Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145091.roa
File: AS145091.roa (raw, json)
Hash identifier: nCC350SokQiFci5lEnilsfT1TuIq4xBqy+lKBtzNOPc=
Subject key identifier: FB:67:A0:21:55:49:D7:D3:40:64:D1:E3:AD:67:2B:0F:EE:24:4B:4F
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2B9423D3C4D11AF2C03B468C7CB987F83908D747
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145091.roa
Signing time: Mon 25 May 2026 01:51:14 +0000
ROA not before: Mon 25 May 2026 01:46:14 +0000
ROA not after: Mon 24 May 2027 01:51:14 +0000
asID: 145091
IP address blocks: 240a:a989::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:94:23:d3:c4:d1:1a:f2:c0:3b:46:8c:7c:b9:87:f8:39:08:d7:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:46:14 2026 GMT
Not After : May 24 01:51:14 2027 GMT
Subject: CN=FB67A0215549D7D34064D1E3AD672B0FEE244B4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ba:b3:8e:51:ed:d0:f7:2c:98:7c:01:a2:9d:
0a:5a:37:3c:e6:64:9c:9d:57:fa:f5:56:71:b1:94:
4c:c5:d0:2e:05:50:ce:27:dd:98:e6:f9:a2:41:49:
f8:2b:53:72:b9:7c:67:f0:a2:9d:9b:4d:0c:1f:7e:
61:fd:53:2e:ce:2a:ec:91:23:17:6f:7d:81:93:7a:
33:41:0a:80:6b:e6:ef:41:ab:ac:b5:8e:d3:f0:33:
2d:df:0b:ca:27:41:80:c2:49:7a:c8:3b:ce:a9:82:
e6:8b:e0:e8:7a:d1:78:68:db:05:c0:79:54:83:71:
e8:9a:cf:b3:30:42:ec:77:cc:b0:25:17:b1:92:d0:
20:8b:08:6a:0a:04:a2:97:d4:02:cf:59:d7:3a:26:
78:6e:ce:04:3d:f6:be:4c:4c:d9:ca:b3:c2:de:c9:
96:3c:bb:08:e2:24:02:b1:08:81:a9:1e:e2:c0:03:
5a:a6:2c:8c:03:12:4c:26:b8:ad:7c:da:da:6e:4d:
2e:c9:e8:ec:d6:fc:22:5e:22:03:79:1b:f0:52:b0:
94:86:ae:2f:89:66:f3:32:fe:89:90:a7:b2:9d:57:
b0:d1:8a:7a:6b:38:03:04:5c:2f:f3:a8:11:9b:a8:
03:aa:47:34:e6:02:3d:d4:d2:36:41:4a:82:50:cf:
d7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:67:A0:21:55:49:D7:D3:40:64:D1:E3:AD:67:2B:0F:EE:24:4B:4F
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145091.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a989::/32
Signature Algorithm: sha256WithRSAEncryption
29:f7:37:b7:fd:15:56:00:51:1c:2c:be:c4:3a:c9:26:e5:d9:
35:43:5e:35:5b:16:db:87:58:81:cc:ab:23:90:c3:1d:cf:9c:
a1:16:51:43:7a:f6:d9:bd:ae:11:9c:2e:3d:6f:e5:cd:d0:d4:
9d:f7:8b:d8:07:5e:da:2c:d1:98:ff:b4:11:be:3c:4a:c1:51:
8d:91:63:ac:eb:0d:64:7f:4e:ae:49:1c:85:7f:57:bf:46:f0:
fa:f1:e5:06:1a:75:4a:d7:7e:45:32:78:16:e2:64:92:d3:46:
be:25:9a:a2:7d:50:07:24:f5:c1:21:9f:80:45:c2:4d:3e:93:
2d:09:d6:33:14:de:c7:b9:27:58:df:a0:d1:06:e2:42:86:65:
09:b4:63:63:ef:d9:cb:11:fe:14:55:33:97:5e:f8:a6:f0:fb:
02:8b:dc:be:9b:2f:85:d8:c3:8f:ef:7b:6d:21:d0:66:22:63:
11:39:a1:0c:31:5e:7d:26:14:2a:cc:c8:47:33:f5:27:bb:fb:
27:54:3a:4d:d5:b9:bf:13:47:9e:30:15:6c:16:bc:d9:17:ec:
0e:f2:50:3f:ab:9b:18:e6:65:6d:82:be:e3:71:5d:b1:5e:d6:
ab:86:bb:4c:b3:11:b0:1c:cd:26:9a:14:9f:5d:08:d8:3b:66:
5a:4c:c2:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:07 2026 by rpki-client