Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145073.roa
File: AS145073.roa (raw, json)
Hash identifier: bGxCk8QscMwL7SpXNnyeIcMsbRVsYXAIAoa2SNnjwZA=
Subject key identifier: CF:4F:64:81:7A:08:C8:45:E7:2D:AC:32:C4:CE:1E:78:B9:9A:66:2E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0E75A9A918937E21532EDE2329D91155A0D2FD36
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145073.roa
Signing time: Fri 22 May 2026 07:24:27 +0000
ROA not before: Fri 22 May 2026 07:19:27 +0000
ROA not after: Fri 21 May 2027 07:24:27 +0000
asID: 145073
IP address blocks: 240a:a977::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:75:a9:a9:18:93:7e:21:53:2e:de:23:29:d9:11:55:a0:d2:fd:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:19:27 2026 GMT
Not After : May 21 07:24:27 2027 GMT
Subject: CN=CF4F64817A08C845E72DAC32C4CE1E78B99A662E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6a:db:22:0a:dd:d6:e0:50:6d:b2:c0:dc:bf:
e8:50:c4:65:29:8e:22:1e:10:01:df:c5:dd:45:f6:
f9:31:22:71:2a:b4:12:84:40:67:10:e8:92:02:cc:
83:56:51:82:a7:62:f8:b0:7d:4c:a8:63:4f:71:20:
8b:e9:e9:df:ed:3b:29:c8:ae:ce:4a:49:48:45:70:
ec:7c:71:8d:9c:90:4d:99:c8:36:1c:0c:03:21:4c:
77:e4:1a:12:a9:39:7e:55:da:9a:be:5f:b0:88:a2:
f9:f7:90:31:52:84:f4:af:15:45:86:27:f2:c5:51:
86:02:94:0b:c9:27:85:cd:b9:4b:a9:13:0a:80:45:
2d:c9:4a:18:77:1e:fd:0a:8c:34:d8:c4:df:03:66:
03:6f:4e:1a:a4:2f:20:ad:17:05:09:c9:fe:d3:8f:
1e:04:51:0a:1e:c7:ee:7b:e6:1e:59:67:4b:3f:72:
e9:f5:54:bc:20:bc:7e:05:c1:b7:dd:99:ce:5d:98:
02:fe:08:44:88:2c:8f:99:d8:c6:4c:58:54:2b:fd:
15:a5:28:8d:2e:e7:d5:1c:f0:b9:e5:c4:74:f2:50:
14:8b:cf:e1:77:40:56:81:fe:68:1f:c2:bc:cf:5f:
b9:ba:38:73:34:8e:18:c9:79:24:9a:dc:40:78:62:
34:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:4F:64:81:7A:08:C8:45:E7:2D:AC:32:C4:CE:1E:78:B9:9A:66:2E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145073.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a977::/32
Signature Algorithm: sha256WithRSAEncryption
7e:da:15:a9:1d:8c:7c:f3:ca:92:34:0e:fc:43:d0:e1:53:82:
53:64:69:90:18:67:d0:e7:36:12:36:41:5b:6a:13:10:41:c9:
9e:36:0c:4d:b0:a8:89:5f:e7:1c:41:95:7d:02:57:c5:21:af:
30:a3:dc:11:f4:03:78:ec:a7:7f:3a:60:56:a4:a9:66:84:a5:
e5:9d:9f:58:c0:2d:0e:2d:9b:a1:3c:b8:b5:15:63:45:3a:6f:
3b:16:e0:13:8f:9a:b4:b5:08:79:55:7b:b4:6e:c7:c2:34:39:
fa:04:10:44:f2:d5:b7:82:0d:77:db:8f:9e:08:d5:a5:9e:8a:
3b:4b:86:12:73:7b:be:d8:08:bb:d9:11:21:1f:95:69:14:6d:
d8:2b:b6:a4:0d:aa:4c:4e:c8:ee:01:03:bb:67:61:87:09:d8:
f6:6d:12:9e:30:f3:0d:75:16:9b:dc:bc:86:3f:5d:e5:f0:88:
5c:b7:09:6b:39:fc:d2:b4:6d:28:5d:50:78:bb:f5:24:6e:56:
29:55:32:a8:6c:ab:56:92:2d:95:8e:21:5c:25:87:e6:8d:e9:
02:d1:b6:61:15:c8:68:00:90:91:5b:25:07:43:9f:7b:3e:2f:
29:7d:22:bc:71:8c:1f:3e:7e:3a:6c:48:ba:2e:bf:48:9a:e4:
86:aa:29:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:55 2026 by rpki-client