Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145095.roa
File: AS145095.roa (raw, json)
Hash identifier: V79OfvSx3PQQRm1sz8BKU03mN9+pPqnOAhTURhgNeXI=
Subject key identifier: 94:61:FD:4F:C7:E2:3C:B2:7C:DB:00:AC:C9:85:75:7F:66:6B:C4:2F
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 69C438CF6FEBEBE0C2256FFD8B7B3A2A128B3854
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145095.roa
Signing time: Fri 22 May 2026 01:50:18 +0000
ROA not before: Fri 22 May 2026 01:45:18 +0000
ROA not after: Fri 21 May 2027 01:50:18 +0000
asID: 145095
IP address blocks: 240a:a98d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:c4:38:cf:6f:eb:eb:e0:c2:25:6f:fd:8b:7b:3a:2a:12:8b:38:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:18 2026 GMT
Not After : May 21 01:50:18 2027 GMT
Subject: CN=9461FD4FC7E23CB27CDB00ACC985757F666BC42F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ad:5c:18:cc:68:a8:f3:13:dc:da:f6:48:5c:
8c:f8:e2:4c:77:ae:25:7b:0a:a2:dc:9b:b1:dc:33:
53:ca:30:ff:c4:4a:e2:1c:d7:c1:6e:83:ae:b0:4f:
99:d5:cd:9f:0f:f7:51:c8:f8:98:44:26:96:6b:c5:
ee:d6:4e:1e:2f:58:54:11:58:6e:46:25:c3:95:64:
15:42:04:14:97:5e:e5:f7:29:04:93:26:93:1f:83:
a3:3f:30:91:1b:e2:b9:f5:b8:a3:35:10:34:12:a3:
39:50:c6:02:4a:fd:45:4c:d6:05:6c:82:d6:71:36:
70:c0:fb:fc:fa:16:68:68:85:a9:11:eb:28:72:1e:
19:6e:65:fa:4c:67:9c:02:40:9d:e9:62:ec:86:41:
35:51:b1:df:2d:61:14:7e:4e:aa:98:1a:30:72:17:
48:24:7a:92:55:01:28:ac:41:b5:f9:6e:b3:a5:e2:
47:fd:4f:38:83:c1:37:95:f1:96:c1:0c:ff:8f:42:
a9:b5:80:bc:22:15:f0:82:72:ce:93:2c:da:ab:a6:
26:4b:c2:de:78:ed:42:6b:18:50:69:06:0a:e1:e1:
5f:d5:dd:15:70:c6:0a:b0:d8:56:a9:c9:d9:92:87:
0a:75:9b:78:0f:c6:bc:12:fa:97:db:1a:5c:fe:35:
56:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:61:FD:4F:C7:E2:3C:B2:7C:DB:00:AC:C9:85:75:7F:66:6B:C4:2F
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145095.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a98d::/32
Signature Algorithm: sha256WithRSAEncryption
19:36:8d:47:2d:c5:fc:42:45:93:39:b0:40:d6:0f:50:43:c8:
d3:6a:2d:b7:15:95:06:60:89:4c:a7:76:fa:1c:a9:9e:58:02:
77:49:7a:98:55:3a:fb:c7:b3:d0:c3:12:95:b6:8a:9a:29:6d:
9e:7b:f2:f8:cd:0b:bf:ac:a6:da:ab:6a:6a:c2:b3:d0:52:b3:
20:d7:a2:82:1e:73:e5:97:ba:58:2f:26:c3:22:ad:4c:67:ac:
cd:61:40:1d:cb:aa:b9:d2:6c:e7:88:b8:ec:2e:1b:36:8d:a0:
86:c3:46:c1:0f:c2:5c:56:60:6e:52:e4:a4:50:fb:8b:f7:de:
06:cf:9c:ab:70:9c:24:81:9a:ec:49:b9:c0:75:e3:ab:71:c9:
bb:67:35:28:60:2e:52:a5:b1:1f:13:2a:fe:74:81:02:20:45:
7a:d1:70:a1:d4:d7:d4:c0:82:48:c9:d5:1b:04:15:3c:90:72:
a1:05:13:3e:a8:8e:01:cc:c7:f9:e6:8a:bf:82:75:19:90:3d:
a9:a0:6b:7c:ef:80:e8:42:76:d5:d7:fa:6e:5e:e2:d1:cc:87:
db:36:27:30:4d:67:e9:d6:27:89:bb:1e:1b:a3:f6:02:9b:c1:
fa:bf:67:63:b8:a1:44:d5:0e:17:c5:2f:e3:05:bb:ff:b0:02:
14:f9:39:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:18 2026 by rpki-client