Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145014.roa
File: AS145014.roa (raw, json)
Hash identifier: s72z5BwIMvWns0i8jzGbCaUAUJOPr43VBd3er/GGRiI=
Subject key identifier: 11:DD:B3:32:5A:2F:7F:15:48:53:61:CB:D2:7E:D4:F9:78:DB:B1:2C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1F9F2D989608BB0D3C5669889CAE11FE90BD1EFE
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145014.roa
Signing time: Tue 26 May 2026 03:17:20 +0000
ROA not before: Tue 26 May 2026 03:12:20 +0000
ROA not after: Tue 25 May 2027 03:17:20 +0000
asID: 145014
IP address blocks: 240a:a93c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:9f:2d:98:96:08:bb:0d:3c:56:69:88:9c:ae:11:fe:90:bd:1e:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:12:20 2026 GMT
Not After : May 25 03:17:20 2027 GMT
Subject: CN=11DDB3325A2F7F15485361CBD27ED4F978DBB12C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0f:a2:02:be:55:dd:e7:b4:bb:3c:56:2c:3b:
1a:b3:0c:d9:93:c3:3a:7b:2b:2a:c5:ef:70:5f:39:
3a:dc:e7:f3:c2:0f:65:2f:51:42:48:a3:83:5d:1d:
54:c5:c8:6e:9d:48:2b:d1:17:be:b2:5a:86:a7:22:
cc:97:21:be:01:31:31:77:7e:f2:5f:c9:5e:19:a9:
62:2f:4e:d0:06:5b:20:46:42:3b:60:32:fb:8b:15:
54:33:52:a3:01:da:eb:89:45:1a:73:10:a8:f5:cc:
95:31:57:c0:c1:bb:ea:9d:a8:91:10:01:82:70:9d:
f0:22:e7:ff:5d:79:96:9b:59:0f:3a:86:26:9c:62:
e9:49:20:a6:9a:56:8b:af:6f:36:f4:10:ac:ea:79:
d9:4d:8c:21:c6:b5:7c:04:97:13:a3:04:37:84:72:
b4:0f:4d:12:3b:f1:f9:b2:a1:bf:bc:f0:d5:59:3e:
d1:2d:40:5a:be:41:89:64:94:35:f4:09:99:21:da:
dd:dc:8d:0e:d6:d2:89:9e:18:96:56:20:8f:11:c7:
78:a9:33:d3:23:54:fd:7b:b5:c0:cc:74:dd:05:cc:
33:c3:9d:59:cb:82:1d:06:9d:ac:7c:22:9c:93:79:
d2:f9:3a:93:f3:fa:53:5a:85:66:64:ea:92:9a:eb:
a7:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:DD:B3:32:5A:2F:7F:15:48:53:61:CB:D2:7E:D4:F9:78:DB:B1:2C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145014.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a93c::/32
Signature Algorithm: sha256WithRSAEncryption
24:c0:f2:9b:d6:da:04:c1:e1:cc:39:3c:07:f0:73:8e:79:ed:
24:fa:d7:87:c5:2f:5b:2b:ea:2d:27:88:56:e2:ec:80:19:01:
d4:0f:be:4a:47:a8:df:83:d0:72:ae:ee:b0:26:8a:4d:42:42:
b7:29:0d:b7:10:de:61:bd:0f:1e:e8:9f:31:a0:c6:33:5d:9f:
53:b8:fa:b6:a5:bb:ca:de:eb:ca:ca:2a:2b:81:5d:54:6a:da:
f2:8f:30:a8:0f:19:a6:91:23:08:ba:a6:4d:a5:9c:a0:87:f2:
69:b9:15:74:e2:53:8b:3a:ed:e1:b2:46:53:6c:02:a0:6d:4c:
26:b9:95:05:be:72:69:03:b6:a2:21:27:fc:d4:d3:c1:49:90:
b1:10:97:2f:b8:e6:29:95:eb:f7:7f:ef:7f:ff:71:1a:b5:f2:
37:d3:8a:83:3a:27:10:b2:97:31:b6:0f:34:e4:95:06:19:c0:
d6:07:c8:9b:3f:ec:0e:97:5a:bf:5b:1b:99:b3:d6:a1:ef:fa:
73:f9:80:22:d3:86:60:9f:5c:00:62:20:d6:2b:4a:62:92:fe:
d4:7d:dc:03:bb:e9:43:24:27:bf:30:78:28:34:54:97:58:79:
de:2b:87:85:ff:88:b4:6b:c1:36:94:aa:24:e9:c9:86:b2:53:
d1:12:e4:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:57 2026 by rpki-client