Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145044.roa
File: AS145044.roa (raw, json)
Hash identifier: +Q6UlWFunpR32j++TEFum4oQL85zEz/l+UYd+F7rCj8=
Subject key identifier: 49:7A:B1:83:55:BA:E7:CA:42:2A:0E:28:24:57:C9:5B:5D:0D:6A:F5
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3856CACB2CB52B8806744E5289384DFEE118DD93
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145044.roa
Signing time: Mon 25 May 2026 06:28:47 +0000
ROA not before: Mon 25 May 2026 06:23:47 +0000
ROA not after: Mon 24 May 2027 06:28:47 +0000
asID: 145044
IP address blocks: 240a:a95a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:56:ca:cb:2c:b5:2b:88:06:74:4e:52:89:38:4d:fe:e1:18:dd:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:47 2026 GMT
Not After : May 24 06:28:47 2027 GMT
Subject: CN=497AB18355BAE7CA422A0E282457C95B5D0D6AF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ca:ff:1a:a6:32:e3:c3:e4:2e:f1:6f:96:a0:
61:69:6d:6a:f9:71:0f:5c:35:7f:09:9c:7d:e7:30:
81:41:04:38:32:95:5f:37:02:ea:c4:11:7d:e2:85:
39:b9:fd:67:3c:cb:34:17:44:7e:f7:71:ff:02:52:
55:6f:cc:ee:6d:30:9c:52:97:ce:e1:33:03:8a:e9:
13:00:43:12:26:31:9b:7a:0d:27:c5:19:09:8e:e8:
91:4b:75:f7:a4:0c:fd:05:86:a4:44:3d:81:54:7d:
00:c8:b7:10:29:b4:50:d7:4b:15:59:e0:70:ab:1d:
ae:a1:2f:e0:8b:b5:85:91:9e:ef:98:15:df:32:99:
dc:b9:9d:8d:96:4d:fa:8d:64:2c:16:6b:32:47:26:
69:5b:6c:87:00:8c:1c:b0:e3:7c:70:4c:13:69:0a:
f7:42:fa:6c:44:7e:68:7b:22:03:08:25:62:dc:00:
56:dc:4e:80:9e:e0:d2:c9:d8:0d:c7:b9:83:f2:eb:
50:47:b2:29:cb:66:24:02:bd:07:e9:55:f2:66:8a:
ea:f2:62:82:2f:c3:ad:34:97:54:cb:59:a4:55:6c:
6c:71:38:a7:0b:38:8a:fc:94:b1:ae:b5:f4:45:90:
b8:cf:08:f5:08:90:68:f5:a6:29:8b:1d:14:95:6d:
fb:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:7A:B1:83:55:BA:E7:CA:42:2A:0E:28:24:57:C9:5B:5D:0D:6A:F5
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145044.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a95a::/32
Signature Algorithm: sha256WithRSAEncryption
35:c0:9e:b2:fd:55:06:10:3e:ae:cd:0a:1a:0c:b2:d1:0d:cc:
7a:68:94:2e:c5:05:35:f7:b4:3c:38:5d:43:96:5a:56:73:5a:
8e:84:e4:53:e8:9f:04:1e:f4:a4:a0:cc:39:3e:b1:13:36:0f:
11:40:b5:76:c8:72:7e:37:d8:94:77:36:1d:a0:18:b6:f6:d9:
b8:ab:ba:ba:38:13:29:3d:d2:6c:74:a3:4f:f1:65:0b:f4:00:
f8:b0:9c:b4:49:fd:59:89:e9:39:67:e6:a2:0b:75:23:e2:e9:
19:ba:b3:87:7c:76:2e:ac:5a:0e:5d:56:b5:da:12:0f:87:30:
f4:d9:29:c7:6a:80:54:8e:9f:57:82:c1:42:58:4b:d5:c4:a8:
15:00:2d:f5:92:db:d0:4a:41:6b:f2:1e:2f:b8:2a:fb:5a:6b:
bb:0b:2e:4b:31:ab:28:b0:df:f6:df:13:22:89:8c:81:ac:ea:
af:71:bc:40:0e:a1:1f:d2:b0:8d:0d:fc:df:be:f8:7e:00:6b:
57:7b:af:a3:b5:24:44:cf:4d:ed:a5:b4:84:89:29:af:7e:2a:
cf:83:de:a1:01:4b:a5:50:01:b0:1a:65:1c:d2:4e:2d:e4:89:
b7:2e:c6:d3:5e:95:f1:46:39:00:85:77:4a:10:0a:da:3a:4b:
fd:a1:4b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:26 2026 by rpki-client