Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145069.roa
File: AS145069.roa (raw, json)
Hash identifier: m2TIWpE299x8bzYXLx/hrBm4AQUW/5WgawZFqPozOxY=
Subject key identifier: 07:26:A4:61:63:E4:27:A7:B3:55:77:B6:3B:DA:C0:B6:84:51:55:A4
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 37DA06E679D082050E5BD1581A5B0BDBDB66093A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145069.roa
Signing time: Fri 22 May 2026 04:07:52 +0000
ROA not before: Fri 22 May 2026 04:02:52 +0000
ROA not after: Fri 21 May 2027 04:07:52 +0000
asID: 145069
IP address blocks: 240a:a973::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:da:06:e6:79:d0:82:05:0e:5b:d1:58:1a:5b:0b:db:db:66:09:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:02:52 2026 GMT
Not After : May 21 04:07:52 2027 GMT
Subject: CN=0726A46163E427A7B35577B63BDAC0B6845155A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:86:e6:ef:fe:71:7d:8a:06:2f:2c:b7:d1:61:
1d:6b:31:33:61:c8:f9:09:a1:d2:19:0a:94:e3:bf:
3f:b2:3c:a9:79:0e:17:8c:6e:78:d4:de:92:b0:23:
43:94:56:91:8a:e8:25:d1:74:cd:21:8e:55:24:c8:
1c:2c:6c:20:d2:47:96:72:5a:14:47:80:50:b3:2a:
8e:7d:2e:ce:95:82:2c:6b:04:ba:2c:79:00:ef:da:
30:95:70:58:ee:c7:f5:f2:37:0c:4a:ad:3b:5a:ca:
dd:c6:cc:e5:1b:39:58:76:cc:6b:72:19:07:27:78:
85:2b:99:69:59:2b:df:13:82:26:41:99:55:3f:c8:
14:4a:a0:3f:5e:d6:0a:43:da:0f:c4:ac:87:b2:98:
49:8c:1e:4e:3f:67:b6:17:55:56:b8:8d:66:3e:b6:
5b:29:64:b5:d7:c8:77:53:d2:b1:e0:a3:6d:3e:a1:
51:6e:dd:65:5c:90:e8:57:e9:35:1c:79:c9:bb:5a:
41:a7:e6:2a:ec:60:77:48:fa:b2:68:ef:dc:4c:5e:
cc:a9:5d:c8:a2:d9:07:b6:a9:4e:22:d0:b0:7b:07:
3a:cb:18:85:20:29:57:12:bd:05:4e:42:fd:80:80:
6b:4c:67:0d:e0:35:05:60:2b:25:4e:59:eb:dc:40:
9a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:26:A4:61:63:E4:27:A7:B3:55:77:B6:3B:DA:C0:B6:84:51:55:A4
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145069.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a973::/32
Signature Algorithm: sha256WithRSAEncryption
30:6f:f0:13:fe:f5:4a:16:d6:de:bc:47:11:ac:96:34:64:6d:
a4:ca:80:b5:9f:a9:d6:d2:c7:78:47:e1:75:98:a1:b0:0f:cd:
f4:6a:54:0d:00:ac:8f:a1:6e:9d:28:b1:d6:5d:17:a8:12:91:
1c:75:03:ad:e3:79:53:70:98:3c:12:95:f7:04:4e:22:2a:70:
5d:04:53:db:95:20:77:b5:ba:98:e7:a9:27:04:35:8e:88:9b:
a6:07:36:9c:da:6c:78:3b:0a:f3:30:15:88:11:f7:ea:6c:a2:
b0:39:f2:2b:3c:1d:9c:0d:3d:6b:9c:bf:b4:48:4e:e7:e3:78:
cf:25:5c:94:22:5c:47:cc:79:3b:58:7b:57:e4:0b:65:00:0f:
02:18:37:77:a3:34:25:60:d5:18:17:7d:05:9d:31:77:44:e3:
cf:0d:14:bf:a3:7f:c9:26:54:3c:ed:78:35:63:46:96:fe:07:
89:56:08:6c:59:a8:a3:36:07:fe:a8:9d:c7:ae:7a:0d:4d:ac:
11:c2:8b:e7:64:b4:0d:d0:51:44:02:6c:de:99:95:77:7f:dc:
45:2e:a7:2c:07:fd:96:be:70:16:11:ba:01:f3:a6:85:51:d2:
50:5a:57:96:71:ef:83:6a:ab:d4:fa:91:86:3c:1c:48:cb:e3:
1d:8d:a7:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:23 2026 by rpki-client