Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145085.roa
File: AS145085.roa (raw, json)
Hash identifier: 2f1udolUoZyWgAhNOCc9v5OkRQZCXF1L4K8sxzQpXow=
Subject key identifier: CA:B5:71:D0:55:F8:56:0B:4F:FC:F3:AD:48:2B:75:3C:49:DB:B0:95
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 42F4DA7681B2549E8FC9C8D4F02825C057BE60A5
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145085.roa
Signing time: Fri 22 May 2026 07:41:19 +0000
ROA not before: Fri 22 May 2026 07:36:19 +0000
ROA not after: Fri 21 May 2027 07:41:19 +0000
asID: 145085
IP address blocks: 240a:a983::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:f4:da:76:81:b2:54:9e:8f:c9:c8:d4:f0:28:25:c0:57:be:60:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:36:19 2026 GMT
Not After : May 21 07:41:19 2027 GMT
Subject: CN=CAB571D055F8560B4FFCF3AD482B753C49DBB095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:2b:1d:29:37:d5:0a:a4:f0:03:82:7a:91:92:
21:86:67:50:3c:7d:5d:df:9d:b0:9f:86:b0:9c:cd:
73:d5:20:44:34:ae:df:26:60:24:ec:1a:16:5e:1e:
01:f1:08:02:0a:7e:71:80:60:a8:53:38:3f:1b:f5:
6d:7b:de:ff:f7:7a:f6:70:2d:a9:3f:6a:4b:f6:76:
17:d7:7f:aa:e9:da:c0:00:34:5d:bc:a8:9d:3d:2a:
e2:b4:ec:21:fe:a9:97:68:86:29:89:2e:ca:be:be:
32:92:b2:39:0c:62:a0:4e:66:57:bc:1b:57:71:6a:
d9:8b:14:86:71:a0:bd:59:e2:ee:a4:81:aa:ec:5d:
dc:9a:15:9f:6a:f1:82:0f:f4:c7:49:5a:73:c4:b4:
04:14:8a:db:7c:ae:b4:dd:4d:c7:74:17:f5:e1:e1:
75:c4:b1:d0:b6:dd:94:b8:54:43:af:68:4e:c0:35:
9d:49:55:0c:6a:20:97:73:94:36:2b:57:75:cf:f4:
62:10:0d:5b:8b:87:1d:1e:2d:e0:e6:5b:fa:3e:67:
c2:3a:95:ec:cd:49:ec:14:f6:ae:a7:80:fb:2f:32:
e7:f7:67:a5:6f:3e:04:16:d0:f1:52:bf:21:e1:ea:
76:8e:e0:52:5e:a6:30:76:fe:8d:d1:0e:84:bb:f9:
14:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:B5:71:D0:55:F8:56:0B:4F:FC:F3:AD:48:2B:75:3C:49:DB:B0:95
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145085.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a983::/32
Signature Algorithm: sha256WithRSAEncryption
2d:b4:dc:4f:5a:ac:31:72:3c:b3:79:5e:28:f6:ce:80:05:03:
00:28:fd:3e:4d:bb:33:dd:63:1e:a5:89:70:a4:fb:bc:8d:45:
54:c5:ea:3d:c0:32:d5:f7:f9:17:da:64:0b:1d:9e:19:3c:ff:
44:1b:1e:e8:c6:5f:ca:99:e3:77:ac:88:d3:a0:a9:a4:a5:c8:
dd:b9:bf:04:15:78:59:4e:a1:31:cc:dd:ea:a7:8e:06:58:5c:
1a:81:59:ca:cb:19:4c:e7:19:e3:a6:6b:bb:01:47:a8:36:57:
86:cf:dc:84:5e:6f:30:80:11:51:b4:5c:2a:b1:fe:c9:10:84:
ec:5f:7e:77:df:48:45:94:72:7d:9f:e8:69:16:32:64:08:b7:
29:ef:66:16:25:46:3c:3d:93:28:2d:93:64:54:b1:46:80:1e:
bf:e7:c1:24:07:f6:00:bf:12:87:5b:d6:0d:de:81:61:58:7c:
48:9d:2e:28:18:c8:6a:1f:25:50:28:c3:ff:3d:6d:8e:de:23:
22:74:a3:db:7b:bf:d3:61:22:43:6b:4b:98:9b:aa:f0:2b:df:
ce:09:a7:97:b4:a4:e6:48:2b:37:33:9d:9f:95:62:b5:42:00:
44:62:49:0a:3e:37:9a:18:ec:7c:e9:22:87:24:b7:d6:51:69:
5d:91:b3:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:44 2026 by rpki-client