Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145038.roa
File: AS145038.roa (raw, json)
Hash identifier: LCzqxTkHsO/2MT7QLMRwcAhg+PVSZC/f8a13d28Z7Qc=
Subject key identifier: 20:70:9B:97:7F:91:96:E2:B6:C6:14:62:AA:7F:EF:CC:93:4E:5A:32
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 01F4599CDF6832ABF9328D5869F9D49FE37F95D7
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145038.roa
Signing time: Fri 22 May 2026 06:58:46 +0000
ROA not before: Fri 22 May 2026 06:53:46 +0000
ROA not after: Fri 21 May 2027 06:58:46 +0000
asID: 145038
IP address blocks: 240a:a954::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:f4:59:9c:df:68:32:ab:f9:32:8d:58:69:f9:d4:9f:e3:7f:95:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:46 2026 GMT
Not After : May 21 06:58:46 2027 GMT
Subject: CN=20709B977F9196E2B6C61462AA7FEFCC934E5A32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c3:72:b3:e4:96:53:28:53:a7:35:55:4b:01:
89:cc:78:c9:2c:7b:91:09:a7:53:f7:b2:cd:d2:6e:
2c:f6:89:39:c8:21:6d:8e:00:28:17:8a:e9:cc:24:
de:cc:f3:2a:ce:49:b6:8e:ba:cd:b2:14:ed:d0:17:
dd:5c:fb:92:19:a2:95:e8:9e:c5:ec:4b:b6:39:29:
5c:8f:fc:be:92:0d:68:dd:16:0d:5b:ea:7d:d7:60:
e8:cf:d9:8a:72:78:09:6a:4b:d9:44:ba:cc:cb:26:
15:3f:99:49:a5:30:15:84:45:e2:1b:99:be:5a:8c:
4e:b0:f3:e7:1c:d4:b3:85:de:55:de:8c:8c:0e:5d:
4b:39:57:a0:f7:e5:79:34:11:f8:e3:6b:ca:a3:96:
d8:08:d1:7d:74:ca:77:97:25:44:ab:7e:d5:ae:98:
e0:2b:0d:3e:7b:41:d2:2b:c2:a5:30:ca:02:1f:b2:
c5:d1:1c:8f:5f:c9:b8:6f:59:29:d3:43:80:d6:25:
01:5d:24:94:c5:63:5f:3e:3c:df:87:90:0e:62:19:
d1:7a:b1:23:4a:64:d2:6d:7b:a3:c4:bf:88:05:ca:
7b:f3:da:6f:74:14:5c:0c:f2:2b:0e:30:c0:61:64:
b4:ee:ef:68:51:f2:96:28:ce:18:88:c6:c7:eb:90:
07:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:70:9B:97:7F:91:96:E2:B6:C6:14:62:AA:7F:EF:CC:93:4E:5A:32
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145038.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a954::/32
Signature Algorithm: sha256WithRSAEncryption
a6:d6:59:39:04:24:c5:44:58:f4:45:9f:b6:00:25:33:d2:55:
7c:34:40:9f:6a:57:84:af:fe:fe:c8:21:46:fc:48:50:a2:de:
ea:dd:73:11:e0:c9:7b:92:1a:f4:61:23:9b:78:89:1e:d2:da:
3b:b8:ad:51:82:43:ef:b7:0a:ea:9e:5c:38:3c:73:dd:dc:20:
6d:8d:d6:d6:4d:cf:6a:03:06:e9:1f:f5:ee:ab:73:6e:26:b1:
fc:a6:53:f4:78:e2:93:fc:99:50:d3:42:34:76:a3:07:1a:1a:
1f:d0:f9:5a:f6:7e:2c:39:72:8c:74:eb:76:1d:85:a7:70:a3:
7b:a7:37:b1:ef:5a:a0:ee:ab:fe:16:29:91:2e:e3:0d:f7:c0:
d5:4d:e4:6a:51:5f:e0:b0:5f:d9:15:b0:66:53:fe:71:d7:56:
8b:fa:1d:f7:68:a2:5a:1b:7c:8c:01:01:a3:87:aa:82:25:31:
31:b1:9a:fb:80:e3:8d:7b:e0:88:85:4e:f7:92:f5:23:55:19:
7c:4e:8d:59:ab:63:f6:f6:6a:10:2a:12:3c:0b:5d:1a:61:de:
3e:5c:46:32:d9:50:d9:63:09:11:dd:c0:fa:06:ed:76:fe:3d:
d3:aa:f5:31:fc:4d:95:5f:fa:88:0e:f0:10:64:a1:59:c2:c0:
7b:8d:d3:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:57 2026 by rpki-client