Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145064.roa
File: AS145064.roa (raw, json)
Hash identifier: 88ZXIqhJ1GXSLGTBwQDwrJ5Zn/XWH/m1v5MMpbh9dI8=
Subject key identifier: 1D:18:CD:10:8A:DA:F3:B4:6B:64:17:2E:9E:DD:A3:11:FA:11:7A:5C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4997070EC71C2D06D29E459666E1E96B7BC98233
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145064.roa
Signing time: Tue 26 May 2026 03:16:39 +0000
ROA not before: Tue 26 May 2026 03:11:39 +0000
ROA not after: Tue 25 May 2027 03:16:39 +0000
asID: 145064
IP address blocks: 240a:a96e::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:97:07:0e:c7:1c:2d:06:d2:9e:45:96:66:e1:e9:6b:7b:c9:82:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:11:39 2026 GMT
Not After : May 25 03:16:39 2027 GMT
Subject: CN=1D18CD108ADAF3B46B64172E9EDDA311FA117A5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ff:b7:34:6c:74:a4:f5:87:0f:e1:00:b6:92:
47:76:ee:fb:9b:e8:d0:83:67:37:ac:01:55:69:fb:
31:da:1b:ff:cc:86:c9:9b:15:0c:bc:2f:45:dc:5f:
1e:e6:a2:97:2f:bf:2f:a4:d3:13:36:fc:1d:af:df:
3f:c2:f2:dc:7d:2f:ed:7e:04:cf:4a:72:4d:e1:35:
99:d5:59:9d:95:ae:8a:57:32:78:05:73:98:e6:5b:
99:5c:43:72:b7:bc:63:f9:38:53:a2:8c:4b:1d:2e:
70:b6:37:aa:c1:96:ef:05:ca:36:28:df:90:9b:d0:
23:4f:32:41:ad:83:41:f3:31:29:1e:aa:a3:88:b8:
1c:a6:50:e5:ee:2d:42:8c:ec:56:4a:fc:71:03:63:
c7:70:21:42:50:c8:ed:47:6e:61:fb:f2:90:a7:7e:
e6:cf:01:be:25:72:ca:8e:c4:aa:16:b5:06:c5:8b:
c2:07:09:21:e5:1b:9e:af:85:77:73:21:96:58:d6:
60:7d:e3:99:ab:b1:87:d4:ee:e3:4f:cf:3d:98:3f:
73:a7:be:6b:92:47:10:0d:0e:fd:2d:de:21:e7:94:
5e:32:2a:0a:bc:6f:48:df:bf:ef:d4:02:c2:46:a2:
70:b6:39:1d:ad:90:a3:5e:9f:c1:e9:3e:ab:95:57:
05:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:18:CD:10:8A:DA:F3:B4:6B:64:17:2E:9E:DD:A3:11:FA:11:7A:5C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145064.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a96e::/32
Signature Algorithm: sha256WithRSAEncryption
85:05:0c:2f:99:de:13:a2:36:4b:7f:29:48:be:a4:11:fb:ca:
e6:bc:3b:7b:2e:35:b8:f4:52:eb:27:1d:c8:d3:28:ed:d9:0c:
92:37:95:8a:d6:7d:e6:2d:84:63:e0:bd:51:35:81:b9:80:79:
bc:9c:50:92:c0:29:dc:56:71:ce:21:63:0f:c8:fa:93:eb:e7:
a9:81:5b:4e:2c:b3:27:32:54:41:9f:c5:32:52:47:40:5a:24:
cf:f5:06:84:04:53:b8:b0:c1:2f:08:c3:d4:d5:fa:f3:29:bb:
59:8c:81:5a:ac:c0:04:e5:4c:5a:54:c5:8b:db:27:d7:d4:e2:
7c:8c:bb:c1:05:dd:06:4b:93:e2:03:c7:56:90:45:07:48:13:
a1:0c:51:3d:05:cb:2c:ae:27:20:f5:6e:59:0f:7b:3f:40:84:
9d:c7:ae:7a:ca:5a:04:c8:c7:c1:f4:53:53:ec:28:bb:0c:bf:
37:4e:a2:6d:91:53:f1:24:b1:14:8d:02:15:6c:40:90:f5:ae:
bc:f3:0d:eb:f7:0c:2e:41:63:13:d5:98:3c:91:44:e2:3f:81:
14:dc:e3:79:9f:4a:78:3f:b2:ce:a5:75:99:80:46:b3:61:6d:
a7:05:44:4d:2e:c9:1c:8d:13:5a:78:fe:06:f8:22:bd:0c:1c:
ee:c6:c6:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:13 2026 by rpki-client