Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145037.roa
File: AS145037.roa (raw, json)
Hash identifier: wx0r5sIigVOhN5dbCW8lR6BwHmuVONdPspA2vQVHZ3o=
Subject key identifier: 41:89:82:02:DC:A8:E0:86:F4:BB:30:C1:4C:64:EB:37:98:6D:7A:76
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0A392C7B46991B73AAD593A2B8FE28B357A770E5
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145037.roa
Signing time: Fri 22 May 2026 07:24:56 +0000
ROA not before: Fri 22 May 2026 07:19:56 +0000
ROA not after: Fri 21 May 2027 07:24:56 +0000
asID: 145037
IP address blocks: 240a:a953::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:39:2c:7b:46:99:1b:73:aa:d5:93:a2:b8:fe:28:b3:57:a7:70:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:19:56 2026 GMT
Not After : May 21 07:24:56 2027 GMT
Subject: CN=41898202DCA8E086F4BB30C14C64EB37986D7A76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:3f:b4:e5:f0:df:4f:44:87:38:2e:29:e7:05:
5f:04:61:4c:96:b4:ed:d8:e4:23:b8:51:f3:23:74:
bb:59:76:48:ce:b7:b2:45:8d:75:14:76:62:10:7f:
a7:db:b2:80:c0:a3:00:cc:4e:f6:fe:71:24:4e:89:
53:2a:25:09:fc:70:45:fe:80:f9:f5:77:67:58:93:
fc:8c:2c:70:9c:b1:f1:a9:f7:1f:9a:a1:eb:7e:b4:
4c:1c:73:88:42:73:b9:94:da:16:95:bb:e0:c0:e8:
60:4a:3a:7b:f1:7e:f7:ff:22:f4:24:f0:bd:5f:24:
3a:86:c4:92:25:52:e2:9f:e8:04:d1:a9:e2:a3:49:
10:0d:66:f8:4f:46:66:ad:8e:0a:c6:78:f4:98:4b:
a6:88:13:61:46:19:15:90:56:9e:2b:f5:2e:65:4c:
00:f1:85:69:0e:87:cd:9f:9d:2d:a6:6e:8c:37:c8:
15:2a:d1:77:a5:f3:98:12:ef:00:70:80:18:e3:10:
81:23:b1:8b:94:cd:39:23:0f:f4:13:93:e7:f2:24:
99:72:41:03:8a:11:da:56:b3:79:8a:33:3b:fd:24:
99:ec:35:73:82:e7:fd:a4:f9:da:7f:a8:32:da:11:
d1:55:6e:5e:5b:00:82:34:5d:d0:00:d8:34:4c:0e:
63:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:89:82:02:DC:A8:E0:86:F4:BB:30:C1:4C:64:EB:37:98:6D:7A:76
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a953::/32
Signature Algorithm: sha256WithRSAEncryption
47:1d:bc:c4:de:81:9a:95:40:8d:c9:39:f3:cc:82:19:3a:49:
a8:a9:6d:40:2e:e3:99:4a:1b:e8:ed:e9:a5:88:2b:cf:38:e9:
e7:4d:3f:c8:a2:5c:db:e0:8b:79:74:35:0a:5e:c3:78:9d:06:
c0:b5:96:df:51:be:36:42:15:01:ad:6a:42:bc:87:a7:e1:0c:
70:be:4d:01:81:2e:71:37:27:f0:8f:38:fb:8b:5f:a3:44:c1:
75:49:02:d5:25:4f:f0:85:32:05:69:de:0b:ae:5f:2e:3f:70:
a2:d3:00:93:4a:70:a3:c8:9f:fc:bb:1a:8b:a1:10:02:9e:35:
7e:13:5d:06:6c:5b:68:04:ef:b2:b9:64:57:f6:02:5c:9c:85:
cb:72:fc:da:65:1a:41:19:44:dd:9c:08:ab:bc:6c:26:a4:f2:
de:bb:07:84:14:52:76:ad:56:63:15:dc:63:0e:f9:bb:66:7f:
5c:b8:68:0a:0d:31:cb:ae:02:6b:d0:7d:0e:e5:64:9c:2f:97:
6e:f0:1a:7c:d6:6e:fa:de:17:4c:1f:7a:f0:2c:05:27:0f:6b:
45:df:9a:8c:6f:6c:1e:f2:e0:77:6d:99:53:12:f8:1b:68:13:
bd:c1:67:cb:0a:70:d6:4e:14:30:de:0f:00:0e:4d:1a:ec:d7:
32:30:55:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:12 2026 by rpki-client