Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145980.roa
File: AS145980.roa (raw, json)
Hash identifier: LO0xnSllSWTTfLCdTvY0zlh7QXkf/jnQyGeYwAQqJ98=
Subject key identifier: 0D:71:18:BA:BF:1B:0D:2A:EB:F5:1C:50:8F:44:4B:BE:32:A5:14:71
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7A9EEA1D96BCFF24542B00987E7F44E5EFAB1A35
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145980.roa
Signing time: Fri 22 May 2026 07:25:05 +0000
ROA not before: Fri 22 May 2026 07:20:05 +0000
ROA not after: Fri 21 May 2027 07:25:05 +0000
asID: 145980
IP address blocks: 240a:ad02::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:9e:ea:1d:96:bc:ff:24:54:2b:00:98:7e:7f:44:e5:ef:ab:1a:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:20:05 2026 GMT
Not After : May 21 07:25:05 2027 GMT
Subject: CN=0D7118BABF1B0D2AEBF51C508F444BBE32A51471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:46:f5:2f:51:46:fd:87:2d:01:c7:bf:ed:1b:
45:6b:f0:90:f2:24:91:51:fd:11:97:e4:07:4a:3e:
bb:a4:84:0c:37:84:a5:4f:0c:61:0c:6e:72:72:a7:
8e:43:ab:13:14:80:09:c3:14:0b:99:f2:9e:87:32:
23:1f:a3:45:fb:53:e0:f3:88:3e:e1:0d:a3:3a:9d:
45:78:d2:54:c6:00:d3:a6:f4:6a:60:5f:e5:56:d6:
c3:cb:b2:82:73:49:f9:5b:b8:ba:f3:44:1e:0d:09:
4b:ef:f3:8d:75:b4:78:f6:a5:33:b8:47:cb:79:e8:
11:68:de:24:da:45:75:28:4d:5b:99:27:b3:17:8c:
7b:78:71:dc:24:ba:94:50:e8:2e:f3:cc:1e:e4:86:
c2:83:64:af:71:cc:cd:85:17:d6:01:41:67:77:14:
0f:14:07:a4:90:35:42:24:ea:79:f6:aa:d8:01:31:
a8:85:d3:ca:f1:41:3e:c6:d1:3a:59:7f:36:e9:be:
f8:e7:63:9f:21:ec:64:32:58:6f:d5:59:13:ec:6d:
56:2f:e5:2d:9d:7f:7e:b3:3e:c4:01:1a:a4:c3:ce:
85:94:11:ae:fb:af:c5:63:5e:bf:5a:0e:9e:98:30:
15:b8:95:55:08:6f:b1:1e:2b:88:48:cb:a3:e6:d1:
29:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:71:18:BA:BF:1B:0D:2A:EB:F5:1C:50:8F:44:4B:BE:32:A5:14:71
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145980.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ad02::/32
Signature Algorithm: sha256WithRSAEncryption
97:7f:ef:36:8a:dd:f1:8e:ca:36:8f:80:37:69:e0:2a:11:1e:
10:e6:3d:c2:09:f9:76:e6:b6:17:6a:5f:55:c6:9d:3e:c5:8c:
ca:88:11:51:38:e1:3c:90:33:2e:2b:91:89:34:fe:82:e8:81:
49:d9:c5:85:93:72:db:b9:9d:53:95:fb:d7:93:68:8f:74:28:
72:39:9d:fc:17:80:dd:33:fc:45:74:16:a6:a0:d5:48:aa:19:
12:8a:ef:be:06:a0:c4:3f:d6:0d:8c:0f:1c:d0:a0:9f:fc:e3:
e0:55:e6:13:05:16:03:63:28:42:65:a3:3c:62:41:32:e4:61:
f3:6d:6b:d5:6c:16:87:4d:6f:fd:e3:bf:d2:80:7a:7d:42:42:
e3:09:ee:3b:ca:d9:6a:ef:79:52:93:f6:40:d1:f3:b0:1c:7a:
34:58:3d:0d:a6:e2:45:95:e3:40:94:04:7c:af:1d:fb:10:fd:
9f:1e:28:f4:3d:1c:70:b8:9a:a2:9f:11:ab:d7:21:82:45:f6:
4c:04:16:aa:16:c0:d9:d8:cf:54:1a:73:23:c5:bf:c2:57:7a:
44:d0:f1:df:0d:1e:48:ce:0c:1c:cd:d5:ae:3f:3a:28:7c:ad:
2b:1b:0c:8e:d1:09:40:00:d1:29:6b:37:ea:b5:4e:f0:16:ed:
3c:69:af:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:32 2026 by rpki-client