Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145079.roa
File: AS145079.roa (raw, json)
Hash identifier: viNkul5A/xf7F3ujULyzAuTtDzfnwct9fLGBNx22bII=
Subject key identifier: 93:FB:F1:E1:52:B9:29:3C:7B:AE:05:22:E1:FB:AC:32:8F:35:C7:67
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 404A8471BA312CE6572310B6725C8FB900F3F91B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145079.roa
Signing time: Mon 25 May 2026 02:22:36 +0000
ROA not before: Mon 25 May 2026 02:17:36 +0000
ROA not after: Mon 24 May 2027 02:22:36 +0000
asID: 145079
IP address blocks: 240a:a97d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:4a:84:71:ba:31:2c:e6:57:23:10:b6:72:5c:8f:b9:00:f3:f9:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:36 2026 GMT
Not After : May 24 02:22:36 2027 GMT
Subject: CN=93FBF1E152B9293C7BAE0522E1FBAC328F35C767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:47:ec:6b:3b:6e:83:e4:cf:df:af:d7:e1:39:
e4:ae:24:54:47:d4:3f:aa:4b:89:76:14:dd:87:21:
90:4c:aa:15:a6:33:59:9f:03:41:05:fa:cf:b6:54:
9b:6f:cb:44:ce:0a:f4:b6:8c:fb:32:ea:5e:01:93:
7b:8a:98:a0:61:84:3d:8d:fe:d7:ef:47:ea:fe:fb:
e1:39:b7:a2:a8:b1:bb:17:54:34:0d:f7:5c:10:ea:
7b:e5:01:02:f8:01:8e:d9:ae:e4:21:19:02:09:b0:
ed:04:af:c9:a5:31:60:5a:a3:2e:f6:58:1b:09:6f:
a4:41:14:fc:48:f4:4b:5f:1f:7b:1e:a6:dc:8a:f8:
f3:24:61:fd:d1:06:10:c4:e5:4b:13:1b:95:ad:2d:
df:77:42:b7:be:a0:27:a1:bf:29:a4:7d:08:aa:47:
8d:4b:27:4d:a9:bd:4a:c2:70:c9:30:24:20:1a:b4:
83:54:9f:58:39:e4:40:31:4c:53:04:53:69:2f:a9:
65:9c:b2:02:c6:80:5b:a7:ce:37:2e:58:0d:ea:26:
eb:86:2b:40:d0:74:93:62:25:9c:30:dc:82:c1:35:
90:9c:f8:eb:f7:72:0a:47:11:d0:46:56:fb:5b:4f:
b5:df:b5:fe:71:6d:44:18:4b:2c:35:3e:c4:1b:71:
a3:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:FB:F1:E1:52:B9:29:3C:7B:AE:05:22:E1:FB:AC:32:8F:35:C7:67
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145079.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a97d::/32
Signature Algorithm: sha256WithRSAEncryption
54:8a:59:7e:b5:6f:d1:6d:b3:64:10:e4:52:9d:a9:67:49:d9:
6d:14:e8:6f:fb:c5:c2:2e:1f:91:0d:be:f4:72:9d:2a:f8:a9:
48:74:66:c6:f8:83:69:aa:ea:9f:37:7a:a0:14:67:54:a9:1e:
4e:11:2a:90:3c:7d:49:b6:4a:11:51:6b:c0:2d:73:d0:b9:87:
08:a5:64:cc:75:33:6b:33:26:2b:48:8b:4a:7d:31:e1:10:5a:
1c:bc:9e:a2:24:a8:3c:ad:ab:e8:35:e4:07:f5:ca:75:f9:a8:
83:1b:40:b2:d3:c2:65:b5:7b:78:29:37:5a:d9:dc:f3:c8:72:
3d:4c:87:54:d5:dd:80:35:c1:68:59:c7:8e:44:fc:01:fc:f2:
a5:1d:f9:aa:7f:a5:5c:a7:d3:75:f9:0e:e8:d9:f0:c1:77:cd:
22:8f:c2:a7:de:22:74:8a:c5:3a:99:79:21:af:dc:62:1f:76:
91:61:25:9b:9a:87:1b:95:4f:62:c5:fc:57:a7:47:64:0c:3b:
ba:35:08:05:79:45:74:5e:da:1c:41:38:3b:d9:4c:c1:3f:72:
f0:b3:59:d3:fb:36:18:4b:75:42:37:e9:92:30:88:41:17:10:
51:e3:f5:a6:ed:48:67:93:4c:f2:07:74:51:9e:38:3f:fd:68:
f1:81:f0:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:54 2026 by rpki-client