Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145015.roa
File: AS145015.roa (raw, json)
Hash identifier: FXKtyqLpqZd/Y1yZ9LId2alV/pSdr/SeJWgFtEde5SA=
Subject key identifier: DF:76:AA:72:45:62:0C:CA:94:15:EB:04:74:73:55:97:C4:01:DF:CE
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1674634B74E773C6BF42A3DB295F2F401B658C74
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145015.roa
Signing time: Fri 22 May 2026 06:46:09 +0000
ROA not before: Fri 22 May 2026 06:41:09 +0000
ROA not after: Fri 21 May 2027 06:46:09 +0000
asID: 145015
IP address blocks: 240a:a93d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:74:63:4b:74:e7:73:c6:bf:42:a3:db:29:5f:2f:40:1b:65:8c:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:41:09 2026 GMT
Not After : May 21 06:46:09 2027 GMT
Subject: CN=DF76AA7245620CCA9415EB0474735597C401DFCE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:8a:50:21:6e:db:92:f2:32:9a:22:41:fb:84:
d0:ea:f1:7b:84:99:a1:76:82:26:28:35:36:a8:a1:
68:be:ed:96:1a:93:da:24:cb:94:d1:e9:73:cb:e5:
95:be:c7:c6:dc:28:ef:10:77:36:75:43:d0:89:90:
8d:cc:ae:46:0f:0c:3a:2f:59:a9:28:cb:f7:05:f2:
d9:12:96:9e:ae:70:b7:4d:62:dc:cc:0e:88:6e:37:
12:4b:4d:81:92:bf:cc:51:e1:e5:60:1d:22:06:7b:
a3:f0:70:01:ee:be:b2:40:79:48:3c:cf:5f:1f:95:
c5:65:cd:e4:96:43:92:e6:ee:45:47:f8:54:38:e1:
97:1f:60:8c:57:8a:2b:5c:78:31:a9:1e:51:52:81:
1d:bd:a3:d1:0f:28:18:bb:6e:19:09:67:f7:64:47:
10:35:e2:e1:38:e4:86:4e:6a:c5:83:b8:fe:5c:33:
ce:97:7e:e7:bb:86:b0:cf:0a:57:de:dc:6f:08:17:
22:c1:0c:12:42:cc:eb:17:48:68:71:f6:5a:6a:33:
5d:1f:6b:be:ed:c5:1c:e1:20:bb:91:cb:1f:77:2d:
f7:b6:ec:dd:53:f0:d0:8e:45:37:83:b5:45:0c:39:
30:3b:24:5e:56:33:97:ed:a0:f9:24:54:40:44:f8:
19:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:76:AA:72:45:62:0C:CA:94:15:EB:04:74:73:55:97:C4:01:DF:CE
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145015.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a93d::/32
Signature Algorithm: sha256WithRSAEncryption
a7:de:71:e5:92:c0:f0:27:bf:2a:2f:33:8f:07:39:4c:79:ba:
07:c3:da:67:b3:0a:84:7d:04:e5:e7:07:08:6b:cb:9c:26:52:
6c:e7:e0:05:07:47:db:fe:1d:16:04:72:8e:fe:c1:cb:8c:3f:
9e:36:19:4d:28:28:8c:7b:f6:bd:3b:11:97:7e:b1:05:9d:4f:
c1:f3:4c:3e:4d:dd:b0:39:9d:49:ad:82:13:93:00:b3:06:47:
55:a1:56:d1:d6:47:ca:fd:26:57:19:d9:4c:85:76:f4:61:70:
43:6b:e2:71:d0:4a:e5:cd:d8:2c:2d:79:ba:7c:11:66:24:ba:
f5:03:a1:0f:34:34:24:0c:24:e2:fc:4f:fb:5b:c0:3c:f2:29:
c0:7c:62:b2:86:4c:7b:f3:5c:72:22:03:ed:15:8f:5e:bb:9e:
e7:fe:f6:db:25:76:3b:b4:80:f0:3c:13:71:73:34:63:cb:c9:
56:4b:35:af:d0:85:54:b5:d0:45:81:12:19:ff:c5:be:09:64:
dc:64:68:63:9b:93:6a:7f:dc:d9:b2:2c:9a:ed:5c:cf:9d:55:
57:a7:ff:ef:f9:a8:b6:b4:2f:d0:e7:7b:52:74:5a:5b:34:d7:
b0:00:5a:f3:75:d2:47:25:49:41:2d:87:30:dc:ae:31:45:84:
b9:c0:ef:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:49 2026 by rpki-client