Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145007.roa
File: AS145007.roa (raw, json)
Hash identifier: LdhJ3rEoW4odABiRoxLzWKg8uxBi44ZVDofnBxqpd9c=
Subject key identifier: A1:E2:B9:9D:9D:13:E2:8F:77:A0:A2:5D:BC:E2:9E:5A:0D:E5:BA:B7
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 51FF021980E48FD52691FB7BEC0BC747816516A9
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145007.roa
Signing time: Mon 25 May 2026 01:38:34 +0000
ROA not before: Mon 25 May 2026 01:33:34 +0000
ROA not after: Mon 24 May 2027 01:38:34 +0000
asID: 145007
IP address blocks: 240a:a935::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:ff:02:19:80:e4:8f:d5:26:91:fb:7b:ec:0b:c7:47:81:65:16:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:34 2026 GMT
Not After : May 24 01:38:34 2027 GMT
Subject: CN=A1E2B99D9D13E28F77A0A25DBCE29E5A0DE5BAB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8a:55:e4:fb:80:72:ba:f0:62:4f:73:03:b5:
86:d0:d8:2c:e0:17:d6:6d:d8:50:d1:75:2e:28:07:
85:f4:a5:44:99:72:9b:de:94:53:c6:40:da:ea:53:
d5:8c:54:e3:9f:17:d8:69:cc:f1:3f:5b:43:3d:95:
53:ab:b1:89:31:21:78:17:bf:52:5c:98:cb:82:14:
8a:04:95:ad:67:95:99:4c:1a:57:20:c6:d3:1d:9f:
24:a7:8b:3f:41:78:ad:80:d0:76:85:a9:bc:f5:bb:
10:df:2b:03:83:9f:ca:a9:b3:08:e3:18:75:4d:de:
93:be:e2:4e:df:0c:c8:90:0a:61:14:d9:07:49:0e:
fd:51:e6:1c:f2:8b:dd:cd:fa:6c:c3:41:35:bd:1e:
83:87:9c:e0:52:34:6a:6c:9c:97:03:4f:f8:33:e1:
a3:5f:59:54:91:ba:75:78:bb:69:04:25:0a:eb:7c:
3d:73:2e:ee:42:03:52:36:28:d5:a6:74:15:cc:0c:
e3:0f:f6:a8:b5:42:3b:eb:84:cf:3e:7d:c5:ed:82:
de:b4:08:cc:d4:4a:97:80:8a:b3:11:c4:8f:1a:ad:
be:8a:35:97:5f:ea:0e:a4:7d:7a:7b:1f:18:54:41:
67:8f:8c:fe:5c:9a:66:15:6e:d3:b4:67:86:ac:01:
19:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:E2:B9:9D:9D:13:E2:8F:77:A0:A2:5D:BC:E2:9E:5A:0D:E5:BA:B7
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145007.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a935::/32
Signature Algorithm: sha256WithRSAEncryption
a7:ed:89:94:98:f5:30:4c:1b:d3:8b:8f:11:21:b8:8c:16:65:
81:51:c9:8e:63:d7:12:65:82:42:1d:24:da:1e:e9:dc:23:9b:
c0:36:5b:66:70:64:2b:e6:f0:46:58:24:fd:2e:0a:01:16:1d:
60:e2:8b:c2:be:51:88:80:f7:a8:92:b2:2c:da:5f:d5:5e:95:
93:80:90:9b:9d:4b:6e:d9:5c:c1:71:3b:6e:ff:f5:85:32:c5:
ff:9c:50:50:32:d7:30:9e:f6:df:c3:67:00:57:e2:f5:95:67:
f3:9b:ac:f3:8e:31:86:46:a7:74:7a:da:69:a9:2c:36:8e:08:
12:41:a8:af:ca:50:ff:21:90:3a:c0:bd:79:e4:b1:4e:29:60:
20:e3:c0:f5:c7:ca:9d:0f:55:c9:5e:09:fb:00:55:2c:61:ba:
46:cf:1a:6f:b9:81:cb:3a:f6:e2:8e:e1:b8:c8:07:ec:e0:fb:
be:41:e1:80:4c:76:a0:63:e4:e3:12:3a:2d:92:78:de:b8:e1:
e3:90:d3:9f:f1:10:44:7c:50:3d:6b:14:ad:27:d9:c5:0f:dd:
06:55:b0:76:55:b3:4b:99:ba:df:98:5b:3d:8a:fe:47:50:c4:
fa:06:81:bd:24:f1:4d:3b:6c:fd:22:f1:c7:c9:6e:0a:b6:64:
1b:b2:30:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:05 2026 by rpki-client