Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145090.roa
File: AS145090.roa (raw, json)
Hash identifier: RK5R8M2TwGTYo3JfHaMveDCLndcKbvkT7jHjBdpodBs=
Subject key identifier: 55:39:06:4D:10:21:B5:0A:C4:E2:BD:0A:1A:C4:AE:0C:D3:58:14:FE
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 43DAF00A93759F32FA81078327F3380B57B91E37
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145090.roa
Signing time: Mon 25 May 2026 06:49:12 +0000
ROA not before: Mon 25 May 2026 06:44:12 +0000
ROA not after: Mon 24 May 2027 06:49:12 +0000
asID: 145090
IP address blocks: 240a:a988::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:da:f0:0a:93:75:9f:32:fa:81:07:83:27:f3:38:0b:57:b9:1e:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:44:12 2026 GMT
Not After : May 24 06:49:12 2027 GMT
Subject: CN=5539064D1021B50AC4E2BD0A1AC4AE0CD35814FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8d:27:ea:a9:f0:dd:a5:ab:bc:ee:cb:b5:b3:
ff:c9:26:6c:bb:03:e1:c8:c6:c9:6b:77:3c:01:b9:
c8:ba:f3:ca:25:eb:37:f2:3d:63:a6:e3:f0:d2:49:
4c:34:b4:fa:3f:90:c4:53:e2:60:93:a2:6e:80:4b:
c5:c4:1f:70:a9:27:04:30:98:49:43:e0:04:96:da:
be:78:e3:a1:19:be:14:a0:66:57:c9:f8:33:3f:23:
0c:e2:98:01:a2:b6:e4:59:cf:c5:11:f3:23:eb:ef:
89:ed:c9:86:56:38:1c:4b:b0:89:0d:cf:3c:94:14:
af:c4:98:48:ab:dc:58:09:61:11:3e:99:e9:9d:6f:
8c:60:75:01:84:4c:b9:4c:92:46:bc:f6:1c:ad:7e:
95:9b:d8:89:63:63:4a:c5:ca:0d:5f:53:81:b8:d9:
ef:6e:6b:66:18:4c:a8:5b:a1:9c:3d:e1:4b:45:d9:
0f:8f:c3:ce:a5:8a:f2:5e:cb:20:ea:ad:bc:5b:6b:
b6:20:1e:19:9b:8a:77:a1:b5:a4:55:41:06:14:f3:
46:11:ee:29:d2:f5:05:e9:c2:51:e1:45:5e:84:78:
3e:b3:db:81:a4:e4:07:1d:ca:bf:b0:72:b0:30:a1:
63:14:04:ec:05:8b:8d:85:92:ae:25:c6:7e:7b:15:
10:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:39:06:4D:10:21:B5:0A:C4:E2:BD:0A:1A:C4:AE:0C:D3:58:14:FE
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145090.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a988::/32
Signature Algorithm: sha256WithRSAEncryption
61:4c:61:83:20:6b:20:22:13:60:1e:c3:da:d1:16:fa:54:87:
32:56:55:89:3a:57:bb:cd:9f:ee:93:b7:d5:6c:4d:af:5c:9a:
ac:84:bd:43:20:7f:ab:a3:d4:70:a4:51:ac:ff:8e:af:04:02:
5a:80:70:d3:2c:32:77:a2:82:53:78:3f:5a:95:06:66:18:a0:
12:f9:c5:93:17:c3:ca:fc:7f:83:a1:1b:f3:db:df:22:2d:1d:
ec:52:0b:a2:19:6e:d3:81:a6:f9:fa:17:7d:2a:d5:dc:07:7f:
b9:66:6d:38:a0:70:68:fd:21:7e:1d:be:62:68:a7:2b:7f:ee:
8d:a7:8f:6d:5b:32:fd:4a:35:6f:78:f4:82:fe:5c:39:d4:da:
dd:b7:bd:35:20:2c:77:1f:ce:56:38:5a:63:22:29:39:ef:8b:
48:d8:1f:72:0b:95:ac:21:49:28:a4:fe:06:1f:a8:95:ea:f9:
2d:f5:5a:bd:6f:a5:83:0b:a3:62:3e:fb:ab:ef:ea:88:9d:04:
ef:bc:6c:b8:b8:35:2c:6a:64:7f:ba:f2:5a:bc:38:b0:b3:1d:
14:3f:9c:82:ef:7d:a5:2b:cc:7d:8d:06:77:c8:1b:53:91:50:
69:58:c6:e3:1a:6b:9a:8a:ea:c1:72:fc:6c:a7:20:2d:41:87:
2d:db:fc:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:10 2026 by rpki-client