Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145008.roa
File: AS145008.roa (raw, json)
Hash identifier: mj6n67urC3bd1mZ1LGyPrYlJkpHeKnLb4243wo0N2EY=
Subject key identifier: 19:71:3D:DB:93:11:18:E4:8C:86:51:E7:00:D8:03:39:3E:58:06:52
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5ADFD50E06290A7189B1B4081F3FF932CF0487DE
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145008.roa
Signing time: Tue 26 May 2026 06:12:36 +0000
ROA not before: Tue 26 May 2026 06:07:36 +0000
ROA not after: Tue 25 May 2027 06:12:36 +0000
asID: 145008
IP address blocks: 240a:a936::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:df:d5:0e:06:29:0a:71:89:b1:b4:08:1f:3f:f9:32:cf:04:87:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:07:36 2026 GMT
Not After : May 25 06:12:36 2027 GMT
Subject: CN=19713DDB931118E48C8651E700D803393E580652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:70:a6:d6:32:e5:c7:9e:20:90:54:01:46:5a:
f3:e6:98:cf:ee:b7:53:bb:fb:8f:65:f8:5d:f1:20:
0f:4b:6f:b4:a2:b8:db:0f:38:e5:c4:c9:2e:bd:09:
2d:bb:0b:c7:2e:f4:d0:fe:23:d6:b3:67:96:7c:06:
dd:7b:60:8e:10:64:e5:dd:b1:e7:3e:e8:78:f3:9b:
6d:d9:f2:ac:d2:f4:7c:3f:8c:53:56:f7:75:e8:4c:
da:d8:84:57:82:3d:aa:b5:3c:ce:da:50:26:8b:ed:
8f:1d:e6:cf:3f:30:d0:90:f5:4b:2a:d5:fc:4e:e2:
10:d7:66:fd:61:4a:39:b6:30:e7:db:8c:48:35:ca:
7c:12:50:6e:5e:09:63:2e:6f:19:0f:cf:6b:9b:69:
c4:25:b3:1b:35:70:53:53:18:d6:11:a0:e9:14:22:
0e:ff:52:be:f8:03:26:73:c6:b8:0b:44:47:3f:b8:
a1:cb:ca:68:49:13:f6:18:dc:ca:a5:3f:74:05:f0:
b1:a7:b9:74:ad:15:1f:77:f6:42:da:08:0d:56:92:
14:a5:bc:fb:25:36:b5:d0:85:fc:26:c6:68:d3:01:
60:4f:23:1d:2b:f8:5e:f0:d9:4d:bb:38:95:0e:fb:
e7:3d:42:ac:d4:02:d4:8d:e9:c9:c4:c9:d2:cf:9b:
6a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:71:3D:DB:93:11:18:E4:8C:86:51:E7:00:D8:03:39:3E:58:06:52
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145008.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a936::/32
Signature Algorithm: sha256WithRSAEncryption
b6:ed:37:a4:7c:66:ee:5a:7d:86:5c:6b:63:d2:75:4c:40:49:
e0:cb:f7:6e:c7:5b:8c:75:fa:14:cf:b1:d5:05:60:c0:cf:1c:
ce:1c:ed:03:22:74:3d:f8:74:1b:d7:df:56:c7:70:a2:77:6b:
65:c4:0e:5e:5c:35:e1:dc:24:f1:ee:3b:12:10:3d:0a:8c:54:
e0:4d:d4:44:da:16:27:96:cb:7d:51:bc:60:9c:e0:10:3e:ef:
b2:ba:58:66:81:cc:5b:01:9a:7f:d8:5b:0b:36:f5:94:2d:8c:
61:57:71:a9:2b:8a:42:4a:52:b1:46:f5:c2:9e:19:dc:dc:cb:
bd:16:69:f3:d4:ac:5b:a5:3a:76:fb:79:a3:1f:85:59:8e:6e:
0e:ca:a8:6f:28:9f:83:9f:6d:e9:37:66:e2:42:0f:6d:d2:8b:
ee:84:a8:0f:b1:ad:cf:de:5d:cd:77:97:91:7c:1b:10:42:70:
bb:d8:c9:0d:67:7e:ec:7a:b6:61:0a:85:20:f2:e4:4b:dd:ca:
5f:48:4c:ad:10:f4:a2:22:94:e7:e8:ec:40:e4:60:eb:79:81:
a0:cc:39:2a:68:3c:57:49:c3:32:66:46:72:bd:bb:b5:69:d5:
5f:78:9f:99:73:73:04:52:df:a4:d8:8e:f0:56:de:6a:42:c8:
75:ff:b9:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:24:35 2026 by rpki-client