Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145055.roa
File: AS145055.roa (raw, json)
Hash identifier: rDq3nEJYim0e/+e2lkS7HHHeWB3CigEAkEhzLZvtlI8=
Subject key identifier: A9:10:D7:36:79:BD:A9:7A:CB:E7:77:D7:B2:F7:8B:88:3C:F2:05:B7
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3510EDFF6EBCFBBAC7A8EE087956C94BD87173EF
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145055.roa
Signing time: Tue 26 May 2026 06:31:02 +0000
ROA not before: Tue 26 May 2026 06:26:02 +0000
ROA not after: Tue 25 May 2027 06:31:02 +0000
asID: 145055
IP address blocks: 240a:a965::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:10:ed:ff:6e:bc:fb:ba:c7:a8:ee:08:79:56:c9:4b:d8:71:73:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:26:02 2026 GMT
Not After : May 25 06:31:02 2027 GMT
Subject: CN=A910D73679BDA97ACBE777D7B2F78B883CF205B7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5b:35:98:60:1d:a4:60:4e:8f:bd:ba:6b:5d:
4a:35:75:fa:93:2e:01:3c:41:9b:8b:42:dc:d8:73:
4f:fb:32:c7:76:cf:d5:5b:6b:e8:b9:dc:d7:65:19:
01:79:50:1e:90:62:80:fe:12:16:eb:2b:4b:a5:b5:
62:6f:68:40:8a:45:ba:da:4d:89:52:2a:c6:83:10:
56:a2:b7:57:21:d5:e3:74:d8:62:8a:41:ec:c8:40:
1c:5c:13:50:e3:83:86:73:cf:33:4d:48:08:be:a3:
93:b8:53:4c:28:70:27:a0:ee:5c:05:20:2e:10:a8:
51:8e:b0:ae:48:97:df:16:6c:fe:4c:c0:e2:b5:ee:
45:6c:c3:2a:85:44:9b:56:4d:30:2b:9f:36:b0:50:
65:1a:56:3f:6c:05:5d:ed:29:ae:1b:67:6e:f5:76:
a0:66:8b:cf:aa:67:d1:78:50:74:7a:20:15:8d:27:
49:94:9c:e0:f9:50:2d:2e:f5:90:94:f7:c6:95:f9:
0c:06:42:44:98:05:be:cb:8d:36:99:6c:f9:0d:69:
fe:c5:ac:56:65:03:6f:c9:d6:eb:22:bb:0c:cf:a0:
ce:54:ea:98:2f:ea:f5:29:8d:2c:4b:46:c1:bd:f4:
82:6a:52:d9:79:bd:b2:04:ea:1c:41:7b:89:4c:3b:
56:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:10:D7:36:79:BD:A9:7A:CB:E7:77:D7:B2:F7:8B:88:3C:F2:05:B7
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145055.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a965::/32
Signature Algorithm: sha256WithRSAEncryption
7a:09:9a:f2:a4:5e:b5:92:2b:e8:9a:56:cd:84:c4:20:24:58:
56:35:dd:ce:28:0b:96:5a:30:77:5c:ac:42:ac:ba:b9:80:f7:
c8:1f:e6:c1:35:12:25:55:ec:65:6a:35:46:83:67:97:65:7b:
7b:3f:e6:3f:39:75:e9:2c:64:d4:b5:e9:c7:e1:d0:d1:8c:c3:
f2:6a:7f:8a:f6:4b:9d:b1:52:07:fe:08:d1:cf:68:6a:45:d4:
b3:28:2d:1e:10:80:2e:e5:3d:29:84:9f:d9:6a:85:de:d9:12:
48:c8:bb:78:0c:3e:1f:fa:6a:91:f7:52:4f:87:ca:42:5a:67:
eb:d0:dc:13:5f:93:a6:d6:ae:de:59:cc:41:0c:8c:15:56:ee:
7d:53:ce:b7:72:03:30:21:be:fd:7c:ef:40:2b:1c:bf:61:a0:
fc:b6:0e:78:0f:2e:c2:fe:c7:4d:ca:b2:ad:75:64:9d:d3:87:
80:f3:af:1e:0e:c0:9a:57:7d:40:84:1f:e3:4a:3e:25:b8:4a:
3a:42:63:b4:37:33:c7:f3:2c:c4:3b:33:d8:ba:50:c5:4b:34:
4e:51:49:de:9d:9c:a8:9f:28:be:65:e5:49:17:90:35:a7:6e:
3a:ee:7e:d5:e9:fc:2c:6e:8a:e5:1e:5d:fb:27:6d:bd:e9:73:
17:19:20:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:34 2026 by rpki-client