Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145087.roa
File: AS145087.roa (raw, json)
Hash identifier: a3uw84ZtyuC2RfEmEkC1xSfDP63SI7onkS04SC9DE4I=
Subject key identifier: 31:CB:33:63:2B:95:10:03:6E:69:6C:DF:D6:5F:B2:D0:D0:9F:FE:AC
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 206FBD94C7812485B84EAC4C3BB2D1373C9EB413
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145087.roa
Signing time: Fri 22 May 2026 02:47:52 +0000
ROA not before: Fri 22 May 2026 02:42:52 +0000
ROA not after: Fri 21 May 2027 02:47:52 +0000
asID: 145087
IP address blocks: 240a:a985::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:6f:bd:94:c7:81:24:85:b8:4e:ac:4c:3b:b2:d1:37:3c:9e:b4:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:42:52 2026 GMT
Not After : May 21 02:47:52 2027 GMT
Subject: CN=31CB33632B9510036E696CDFD65FB2D0D09FFEAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5c:3f:58:38:c4:61:39:81:fb:d5:87:b0:38:
c0:95:b8:f1:ae:29:0b:9d:fd:84:52:62:d0:54:d5:
19:66:4e:8b:fa:71:c8:92:63:ed:96:42:78:4a:28:
93:9c:4c:cb:67:d7:ee:67:05:2c:40:52:6a:77:83:
8f:6f:d4:82:53:91:a9:ff:56:d8:eb:70:9c:b0:40:
3e:6b:bb:4c:fe:76:4c:a4:c1:9e:19:6c:f5:c9:32:
c8:d7:0d:6b:23:33:67:f9:6d:61:5e:e8:ba:84:ca:
8b:ef:a9:e9:fc:70:a5:41:58:45:3e:39:3d:6f:42:
4d:3a:9c:b3:9e:10:70:d4:3e:4f:c3:52:14:a9:3d:
d2:ac:f7:f2:61:4d:eb:76:83:76:21:41:9c:c7:88:
c5:47:fe:41:e5:cb:6f:aa:10:48:b1:b3:37:04:80:
8e:1b:aa:9e:56:b4:68:08:1d:c9:d3:ef:e1:28:7e:
4f:c5:86:b4:05:bb:c4:31:6b:0d:8a:82:57:7a:7d:
2b:e1:be:f8:23:4e:98:a7:d8:33:11:1d:0a:8a:9d:
30:64:c8:60:82:ab:d4:93:84:85:b3:9e:7b:6c:b5:
45:f2:57:22:be:80:85:ea:15:50:32:18:93:b1:83:
11:42:37:e4:d3:83:5c:46:6a:cb:3c:79:08:74:d2:
c0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:CB:33:63:2B:95:10:03:6E:69:6C:DF:D6:5F:B2:D0:D0:9F:FE:AC
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145087.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a985::/32
Signature Algorithm: sha256WithRSAEncryption
b1:ef:e3:c5:68:10:45:c0:03:ff:2b:b1:61:ae:0d:75:fc:eb:
4c:0f:3d:e1:14:f1:84:9e:a3:6a:3a:0d:ca:be:ca:7a:18:53:
fc:a9:d7:3b:14:59:fa:c5:1e:9e:23:e5:94:2a:1c:dc:5f:77:
78:02:65:91:0b:f1:2b:50:e2:d9:34:ed:4f:c6:3d:e1:44:5e:
10:c5:61:e9:95:33:09:c7:3c:ec:47:00:fa:71:8f:c5:83:db:
98:91:41:1e:51:bd:18:31:c9:6c:e6:6f:d9:e7:12:f8:96:47:
83:a7:6a:0d:ec:ce:ec:8d:4c:cd:a2:63:98:25:39:21:48:d8:
5a:cd:1e:66:4d:9b:8a:1c:46:1a:79:8f:17:64:89:ef:e3:35:
6d:9d:51:e2:b6:87:67:b2:6d:34:6b:09:db:5c:22:a4:34:2c:
18:b2:6a:be:0d:38:49:d3:61:44:68:57:c8:14:72:70:19:f4:
5b:5e:e6:9e:9a:98:26:8b:45:e8:08:94:18:d0:0f:82:b2:9c:
43:94:d2:4a:09:15:0a:7a:27:2c:03:04:96:0e:23:c7:99:18:
3c:d5:d9:bb:04:8c:a6:31:0b:77:1e:08:2c:53:d8:6c:8e:21:
2e:66:bb:aa:39:4e:3e:f0:19:11:ed:67:cd:09:03:d4:a8:79:
ed:c5:eb:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:17 2026 by rpki-client