Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145076.roa
File: AS145076.roa (raw, json)
Hash identifier: CkyLUTyYzuZyiiMlOfY6r500SciC5o6NPrTWXM6WieQ=
Subject key identifier: 4D:79:37:B9:02:2C:8A:A8:97:81:DE:5A:45:1A:50:C3:16:F9:26:14
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4DCFD2DA74B359EF0DA2C3376CD5AD78954EEA34
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145076.roa
Signing time: Fri 22 May 2026 06:27:56 +0000
ROA not before: Fri 22 May 2026 06:22:56 +0000
ROA not after: Fri 21 May 2027 06:27:56 +0000
asID: 145076
IP address blocks: 240a:a97a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:cf:d2:da:74:b3:59:ef:0d:a2:c3:37:6c:d5:ad:78:95:4e:ea:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:22:56 2026 GMT
Not After : May 21 06:27:56 2027 GMT
Subject: CN=4D7937B9022C8AA89781DE5A451A50C316F92614
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:40:a3:d7:8c:6b:65:5e:bf:14:4a:c6:8b:92:
21:9a:24:9c:f7:0b:e9:0d:3e:73:36:50:03:de:77:
c3:f4:0c:dd:c7:b7:7a:a4:a1:96:bb:ea:ef:16:41:
f4:aa:60:28:ef:a3:e6:fc:ec:8d:31:1d:55:d2:ff:
66:8b:0d:22:41:e1:32:e0:87:8d:cb:f6:ec:ca:e3:
a4:55:b8:ac:85:ac:d0:2e:7e:8d:ff:39:46:25:e5:
c4:93:ec:b6:a3:ae:6b:77:59:a4:01:8b:33:bc:3f:
6b:f0:b4:b4:14:8c:6b:34:60:81:f8:69:95:51:cc:
5c:d7:e1:99:11:89:f0:d1:eb:89:93:a2:bd:e1:be:
ae:ae:18:97:1e:dc:96:47:d3:cb:ec:fd:40:c3:3b:
94:e5:b0:b5:37:32:cb:84:c7:79:f3:4b:75:1f:64:
71:30:49:76:d1:a7:e9:b6:9f:ab:00:48:4b:a4:8d:
22:87:d3:03:09:22:04:5c:b4:4b:a8:99:56:1d:96:
53:e4:fc:d5:46:94:08:d4:2b:a2:ac:44:ca:23:c8:
29:5f:b7:65:43:55:33:70:62:8d:7e:00:0a:72:93:
e6:71:bc:b3:90:82:46:a1:7f:26:c1:64:ae:b3:a9:
a4:c4:b6:47:ad:8c:ef:dc:ca:f2:33:99:7a:8a:8b:
a8:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:79:37:B9:02:2C:8A:A8:97:81:DE:5A:45:1A:50:C3:16:F9:26:14
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145076.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a97a::/32
Signature Algorithm: sha256WithRSAEncryption
5f:59:0f:7f:33:67:07:ad:5d:d7:c4:97:1a:29:96:e7:f9:24:
55:12:d8:6d:a0:74:1e:3b:35:bb:27:b1:54:e4:6c:ce:47:6e:
4c:8a:7f:7a:1f:0f:a0:77:5e:8a:cd:f7:99:ff:77:3c:c0:15:
8c:8b:59:a9:5e:cc:97:a3:5b:0d:ad:7c:31:91:03:f5:90:aa:
49:4c:ee:c1:f4:f2:d6:03:1a:70:8f:f0:b0:63:43:e9:3c:01:
26:39:73:16:88:f8:f6:bb:00:5b:ad:77:45:d0:79:45:0e:70:
d2:00:8a:af:cb:f2:1c:76:28:67:05:7c:ac:ed:7e:21:20:ad:
bc:ef:9a:b6:91:e7:50:c1:c0:79:63:c9:6a:09:e3:d8:07:2a:
2c:bc:71:ec:b1:4c:7b:ce:87:64:99:aa:80:0a:18:be:f9:ac:
84:39:11:fc:65:d5:99:d2:b7:78:fd:bc:9e:3c:d4:be:5a:29:
b4:f6:1a:29:e9:04:04:cf:1f:59:2a:e9:6b:16:d6:b0:d7:22:
be:e5:eb:48:a3:b4:ed:41:d9:b1:2d:ee:98:48:15:1a:4d:e1:
76:c8:ac:87:ed:97:de:f4:3b:5e:d9:35:32:f2:43:df:09:0c:
4c:34:ab:18:93:e9:88:23:38:27:a5:06:90:cb:04:37:b5:f6:
e3:c7:ab:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:01 2026 by rpki-client