Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145093.roa
File: AS145093.roa (raw, json)
Hash identifier: ypcVG7SfEbELXfuW0S4KFuh+EmAsXk/cbbO/BoQygN0=
Subject key identifier: 1F:FF:80:94:A7:B9:E5:DA:B2:85:F7:56:83:16:39:EF:6B:03:FB:AE
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 75655E32C991558616BB77A7D74A71951DC237DA
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145093.roa
Signing time: Fri 22 May 2026 04:08:23 +0000
ROA not before: Fri 22 May 2026 04:03:23 +0000
ROA not after: Fri 21 May 2027 04:08:23 +0000
asID: 145093
IP address blocks: 240a:a98b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:65:5e:32:c9:91:55:86:16:bb:77:a7:d7:4a:71:95:1d:c2:37:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:03:23 2026 GMT
Not After : May 21 04:08:23 2027 GMT
Subject: CN=1FFF8094A7B9E5DAB285F756831639EF6B03FBAE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:cf:57:db:6c:ae:55:c2:fe:ea:2c:2c:8b:e3:
8a:1c:da:58:02:dc:22:7d:68:f3:71:d1:b6:f5:88:
04:ac:19:91:d9:76:24:a1:9f:a0:c6:d3:d5:53:9b:
93:ca:17:0c:e6:e4:8a:44:5a:7d:eb:f6:f8:d3:30:
68:02:e4:d5:b9:9b:2d:0d:6e:7f:3a:3e:7b:d7:51:
33:64:e9:4d:9a:e4:79:fb:64:a7:ed:a0:d6:48:1a:
71:87:c9:f8:42:f3:2c:ff:37:e9:f8:c0:e3:02:7b:
ad:bc:a7:69:04:7a:f3:02:c1:64:72:39:d0:46:70:
46:3a:e6:a7:17:4d:34:f6:bf:5e:97:b8:ce:cb:f4:
bd:5d:65:a5:43:5d:9a:05:52:d0:f0:78:3a:5f:81:
8d:23:93:c0:74:cc:70:72:2f:90:2c:3c:79:03:04:
19:ae:f0:c3:48:ae:f8:61:d4:d7:0b:c7:4b:a8:0e:
9a:ac:0f:e9:1d:6b:54:3d:f4:3a:20:7d:c3:70:7a:
9d:6f:14:a8:34:43:23:66:d7:52:34:a8:37:90:04:
dc:f9:31:a9:84:12:7d:bd:c1:6b:71:54:14:f4:fd:
f9:3c:6a:ac:5e:52:2c:33:bb:47:4a:e2:0c:bb:67:
ae:f9:5a:cc:40:ab:61:5e:5c:78:19:1c:a2:43:7b:
c2:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:FF:80:94:A7:B9:E5:DA:B2:85:F7:56:83:16:39:EF:6B:03:FB:AE
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145093.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a98b::/32
Signature Algorithm: sha256WithRSAEncryption
48:a2:0e:07:23:f5:a1:04:5f:ab:7f:61:97:5c:b0:27:26:e3:
a7:e5:5c:f6:3d:c7:e0:87:61:50:2f:40:08:18:90:63:7e:b2:
37:e5:3c:ca:e3:ef:58:27:5c:63:4e:9d:f7:a0:46:5e:fd:f2:
79:09:bb:1b:65:7e:32:d2:fc:00:22:bd:3a:82:92:a5:57:4a:
db:66:d1:eb:5a:1a:86:23:ce:40:ef:aa:01:c6:a6:ee:4d:6a:
b2:71:03:f8:c7:42:77:3f:89:00:4d:02:52:bb:e0:44:0e:53:
b1:29:62:1a:27:eb:00:cc:e7:81:fb:e0:9f:40:c1:4e:44:69:
eb:6b:83:db:33:a9:73:06:3d:4f:48:2a:57:2d:9a:2f:1f:16:
3c:79:0f:57:74:42:cf:62:29:13:ff:c5:df:03:8a:e5:2b:f2:
66:cd:19:35:01:36:a7:af:47:62:ad:00:30:aa:58:d6:c2:c9:
74:17:b7:5b:65:87:69:74:88:d1:a6:2c:cc:98:47:ef:09:83:
fc:ec:1c:00:69:34:dc:7a:aa:ca:97:d1:56:88:a1:64:2f:b8:
83:92:a5:c0:84:1c:b6:fb:bc:42:2c:de:ba:90:95:b1:88:64:
c4:31:46:ed:e7:18:1d:90:9b:83:8a:98:42:55:26:25:93:fa:
e3:8a:31:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:44 2026 by rpki-client