Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145991.roa
File: AS145991.roa (raw, json)
Hash identifier: wb2T0yrOlkv+/TDoarEcNJcmN8a6dCaLjU/Vj3qKcUU=
Subject key identifier: 76:87:31:4B:AD:F1:AF:1C:8F:E1:F7:47:F4:45:FE:B2:13:55:E3:25
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2284C66664162A87937C30B93D5127BFEC0F5571
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145991.roa
Signing time: Fri 22 May 2026 07:24:42 +0000
ROA not before: Fri 22 May 2026 07:19:42 +0000
ROA not after: Fri 21 May 2027 07:24:42 +0000
asID: 145991
IP address blocks: 240a:ad0d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:84:c6:66:64:16:2a:87:93:7c:30:b9:3d:51:27:bf:ec:0f:55:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:19:42 2026 GMT
Not After : May 21 07:24:42 2027 GMT
Subject: CN=7687314BADF1AF1C8FE1F747F445FEB21355E325
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ed:73:b8:b7:af:7e:a8:63:ee:17:b0:71:f4:
05:ec:9b:1b:b1:f1:ec:9b:d4:ef:0c:21:ca:e3:1a:
a5:7d:37:69:2c:ae:80:3f:8a:10:73:2b:32:f7:c0:
62:ba:94:25:97:68:6f:91:f5:8a:b2:b5:7f:74:21:
19:6b:1a:01:16:a8:81:44:7a:ee:a9:f9:13:84:82:
70:2c:96:b1:00:41:aa:f6:a6:9a:2b:74:70:b2:6a:
9b:0a:bb:d2:2e:34:8d:d4:bb:74:65:2b:70:41:94:
8e:51:5c:23:29:c6:b7:d5:63:16:0d:39:bd:af:ce:
90:77:da:1e:48:10:17:75:76:3a:0f:ad:74:1b:cf:
09:1c:f5:8a:b7:61:54:ec:c3:d2:b7:ab:b7:c6:e7:
c7:46:00:65:ed:59:94:c8:86:1e:71:83:71:ec:3e:
05:4d:80:52:e3:a1:83:ef:8f:ee:d8:ed:7b:c5:04:
8d:0b:9c:fa:8f:1e:0a:d5:c8:87:90:77:f5:fd:99:
fa:7a:7c:e0:2f:00:14:cb:91:1f:ca:89:04:c6:53:
dc:b5:b3:9a:8b:43:e1:d9:ee:e5:99:a9:05:a1:96:
fb:cb:22:e0:de:5e:03:9e:a2:8e:ae:93:a1:d1:b0:
a7:81:f4:e8:f3:87:a4:17:86:97:25:0f:6d:ba:26:
89:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:87:31:4B:AD:F1:AF:1C:8F:E1:F7:47:F4:45:FE:B2:13:55:E3:25
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145991.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ad0d::/32
Signature Algorithm: sha256WithRSAEncryption
3a:ba:b9:c3:dd:f6:27:65:f0:05:6f:f6:86:43:b7:f3:bd:f5:
5e:95:15:dd:d8:36:e2:7d:56:36:4e:8c:60:6c:dc:9e:32:32:
2a:1c:2d:f9:e2:4c:fe:c9:b6:d7:8c:f3:cb:20:2d:c7:7a:78:
48:a3:f3:39:57:f8:aa:af:2f:72:ca:5b:34:f8:09:cd:20:1c:
7f:f7:42:e9:d9:a5:46:27:81:5c:c7:b4:fd:6b:92:e8:7e:ad:
19:5e:77:d1:43:39:aa:be:29:89:fb:0f:2c:76:69:8f:80:03:
3b:eb:81:36:fb:4f:ae:03:fd:4e:da:0a:92:ca:99:3d:31:f4:
3a:3d:e0:05:37:92:30:91:ac:25:49:61:50:a6:60:a3:6c:c7:
dd:55:cd:de:29:b6:18:0b:f9:77:aa:aa:36:b0:a0:f3:56:a7:
01:de:96:53:8c:78:52:26:cc:b2:5c:6c:c7:29:ab:08:31:35:
a6:25:97:36:d7:18:c7:37:92:ad:f9:e2:95:93:19:75:67:92:
6c:0d:4f:85:d1:7d:52:d9:cc:d6:93:55:ed:c2:0e:f9:1f:8e:
ee:a1:f0:1c:cb:0a:c9:d5:cb:5c:04:2b:d2:c1:c4:a7:d9:64:
db:15:e8:2c:60:7e:f9:fa:0e:cb:f2:e0:0e:b4:76:d2:c4:91:
df:b9:ff:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:33 2026 by rpki-client