Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145989.roa
File: AS145989.roa (raw, json)
Hash identifier: ULXasYg6klvPgA3hilAIeakr3T5R8dyZHcBjmYkqihQ=
Subject key identifier: 89:29:BC:DF:CC:FE:A7:B8:0A:AA:8E:83:3C:98:4C:81:B9:DA:8B:2D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 116FCECEC77AC8ADD5175F43B99E968C36CE2A37
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145989.roa
Signing time: Tue 26 May 2026 03:17:13 +0000
ROA not before: Tue 26 May 2026 03:12:13 +0000
ROA not after: Tue 25 May 2027 03:17:13 +0000
asID: 145989
IP address blocks: 240a:ad0b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:6f:ce:ce:c7:7a:c8:ad:d5:17:5f:43:b9:9e:96:8c:36:ce:2a:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:12:13 2026 GMT
Not After : May 25 03:17:13 2027 GMT
Subject: CN=8929BCDFCCFEA7B80AAA8E833C984C81B9DA8B2D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:26:7f:76:c8:ff:79:ac:fa:69:aa:33:b9:bc:
9f:84:6f:fc:d5:1a:54:25:ff:04:ed:8f:da:3e:f6:
f6:6b:53:22:7d:90:41:6f:45:ce:2a:7e:30:74:5c:
c5:ef:69:13:aa:85:c6:8d:16:c1:91:ad:ce:67:90:
48:38:b2:3d:32:cf:a3:5a:8c:06:59:89:01:a6:7a:
11:8e:4c:20:ff:67:58:6f:84:4d:0d:d5:d4:45:ad:
89:80:f7:f0:c8:f5:78:8a:ea:de:af:ee:68:0c:e2:
67:09:9c:ed:b7:99:4f:7b:1a:a1:e1:47:3f:71:63:
78:78:1f:d0:09:a5:5a:08:ea:56:d4:83:ab:4f:b4:
6c:1d:5b:ac:d9:31:5e:76:53:b6:48:bf:01:47:27:
f1:6e:b4:ac:77:06:70:27:4e:7e:a7:56:f0:b5:0d:
cb:f3:d4:6c:6d:5f:fa:8f:eb:7c:31:c5:9b:61:15:
5e:72:2c:4c:2d:8e:d7:7b:63:76:4f:86:f6:15:69:
31:b0:31:38:11:fe:6d:07:a5:13:3a:28:ac:e8:16:
54:9f:0e:6d:59:0f:ce:ee:26:a8:e4:9c:7a:93:72:
9e:7a:33:7a:33:ad:c3:d6:ff:a0:6f:fd:59:fa:94:
c6:32:df:d1:21:bd:b5:88:0a:a3:c8:ab:86:bc:c8:
33:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:29:BC:DF:CC:FE:A7:B8:0A:AA:8E:83:3C:98:4C:81:B9:DA:8B:2D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145989.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ad0b::/32
Signature Algorithm: sha256WithRSAEncryption
8e:76:13:19:f7:ef:45:3b:14:e1:94:f8:98:e3:5f:68:51:3d:
cb:fa:62:c5:98:56:60:b7:cd:9f:d8:74:46:42:d1:f1:ea:db:
8d:4d:61:84:93:7a:8c:30:09:d2:26:3d:87:6c:bb:61:87:97:
f0:71:fd:ef:f1:45:bb:e5:38:89:de:9d:02:c3:39:60:de:c5:
52:e9:3f:37:81:12:12:01:19:38:e3:53:11:44:4e:82:a0:b2:
21:55:72:df:53:07:bb:53:07:d1:6d:05:95:50:64:52:90:c9:
49:2c:e1:6c:f8:75:81:98:87:a4:0e:e6:3b:f8:c0:5e:98:34:
3d:9a:e3:73:fc:82:53:3f:8f:27:0d:a0:50:60:d1:f2:29:ff:
b5:40:d2:ec:db:c9:a4:5f:89:0c:82:c1:b0:90:d2:e7:92:3e:
ff:da:41:66:d8:a1:d9:42:bd:b6:8a:8d:de:2b:95:76:3d:02:
29:1a:cc:d8:d1:f8:4a:d5:a5:6c:53:3e:d1:ca:c8:b0:f7:44:
58:b4:29:b9:b1:1e:a7:a0:30:63:e9:94:81:23:b8:81:6e:e7:
f5:2c:39:c3:68:20:45:30:9b:8b:ea:2f:d8:ed:b7:5b:0f:9c:
fb:76:3b:a0:81:23:ea:50:24:28:14:1b:95:f7:16:7d:0e:ea:
51:59:47:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:56 2026 by rpki-client