Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145979.roa
File: AS145979.roa (raw, json)
Hash identifier: rKCZzIPUk+gMLH2Sq+0OeLnWCjarMY1foyVGUVIU7mQ=
Subject key identifier: D9:8D:07:61:BD:4E:14:39:40:0A:39:81:F8:3C:51:9E:E5:48:13:6E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 76BA976ABD686E6E49E3727CA7D9AFACC243A235
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145979.roa
Signing time: Fri 22 May 2026 07:08:52 +0000
ROA not before: Fri 22 May 2026 07:03:52 +0000
ROA not after: Fri 21 May 2027 07:08:52 +0000
asID: 145979
IP address blocks: 240a:ad01::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:ba:97:6a:bd:68:6e:6e:49:e3:72:7c:a7:d9:af:ac:c2:43:a2:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:03:52 2026 GMT
Not After : May 21 07:08:52 2027 GMT
Subject: CN=D98D0761BD4E1439400A3981F83C519EE548136E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9d:37:ad:dd:4c:15:8a:fd:e8:57:c4:a5:46:
8c:df:20:f9:06:f9:dd:07:8e:c4:cc:b6:1c:1c:a9:
89:29:a1:7e:6d:d8:46:dc:b2:d1:0e:cc:e4:51:3c:
9b:a6:c5:b4:aa:5a:c7:5d:4e:0f:bf:fe:77:9c:cb:
77:ed:1a:e0:41:ca:eb:f9:0f:55:14:06:8b:32:b7:
87:dc:03:2b:b4:02:16:25:a4:d5:a5:9e:59:d0:bc:
26:f6:5e:03:b7:31:42:f9:1f:42:bb:4a:16:55:ce:
97:ea:2a:23:09:1e:3c:7f:12:8f:00:0f:29:dd:d2:
75:bb:6a:37:80:48:8c:c5:3e:66:e1:eb:a3:07:54:
24:29:5a:b8:a2:ba:0e:7a:77:0c:24:3f:e6:7d:72:
6b:fc:b6:3e:66:88:38:e8:24:28:b8:26:33:4b:03:
d4:2f:48:01:44:c1:e6:a3:98:2f:34:f4:54:3f:f6:
9c:6c:88:a3:cd:ed:d9:70:15:1b:89:47:df:95:4f:
37:08:cc:3f:8e:ce:44:67:98:d2:19:d6:b7:5a:84:
1c:f8:af:5e:df:47:46:cd:bf:23:fa:87:45:0b:69:
71:c8:c2:f0:8e:d4:d3:9e:93:e0:36:2b:45:74:7d:
2b:d8:45:70:78:54:5a:4f:b6:40:fe:95:67:5b:e1:
7d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:8D:07:61:BD:4E:14:39:40:0A:39:81:F8:3C:51:9E:E5:48:13:6E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145979.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ad01::/32
Signature Algorithm: sha256WithRSAEncryption
a5:17:5f:5d:b9:20:22:9c:89:62:b0:61:1b:ee:ad:94:97:fc:
7f:75:b5:e2:4b:6a:4a:31:a6:6d:91:f3:2d:86:47:1a:12:9c:
72:d3:9c:69:45:ef:33:5b:ad:2f:cb:5f:d3:ff:7a:63:4c:d5:
e3:2d:53:29:24:8c:1b:38:18:1d:4a:08:29:bb:06:df:27:21:
d9:2a:83:b2:3a:df:1b:f5:80:a8:b0:a3:35:2e:60:29:a5:94:
8f:2a:f1:8a:cd:79:04:c4:b7:55:19:1b:7c:b4:f5:f4:3b:50:
91:85:1b:31:81:c9:6d:e1:8e:29:fb:1b:2d:57:46:8e:aa:33:
a9:a3:5b:15:1b:63:30:d4:6e:ca:58:3b:0e:8d:56:30:ed:9b:
99:ef:72:82:ec:53:77:be:a7:1f:23:73:3c:5d:ae:75:9e:8f:
a8:f6:42:ea:41:1a:54:0b:c3:b1:1f:d8:bd:28:a6:de:35:fb:
da:3c:04:b8:e9:40:b6:9d:91:d6:6d:1e:9b:b1:95:99:fa:82:
dc:88:98:d0:af:aa:c0:97:1a:e1:4b:ca:2e:df:ac:78:d0:37:
1b:bc:fe:b6:5e:5a:87:d9:cd:8b:56:fd:d5:1a:77:fa:bf:93:
0d:d5:c6:a2:d6:41:a6:49:5a:8e:67:6f:e5:c2:ae:77:31:04:
8f:f5:3f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:44 2026 by rpki-client