6c:00:b3:bd:
d8:86:cd:ae:2d:4e:92:8b:98:80:1d:21:52:80:8f:
3f:0a:12:2e:e7:e2:0c:47:4e:d7:ea:9b:28:d2:d4:
43:0a:b9:63:7f:2d:f6:8d:d0:47:5d:46:68:68:84:
7a:64:d0:23:26:9c:e8:4d:b2:26:4e:7b:74:c4:17:
75:0d:0a:b9:96:2a:d0:db:73:18:e7:d2:98:4b:85:
ea:12:7c:1e:5e:50:a1:c9:31:e2:25:4e:ae:39:9e:
04:6a:a2:5d:0d:13:3d:94:39:02:7d:60:8a:92:1a:
d2:b5:a9:2f:53:ac:d8:85:40:55:a7:53:15:33:e1:
aa:46:05:22:e5:c3:19:24:48:08:dd:00:84:20:e4:
68:4a:6e:c5:0c:4d:f9:b6:af:3f:be:d8:4d:ac:dd:
a9:46:3a:29:d0:1e:c2:d8:09:09:1d:57:39:29:4b:
6f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:DC:08:4B:30:86:F7:69:FC:3D:B3:46:41:AF:96:B7:F9:E7:7D:86
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145973.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:acfb::/32
Signature Algorithm: sha256WithRSAEncryption
4f:f0:b5:75:65:9c:bc:3f:86:ab:f5:d9:4e:1c:c7:db:c5:df:
96:0c:32:30:16:07:49:62:b2:fb:9c:7f:42:42:9e:29:8c:2d:
de:56:1a:10:29:29:df:71:ca:49:5c:5a:af:31:7c:5a:54:91:
20:4c:f8:86:58:9e:65:da:a8:94:94:aa:0d:1b:5a:2e:cd:9c:
a7:7f:de:c9:76:33:d7:0c:05:42:85:54:07:e1:b3:73:80:f9:
c1:b8:4f:a4:82:11:75:c9:96:f3:c4:7f:19:17:54:da:c8:03:
0b:c8:99:5f:ae:64:9f:50:19:9b:47:e8:e2:2c:88:35:b6:f5:
22:cc:c2:45:25:f3:9c:c7:19:cc:c6:16:78:e7:ce:a2:ca:d3:
8a:dc:7e:9e:31:3f:fd:fe:a8:57:ac:31:65:43:cb:7a:c4:63:
ae:6b:38:5b:46:6f:4a:03:1a:87:5a:44:90:66:61:cb:bb:81:
53:6c:50:a1:cd:cd:3b:e9:d4:53:88:75:71:35:8a:23:79:54:
43:4a:d0:20:e0:89:84:20:88:b1:b6:16:54:8a:bc:d5:89:35:
2e:0e:78:34:2c:a0:82:8e:45:41:72:d1:a3:cd:f0:ac:36:3d:
54:8a:4b:e6:1b:69:b4:27:6c:4c:b5:0e:b0:05:c3:0e:67:03:
41:f8:1b:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:57 2026 by rpki-client