Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145049.roa
File: AS145049.roa (raw, json)
Hash identifier: fMOYZkB8NuMNvuCEUsNsL9I61TzgrW+aBSJBvKn+YxY=
Subject key identifier: 76:D9:73:ED:0C:96:45:35:CC:0E:26:BE:DE:5A:DD:FE:2C:9D:1F:FD
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 79ABCEE147ACD43564D8BB60BBB4B548449C0D8C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145049.roa
Signing time: Fri 22 May 2026 04:26:43 +0000
ROA not before: Fri 22 May 2026 04:21:43 +0000
ROA not after: Fri 21 May 2027 04:26:43 +0000
asID: 145049
IP address blocks: 240a:a95f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:ab:ce:e1:47:ac:d4:35:64:d8:bb:60:bb:b4:b5:48:44:9c:0d:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:21:43 2026 GMT
Not After : May 21 04:26:43 2027 GMT
Subject: CN=76D973ED0C964535CC0E26BEDE5ADDFE2C9D1FFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:32:47:79:b0:0d:2f:7f:3e:18:ae:0d:24:2d:
54:76:6c:38:c5:08:99:6d:0e:d9:84:05:61:1f:00:
f1:d3:8c:92:04:c2:ed:32:08:29:f0:2b:c6:f1:20:
20:dd:e0:27:6f:1d:38:ce:36:ac:69:d7:81:24:08:
4b:bc:06:74:66:97:37:15:53:40:83:fd:d9:0b:8a:
0c:b9:e5:4a:87:a0:77:c2:78:27:64:7f:f6:53:ef:
8e:e9:fa:d0:39:2b:d2:b1:77:4b:a1:29:6d:56:43:
69:f1:df:aa:8b:17:f0:87:22:12:7e:92:ce:de:d3:
49:8d:e0:f8:77:a6:47:80:39:ea:aa:a2:a1:18:99:
53:37:82:c4:44:cf:26:c0:31:03:ce:d1:2c:6d:fa:
ef:6a:50:7f:74:88:d9:bc:ad:5b:2e:0a:eb:9a:e0:
56:fe:18:4d:df:19:d6:42:62:04:d0:0c:51:5d:c8:
c6:f6:fc:8d:fe:dd:95:4e:28:8f:1e:52:e9:72:5c:
cb:02:0d:c1:a0:de:81:27:80:6f:e5:fa:39:c9:33:
25:34:80:f0:62:c8:31:e2:5f:24:2a:e3:33:25:3e:
73:86:70:ae:b8:c2:75:00:bb:b1:37:65:98:6a:5d:
54:b7:bf:78:23:3a:e7:fd:65:c5:b5:94:5a:04:57:
a2:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:D9:73:ED:0C:96:45:35:CC:0E:26:BE:DE:5A:DD:FE:2C:9D:1F:FD
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145049.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a95f::/32
Signature Algorithm: sha256WithRSAEncryption
90:0a:82:09:64:15:b6:a4:29:28:fb:72:a2:36:e9:19:a3:bf:
25:08:a8:09:12:8d:09:ae:b2:7e:b9:a7:1b:df:e1:b9:3a:94:
50:64:da:56:88:4f:7a:32:ed:e1:65:ef:27:b4:07:db:11:22:
b3:f4:f7:0b:cb:7a:39:25:b1:cf:0d:c9:36:50:e6:c1:b2:98:
50:50:33:f4:63:20:c2:c2:b0:e4:45:b8:35:6d:b1:b8:3a:a7:
49:f3:00:fe:f8:9d:8a:ca:0c:23:20:3e:fd:ee:84:3c:b1:cd:
0f:fb:60:01:a0:07:db:c8:d2:4d:b1:30:ee:2f:6c:0a:9c:68:
46:05:56:45:4c:07:b8:a1:eb:60:65:3d:2b:ae:d7:40:e6:ae:
1c:f4:b3:ff:1b:df:3b:9a:9a:59:12:37:b7:0c:a4:46:d0:25:
84:89:7b:95:48:fa:62:60:a1:1f:07:6d:2f:af:b4:33:8d:66:
35:02:27:ce:72:0a:60:4f:c3:5e:9c:8f:df:e7:16:d5:82:51:
e4:c6:f9:00:fe:4d:b4:12:ea:51:b1:de:85:e2:54:38:80:8a:
e2:ad:aa:a8:a6:b0:fc:fc:e5:4e:62:22:80:46:69:e2:78:6e:
ba:25:df:c7:56:ff:71:7c:e9:4c:a2:6f:a3:89:b7:3c:a7:42:
ad:c3:65:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:55 2026 by rpki-client