Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145071.roa
File: AS145071.roa (raw, json)
Hash identifier: q5PLUoBtdilif1GuMHY9HplYn3PbbO/wB2VF+2N7huU=
Subject key identifier: 4E:2A:C4:1E:04:2E:5C:33:C9:D3:BC:A9:A7:9C:9A:4C:A2:2C:9B:E8
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 38DB53A9E651AE11E3C30B8A27F1C4B5C779BF2B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145071.roa
Signing time: Fri 22 May 2026 01:50:25 +0000
ROA not before: Fri 22 May 2026 01:45:25 +0000
ROA not after: Fri 21 May 2027 01:50:25 +0000
asID: 145071
IP address blocks: 240a:a975::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:db:53:a9:e6:51:ae:11:e3:c3:0b:8a:27:f1:c4:b5:c7:79:bf:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:25 2026 GMT
Not After : May 21 01:50:25 2027 GMT
Subject: CN=4E2AC41E042E5C33C9D3BCA9A79C9A4CA22C9BE8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:76:8f:79:43:b9:2f:a8:94:11:87:58:af:e9:
7a:02:8a:99:12:b0:3d:66:a8:f9:20:bd:d1:74:ae:
7c:66:a9:85:9b:75:a1:a3:c7:39:67:97:e3:19:d6:
90:25:cf:d0:57:fc:a9:91:32:45:d5:f1:21:5a:d0:
5e:9d:e6:b9:bc:99:30:ac:a0:10:14:2a:ab:a8:69:
cd:05:90:aa:bf:c0:cb:ff:e7:e6:59:b5:00:53:2d:
fa:8e:b2:ab:90:88:bd:13:bd:38:c0:d5:d3:ad:22:
f1:c2:d2:2f:03:9e:b4:98:6f:b3:66:5b:8f:66:32:
e7:cf:3d:ee:c4:75:2b:fd:0a:34:9d:40:85:f4:79:
96:55:b5:0f:6a:15:df:2e:d0:2c:d0:55:a1:01:94:
a8:07:80:bb:92:ca:7d:04:26:02:50:21:bc:b9:dc:
60:20:7a:62:24:be:b5:52:ef:99:2e:6c:15:2b:6d:
40:ea:f4:c3:99:c2:6a:d1:45:28:24:3f:9d:38:64:
4d:be:95:45:9b:4b:4a:27:e4:34:cf:2c:73:3c:f7:
33:03:ff:b9:a6:43:2d:f6:7a:26:bf:6a:97:17:94:
ab:20:97:90:8d:c5:6f:56:95:79:6d:1a:c6:83:d2:
42:48:57:31:59:53:43:2d:cb:8e:1b:28:ad:b4:d2:
ae:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:2A:C4:1E:04:2E:5C:33:C9:D3:BC:A9:A7:9C:9A:4C:A2:2C:9B:E8
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145071.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a975::/32
Signature Algorithm: sha256WithRSAEncryption
41:4f:e8:1e:94:a7:5e:7f:2e:84:8b:83:94:58:e2:72:ed:1d:
fc:8c:1e:ea:72:8f:65:7b:4c:74:18:d0:95:44:7c:50:ae:00:
f5:8b:1a:a5:e2:a9:94:0b:e9:b0:92:13:c4:14:36:e7:61:65:
31:3a:9d:2a:bb:00:3f:ba:5d:2a:70:d9:21:63:8b:aa:fa:64:
38:2d:79:b3:90:c4:0e:e1:53:c3:51:b9:ba:10:5d:0b:ea:c5:
58:29:95:01:ca:67:d7:80:39:1d:53:5d:3d:27:7b:af:57:2c:
dc:13:8e:62:c7:2d:d0:34:2d:ae:19:7a:57:0b:e8:ca:89:e8:
fd:2f:94:87:1a:22:a1:37:78:16:60:39:9e:7b:c2:1f:81:f7:
b7:65:dc:e2:3b:cc:a5:8b:ab:0c:f1:32:db:96:02:d4:f5:63:
2c:0b:eb:ff:3a:d0:e0:33:5e:27:cb:da:0c:46:50:9b:68:1a:
7e:a7:36:3f:0c:5b:58:14:15:3d:9c:57:58:a7:a0:3f:60:d1:
41:46:35:97:04:14:0a:ad:67:cd:59:da:d1:4f:08:53:60:07:
a9:2c:5d:39:53:28:70:ee:d9:e7:4f:d8:6c:5d:eb:22:c6:9b:
ec:55:e1:d6:de:2b:2a:bd:b9:a2:61:35:b1:8f:62:09:bb:3d:
85:b4:8f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:08 2026 by rpki-client