Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145078.roa
File: AS145078.roa (raw, json)
Hash identifier: hLPtU/8BP82kZGt7iypJvw5xX3YqOfsaR1od40EIHY4=
Subject key identifier: 35:89:4F:03:90:2C:D0:37:8B:A0:34:33:0A:A5:95:DA:FD:E4:AD:C2
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 631989A860EA5962BD1AB756318D2B868640926E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145078.roa
Signing time: Tue 26 May 2026 03:17:13 +0000
ROA not before: Tue 26 May 2026 03:12:13 +0000
ROA not after: Tue 25 May 2027 03:17:13 +0000
asID: 145078
IP address blocks: 240a:a97c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:19:89:a8:60:ea:59:62:bd:1a:b7:56:31:8d:2b:86:86:40:92:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:12:13 2026 GMT
Not After : May 25 03:17:13 2027 GMT
Subject: CN=35894F03902CD0378BA034330AA595DAFDE4ADC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8e:a5:02:15:cd:37:af:d8:93:39:48:f5:11:
2e:bf:b5:fd:be:19:1b:b9:73:d8:8e:bd:40:85:02:
20:0b:92:28:1f:e5:d7:3e:28:fa:0d:55:90:54:50:
11:9a:c4:d6:c2:e4:95:55:f7:b6:b5:09:52:a9:ae:
97:b1:b2:21:1f:ee:27:48:76:bf:04:c9:c9:97:29:
7e:a3:a3:cc:38:5f:16:bb:c6:44:38:c0:5a:29:9b:
02:a4:ac:af:23:4e:4e:de:7f:8c:bd:d9:69:c5:13:
ae:63:27:25:c5:26:18:2e:e9:f4:04:e4:ff:23:04:
cb:4f:b3:05:07:5e:d3:53:7c:8b:87:63:30:ee:4e:
8c:14:52:b8:9c:89:e9:ab:22:7a:b3:c0:89:2e:86:
00:4f:0f:40:6a:de:03:22:b0:82:e0:83:d3:2e:bb:
9a:3a:08:e3:f3:99:f1:f6:61:a5:47:b5:e7:4a:94:
69:24:4e:98:72:ff:21:79:0d:9a:e5:a8:47:a5:6a:
4f:dc:90:78:48:d6:5c:ea:2f:f5:57:8f:d1:ae:5a:
10:52:3f:7e:63:be:6e:1c:69:0c:eb:b9:f5:47:76:
77:a5:10:6c:2f:a4:5f:71:35:dc:1d:71:0f:e7:cc:
91:17:fc:44:54:17:d6:df:20:fb:50:91:e0:89:45:
c0:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:89:4F:03:90:2C:D0:37:8B:A0:34:33:0A:A5:95:DA:FD:E4:AD:C2
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145078.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a97c::/32
Signature Algorithm: sha256WithRSAEncryption
57:1e:dc:26:5c:c7:2a:6f:38:50:e8:2a:03:7e:76:14:89:48:
1a:a8:48:3b:a6:cb:39:fb:fc:2f:34:1b:6a:2d:6b:7b:43:77:
78:2b:f4:0b:e0:34:2b:b2:88:9c:8d:64:ce:45:94:af:1b:72:
df:b3:54:28:dd:de:3f:59:75:da:0f:29:9a:03:67:18:5b:81:
0d:7e:d0:0d:ae:e3:5b:8d:c8:d2:9b:e9:bd:51:34:31:ee:9d:
85:ef:a1:6b:ab:81:60:e6:ea:16:89:6e:07:0e:29:e9:48:1b:
c4:a3:14:e6:fc:d1:ad:53:f9:b1:6e:52:28:42:cc:52:61:fc:
7a:e6:dd:4b:be:eb:43:df:6c:05:2c:68:f9:bf:2e:10:54:8c:
12:b1:98:d1:58:b5:64:48:05:04:fe:c7:dd:db:f5:95:0b:0c:
87:7d:d3:26:96:5b:33:b1:93:e7:97:23:27:82:ca:1a:91:ab:
08:f2:cc:f6:36:7e:72:00:87:83:0b:5f:18:d3:1f:6c:d2:a2:
96:05:a0:08:7d:19:da:42:14:08:63:7d:9f:8b:75:3c:f4:5b:
e9:60:16:cb:d6:f6:00:a6:27:08:fe:7e:73:50:05:40:4e:40:
8e:b9:47:d8:07:69:07:df:9d:c7:e0:29:fc:76:97:5c:ba:50:
de:7f:ae:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:47 2026 by rpki-client