Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145986.roa
File: AS145986.roa (raw, json)
Hash identifier: 2zALTx5IH/u5j/d9nAH4TA8RsosIpAXWN+EDAHjdcYk=
Subject key identifier: 92:54:F3:AD:57:D0:08:02:4E:DC:14:55:51:FA:48:31:DA:3D:48:C7
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1B83372146D97BD057BBA676BA3C9419C3C60868
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145986.roa
Signing time: Tue 26 May 2026 06:12:59 +0000
ROA not before: Tue 26 May 2026 06:07:59 +0000
ROA not after: Tue 25 May 2027 06:12:59 +0000
asID: 145986
IP address blocks: 240a:ad08::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:83:37:21:46:d9:7b:d0:57:bb:a6:76:ba:3c:94:19:c3:c6:08:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:07:59 2026 GMT
Not After : May 25 06:12:59 2027 GMT
Subject: CN=9254F3AD57D008024EDC145551FA4831DA3D48C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:83:7a:68:5a:a3:89:14:8b:39:bd:4e:dc:cb:
a6:8c:51:4e:0c:34:c7:e4:66:d4:73:97:19:8d:bc:
68:1f:0e:7f:30:9d:c5:38:2d:af:e1:11:ac:27:c3:
c0:48:7d:e5:5c:89:6e:58:7d:47:90:3a:f3:f2:eb:
7e:7f:5b:8e:16:21:eb:a1:fe:c6:76:5c:f4:fc:2d:
33:5c:49:39:b5:29:36:75:e2:63:4f:f4:72:ff:e7:
96:fc:91:90:af:f7:1d:05:02:91:ef:38:63:f0:fc:
a3:ad:60:75:20:b8:71:bc:13:ac:08:82:da:85:5b:
bf:c1:d8:50:af:3e:b2:49:8a:92:4a:6e:dc:48:13:
ac:5d:3f:08:45:71:5d:fd:5f:36:d4:0c:26:b4:2a:
f8:31:f5:e8:f4:a5:47:8d:b7:b3:9a:a9:b4:33:51:
5e:24:92:d2:fe:d3:a8:ae:4e:93:8a:5d:fa:a7:78:
55:75:f7:c7:3c:9d:bb:fb:45:fd:6a:82:22:cc:91:
a4:70:29:cd:64:95:64:86:54:a2:81:ec:7c:c4:0c:
4b:f8:17:9a:ab:17:f1:f0:bd:22:9a:fa:93:04:58:
df:3e:5d:7c:2b:ea:f5:92:45:15:33:c3:a0:c5:0e:
80:3f:67:21:2e:31:3b:35:ff:77:fb:30:ac:84:f3:
53:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:54:F3:AD:57:D0:08:02:4E:DC:14:55:51:FA:48:31:DA:3D:48:C7
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145986.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ad08::/32
Signature Algorithm: sha256WithRSAEncryption
36:bc:80:d2:8e:4c:46:f1:94:4d:14:0b:a2:f7:62:40:11:79:
37:9a:33:f9:13:45:da:83:71:08:8e:c7:2c:d7:d8:13:5f:5e:
0e:36:23:50:cb:ea:f5:25:fd:e7:7f:5e:0a:db:68:d2:62:ec:
2e:9c:e8:5d:e4:77:b1:6d:cd:bc:20:cc:f1:e1:5d:86:f6:07:
a2:52:78:1a:4e:5e:c6:80:28:89:f8:d2:2a:0a:ed:7e:b2:11:
39:4a:f6:a5:14:be:81:d7:1b:29:1a:34:4f:e6:02:b2:05:75:
f6:5b:e5:71:92:ab:5c:13:50:8a:69:25:2b:09:39:e0:30:d7:
46:b4:8c:bf:f9:29:5a:c2:e2:78:9f:ec:a2:39:db:60:71:4b:
9c:15:b5:82:b7:c7:38:1b:25:15:4b:db:15:e6:53:8b:eb:d6:
04:6d:bf:f1:8a:87:98:14:08:65:6f:73:6d:96:b0:9c:15:d7:
64:ab:9c:49:dd:e0:93:67:34:98:d7:bc:83:67:36:76:da:90:
5d:3a:3f:28:48:4a:f9:5c:90:6e:46:5c:ee:49:6c:83:a9:e7:
d6:26:7b:e4:d7:c3:d6:ef:fc:27:05:c2:fa:3b:90:0c:d4:8d:
14:8b:9a:3c:78:84:91:50:3c:26:89:29:6d:54:de:17:36:8e:
58:b2:de:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:44 2026 by rpki-client