Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145065.roa
File: AS145065.roa (raw, json)
Hash identifier: a9UMGoE1BXusyLIbBvncpIdDjKvnD3KwIXvU5GLvi/0=
Subject key identifier: 4F:21:83:D3:F2:13:4B:71:F7:2A:20:9E:D7:CA:A3:38:6F:2C:BD:93
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 18C41525EB33A10ABC8056B354E60FFFAB3A6189
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145065.roa
Signing time: Fri 22 May 2026 06:05:13 +0000
ROA not before: Fri 22 May 2026 06:00:13 +0000
ROA not after: Fri 21 May 2027 06:05:13 +0000
asID: 145065
IP address blocks: 240a:a96f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:c4:15:25:eb:33:a1:0a:bc:80:56:b3:54:e6:0f:ff:ab:3a:61:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:13 2026 GMT
Not After : May 21 06:05:13 2027 GMT
Subject: CN=4F2183D3F2134B71F72A209ED7CAA3386F2CBD93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:25:4e:37:cd:b7:04:e3:48:80:ec:f4:3c:bb:
39:87:35:60:f6:18:2e:b0:7d:66:81:82:67:a0:94:
d8:0f:33:33:f4:40:cd:7f:ff:9a:2b:22:39:78:ae:
57:b6:23:10:d0:3a:64:b6:52:59:63:93:73:35:41:
9b:e6:5c:9c:2c:e7:15:20:68:bd:cb:4c:de:e8:31:
70:df:de:5b:27:52:f6:e1:fb:0f:4e:c1:b0:32:32:
bd:ca:e5:aa:90:4d:5f:bd:b5:6f:1e:44:c5:62:ce:
b3:3f:76:7c:47:10:35:4a:70:f9:f8:7e:5a:44:aa:
af:6e:7a:f3:dc:a3:13:e4:81:c8:b8:f0:10:e3:be:
fd:71:bf:6b:cd:39:58:91:16:ff:d1:9b:2c:75:dd:
53:da:17:83:79:ab:5e:73:62:8a:87:d5:1a:ce:2c:
77:df:f2:5d:c9:02:75:c0:e1:07:35:d9:c1:a3:a6:
ce:6c:38:83:d7:3f:66:e0:d9:7d:47:31:04:fe:83:
4b:53:e0:b8:35:fc:66:16:80:5b:47:2f:ab:0f:4a:
eb:a2:68:26:c1:1c:b0:f3:90:c9:bb:fb:05:00:f7:
61:66:e4:e0:82:12:45:28:32:f7:e6:d9:34:c9:56:
3d:d9:41:bb:d5:db:d7:66:09:d0:b1:81:5f:aa:6c:
73:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:21:83:D3:F2:13:4B:71:F7:2A:20:9E:D7:CA:A3:38:6F:2C:BD:93
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145065.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a96f::/32
Signature Algorithm: sha256WithRSAEncryption
98:fd:f7:f8:8e:2f:7b:8e:c4:29:98:6b:e4:13:e3:03:29:49:
a8:19:c8:e5:6e:13:8d:f6:0a:54:7d:2c:2e:43:d4:9d:fc:0e:
d2:1d:23:99:be:05:de:7c:53:5f:29:4c:95:e6:31:50:88:1f:
06:41:36:66:1b:29:67:ec:7d:cb:0a:da:6e:f1:25:b4:75:a7:
4e:5a:87:aa:f3:2b:15:ab:01:44:7e:85:07:96:a7:96:d2:1e:
e3:98:d9:a7:4f:ea:03:8c:4d:2d:fc:b6:9c:82:de:e8:47:71:
ec:91:6b:f2:8f:e8:5a:ee:42:dd:82:36:ed:34:3d:2a:24:af:
9a:8b:6e:af:73:10:f6:40:70:d7:29:11:d6:14:bb:f2:b0:1c:
1a:a7:57:9f:a9:16:33:b3:ce:e6:65:12:10:e9:94:6b:0a:32:
b1:24:23:67:fd:63:d9:32:54:1a:c3:22:e4:54:81:c4:42:29:
16:4b:5b:59:6c:52:b3:8b:df:65:a5:2b:e9:ce:0f:8c:f8:c0:
37:cc:6c:4c:21:47:86:80:a3:40:56:6a:58:20:1c:4d:99:1a:
22:2b:50:2a:41:59:a6:76:96:0f:1f:dd:85:8a:8e:98:3f:d4:
06:1e:d4:98:3d:7e:da:86:cf:b9:fc:c3:82:ed:81:0d:ea:b2:
7d:b9:4c:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:39 2026 by rpki-client