Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145995.roa
File: AS145995.roa (raw, json)
Hash identifier: 0c7ChJ28oBmys11QRY1o4ijlRjJFRHpFjq7xzFLRcsI=
Subject key identifier: 65:9E:D8:C2:EA:D6:91:22:A5:86:90:AC:83:32:F8:99:41:C4:B9:97
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 57896B07812F9196B04BBD56B3B1983ECEEB3C33
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145995.roa
Signing time: Fri 22 May 2026 07:41:09 +0000
ROA not before: Fri 22 May 2026 07:36:09 +0000
ROA not after: Fri 21 May 2027 07:41:09 +0000
asID: 145995
IP address blocks: 240a:ad11::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:89:6b:07:81:2f:91:96:b0:4b:bd:56:b3:b1:98:3e:ce:eb:3c:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:36:09 2026 GMT
Not After : May 21 07:41:09 2027 GMT
Subject: CN=659ED8C2EAD69122A58690AC8332F89941C4B997
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:7a:d8:be:99:5b:e6:b2:e2:f3:d6:ac:8f:a2:
c9:73:5d:47:f0:9a:6a:51:db:5b:9e:35:c1:1c:cc:
26:b0:cc:8a:80:56:af:cb:ef:c3:83:0a:4f:79:d0:
99:a9:e9:f4:6a:93:f0:95:ac:c7:74:7e:8b:a6:7e:
e7:52:b8:a2:bb:12:8a:25:a0:a3:6e:2a:f5:da:83:
ed:ab:f2:91:05:69:08:e8:c5:8c:45:c4:4d:6b:77:
dd:02:e0:ca:70:20:16:8a:b1:55:7e:c3:15:3b:8c:
55:49:b0:e1:93:dd:ba:80:82:90:63:0f:d2:ad:58:
33:66:a8:ff:16:40:eb:32:7e:c9:5f:e4:bc:16:8a:
10:90:8c:1f:1b:24:10:02:08:4f:cf:a1:d8:ea:c4:
04:97:5d:26:18:ca:f0:7c:e2:3b:2a:3b:60:b7:42:
a0:65:ae:16:d9:2b:ec:59:ce:03:82:ac:cf:28:45:
2f:42:8c:85:96:64:6c:a6:4f:cd:e6:d8:eb:57:e3:
e8:54:aa:00:48:dd:e4:3b:9c:61:2d:3d:ec:ca:9a:
c4:43:9d:a8:8e:6b:5a:ff:6e:fb:99:bc:d2:58:b1:
73:96:84:74:24:e6:a3:05:8a:3a:8b:5f:41:48:fc:
6b:e4:27:69:f5:4d:97:91:b1:e4:d1:be:80:44:af:
6b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:9E:D8:C2:EA:D6:91:22:A5:86:90:AC:83:32:F8:99:41:C4:B9:97
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145995.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ad11::/32
Signature Algorithm: sha256WithRSAEncryption
2c:ea:d2:6b:45:84:0e:a9:d8:f9:55:6c:27:11:5d:e7:22:9c:
83:d1:f6:43:1a:b8:25:cc:07:31:79:5d:e9:48:f5:e6:bf:c5:
6e:bb:11:3a:c3:3f:80:d9:2d:05:90:36:27:15:ce:fc:44:7d:
0a:e9:b7:ad:c3:ae:9f:05:0d:ae:9c:fc:e6:e2:b1:52:53:36:
8b:8b:be:ae:e5:0b:3d:1b:2b:0b:56:60:49:26:23:39:71:3a:
3f:c2:8d:f5:c2:e3:d7:80:18:20:b5:7f:60:be:e5:fc:c4:43:
b7:0c:83:37:93:78:f1:4d:6d:72:1c:4c:e3:6f:52:1e:d6:1e:
97:c7:fd:fb:f1:d8:d7:35:b7:4b:35:68:7a:af:e0:ee:95:68:
9d:ec:bc:02:87:38:00:54:89:b9:0a:02:07:33:c5:eb:95:df:
60:b1:00:46:e2:71:d2:c9:7d:6a:45:be:70:39:1f:b4:0d:65:
74:c7:8b:e3:8e:67:04:8e:1d:05:d7:2c:e6:b9:9a:9c:72:71:
ca:e0:f7:1f:73:fd:a0:15:01:35:05:58:8c:72:cf:6c:8e:30:
10:c2:2a:9d:03:dd:51:bc:f5:78:d1:72:87:d7:e4:d2:1a:36:
89:7a:90:ba:00:82:b7:4f:f0:da:2f:ab:a1:bd:65:e8:c8:85:
10:86:65:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:35 2026 by rpki-client