Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145019.roa
File: AS145019.roa (raw, json)
Hash identifier: DBLbHXWk2ZB+qoaUZW0T8562Ms+UWUDG8yyJBtwdPJI=
Subject key identifier: 39:E8:CC:E3:B4:E4:5C:E2:97:4E:32:12:31:66:9C:62:EB:E5:90:38
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 24664D1452DA83F05E5062496429144C0F8F7D42
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145019.roa
Signing time: Mon 25 May 2026 06:49:05 +0000
ROA not before: Mon 25 May 2026 06:44:05 +0000
ROA not after: Mon 24 May 2027 06:49:05 +0000
asID: 145019
IP address blocks: 240a:a941::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:66:4d:14:52:da:83:f0:5e:50:62:49:64:29:14:4c:0f:8f:7d:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:44:05 2026 GMT
Not After : May 24 06:49:05 2027 GMT
Subject: CN=39E8CCE3B4E45CE2974E321231669C62EBE59038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:8a:3c:ac:3b:34:cf:23:73:fa:46:a7:b4:36:
61:60:61:2c:2f:79:36:16:46:0b:04:57:f2:da:4e:
7f:42:c7:8e:16:04:b6:c5:75:5a:5a:64:a0:b4:f9:
90:c1:5d:1c:bc:7e:86:37:d6:fb:64:06:62:4a:23:
4f:92:81:80:10:bf:a4:9a:8f:44:c6:63:cd:0e:9a:
ea:d8:b0:a8:2a:6e:5b:02:5a:5d:6e:a8:3c:06:59:
4c:41:27:7b:22:0a:6d:03:81:3a:b7:02:38:8c:6f:
bd:07:f9:0a:89:f3:36:ee:d1:39:de:e5:71:cb:c8:
88:7d:6b:00:95:6e:e5:41:73:9e:17:e1:8f:1c:2f:
10:3a:72:14:40:a0:1e:a5:2b:85:0e:c3:e6:72:01:
c9:c1:1e:e8:cd:5e:f8:d7:2a:f1:3e:6f:a4:29:6c:
3a:65:0f:7c:da:13:cc:b8:9b:e0:09:06:ed:ab:6e:
68:c0:a4:ad:b5:db:0f:66:72:97:18:fe:ed:d8:64:
73:91:d6:1c:02:de:18:91:4c:6b:74:1a:1a:ac:f9:
5b:c5:7b:08:f8:e7:f1:03:df:60:2e:97:f7:00:3f:
17:fa:20:f2:d7:57:56:36:a2:d5:ef:1b:61:ed:23:
19:de:a1:a1:90:d8:1a:4e:1b:5a:72:87:bb:8d:fb:
44:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:E8:CC:E3:B4:E4:5C:E2:97:4E:32:12:31:66:9C:62:EB:E5:90:38
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145019.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a941::/32
Signature Algorithm: sha256WithRSAEncryption
90:ce:de:1e:1f:ed:b6:00:5f:b3:68:f3:c7:8d:d0:97:9b:94:
6f:1e:8a:6c:79:60:17:53:6c:c5:15:77:71:28:78:a1:dc:6c:
60:c0:29:9e:14:c8:12:16:6c:90:07:ec:c9:e2:97:2e:f9:19:
a8:b6:45:dc:d7:63:46:f1:c1:a2:49:17:f8:9a:eb:6c:a7:ab:
ee:a4:85:af:a5:5d:d5:20:2b:54:35:d0:b9:66:18:30:c1:77:
c9:46:e9:1a:ef:3c:ce:87:f2:1d:cd:3b:65:4a:4c:80:ee:df:
42:7d:5f:ed:05:d8:95:af:05:f2:26:8e:48:ba:ac:67:e3:11:
fa:36:c6:38:89:ff:d3:23:7b:66:96:8e:06:89:dc:a2:99:bb:
36:38:e5:84:d6:62:da:d1:72:28:6b:8a:d7:37:a8:f7:33:6a:
32:ee:a1:4f:a0:91:cc:19:77:c4:4a:ce:f5:02:59:3a:6d:5a:
5e:ae:ad:3d:cd:83:3f:8c:df:0c:48:b7:31:f7:4d:02:01:83:
45:26:ed:53:74:e5:66:c7:0d:aa:ab:a6:10:b9:d7:43:92:fe:
a9:7e:7f:7c:d1:ce:da:71:d5:ce:4a:d3:8f:22:d2:c0:fd:cd:
77:5a:ad:ab:e9:7f:34:23:1c:d8:43:d5:ca:77:51:0d:a0:7c:
d6:69:52:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:49 2026 by rpki-client