Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145097.roa
File: AS145097.roa (raw, json)
Hash identifier: RYa/Gtq4yUSEiqjzDbxZqHUY1JPDEDEjv3qujcuwf5w=
Subject key identifier: 68:99:4F:CB:12:B3:7F:AE:AD:A1:5A:F4:22:42:DC:00:8E:89:71:75
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3684B842D8DBEC730DC3B321D3F0B6561F64898E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145097.roa
Signing time: Mon 25 May 2026 03:19:26 +0000
ROA not before: Mon 25 May 2026 03:14:26 +0000
ROA not after: Mon 24 May 2027 03:19:26 +0000
asID: 145097
IP address blocks: 240a:a98f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:84:b8:42:d8:db:ec:73:0d:c3:b3:21:d3:f0:b6:56:1f:64:89:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:26 2026 GMT
Not After : May 24 03:19:26 2027 GMT
Subject: CN=68994FCB12B37FAEADA15AF42242DC008E897175
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:4f:6d:7c:f3:fa:c2:b2:24:7c:e5:2c:11:c7:
a5:d3:c0:fe:99:4e:ba:55:bb:9b:08:90:bc:a2:ae:
e5:8b:9d:8a:65:21:1a:0d:26:06:a3:55:b4:aa:39:
2c:e5:12:8d:9c:3c:7e:82:59:eb:77:2b:d1:58:40:
9f:8c:4a:54:84:2c:cc:be:a7:90:86:cd:54:42:ca:
08:94:3a:52:16:5d:52:9b:08:24:95:4a:4c:5d:13:
a1:b2:d9:1f:e9:5a:b5:4c:9d:0c:53:2d:1e:8b:8d:
cb:7b:df:33:66:11:82:45:ee:1d:58:9b:5e:79:6c:
d3:92:b8:64:46:16:f5:8f:43:c3:b1:05:71:0a:25:
84:0f:9e:97:26:91:fc:d3:74:ec:b2:f8:c1:46:e4:
bb:49:bd:c6:f5:6f:fd:2a:cf:0b:1d:f8:06:6d:4c:
e6:6b:a2:70:b1:1a:50:1b:52:11:fc:13:36:6d:4e:
3d:04:a1:25:15:8c:fa:24:44:8a:0e:4b:5c:ef:34:
6d:83:99:25:cc:89:67:e0:d6:06:4b:fc:0e:f8:4c:
5a:b7:b2:c8:cc:d3:4d:96:04:f0:29:90:46:e2:4c:
2d:d9:6e:7c:7e:bf:f4:2f:65:77:b8:63:83:30:66:
9c:f7:2f:4d:f0:8a:b6:1a:47:21:f9:3d:84:6b:38:
db:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:99:4F:CB:12:B3:7F:AE:AD:A1:5A:F4:22:42:DC:00:8E:89:71:75
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145097.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a98f::/32
Signature Algorithm: sha256WithRSAEncryption
8d:6b:e3:ca:c5:c5:60:5e:57:62:11:7c:1a:ee:8c:a9:47:d4:
85:4a:c0:f2:85:42:c0:fa:68:86:f3:fe:09:09:67:d7:92:b2:
79:0e:f9:e4:d0:54:17:93:6f:48:89:63:e1:9c:fa:34:72:24:
e4:83:dd:61:fd:f2:38:b7:f5:67:0c:37:2d:7b:25:27:e4:56:
bc:ee:71:51:84:c0:ec:7b:fc:5f:ab:37:18:cd:42:42:84:43:
11:bd:77:f7:22:5c:05:2e:cb:74:a0:d1:bc:f3:8b:d7:96:7a:
71:e3:2d:76:aa:13:81:bc:a3:90:23:07:01:97:0b:8c:3d:94:
d7:a2:1f:56:a3:fa:4c:81:5f:d2:8a:f0:7b:70:d1:7a:2e:5c:
99:0b:c2:85:c7:60:6c:7f:c5:94:ea:22:18:99:6a:9c:bb:9d:
b0:a8:1f:e7:99:77:a9:76:af:1a:a6:3c:9b:77:7d:1b:be:4e:
49:c4:2c:3a:44:fc:a3:60:14:58:5e:db:11:80:77:ff:b9:97:
78:c8:98:c9:7b:1b:7d:b1:73:f3:40:87:88:14:34:17:56:c7:
b9:48:22:a9:ed:73:b5:a7:8b:78:02:34:4b:32:38:e9:8a:98:
4e:56:94:c8:80:9f:dd:1e:61:a9:77:54:38:c7:ac:f6:24:65:
23:d3:5a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:59 2026 by rpki-client