Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145101.roa
File: AS145101.roa (raw, json)
Hash identifier: lMp7XBRZAxuq/++BFRyzESOVSmTXFZJZDcCxaYdD48c=
Subject key identifier: 11:1C:1A:19:3B:D5:38:07:C7:02:A1:61:89:AF:47:F2:0C:DB:57:81
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 38CF255EE4F4500297BE31C34D864E9EDD4FCDE6
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145101.roa
Signing time: Mon 25 May 2026 06:49:07 +0000
ROA not before: Mon 25 May 2026 06:44:07 +0000
ROA not after: Mon 24 May 2027 06:49:07 +0000
asID: 145101
IP address blocks: 240a:a993::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:cf:25:5e:e4:f4:50:02:97:be:31:c3:4d:86:4e:9e:dd:4f:cd:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:44:07 2026 GMT
Not After : May 24 06:49:07 2027 GMT
Subject: CN=111C1A193BD53807C702A16189AF47F20CDB5781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e0:84:38:1e:6a:2e:8a:9d:aa:f0:c1:fa:d6:
b2:0f:ff:43:bf:dd:ee:4e:45:c6:33:c5:7d:44:d7:
77:26:c7:8f:70:bf:74:fe:fc:ba:4f:ed:be:42:95:
7c:fc:f7:60:60:ba:40:3f:9b:a0:ee:60:0d:ed:9a:
4c:c6:d7:be:84:5f:28:02:54:38:9d:72:4f:da:40:
1b:5a:13:29:0c:90:0e:84:77:0b:81:8e:f1:f0:32:
17:37:49:3c:9f:a1:45:6c:a1:aa:c0:6c:93:49:81:
17:19:00:6b:ef:45:9c:78:74:12:4e:aa:03:17:f1:
79:69:fe:53:0f:58:cc:1e:e4:f7:84:42:7c:bf:f7:
36:0b:21:8e:d2:ae:4f:2a:82:f4:6d:4d:ee:2b:85:
d3:00:26:90:af:b1:bc:bc:c6:74:85:97:e6:ff:bb:
c6:15:25:13:90:0e:82:cf:55:44:19:ef:29:2f:31:
b4:5a:8e:de:87:9f:6e:1b:78:ab:12:ca:22:68:b4:
8a:d7:a7:2c:b0:fa:99:ed:d4:95:b8:9f:56:e6:0a:
66:b9:04:c6:1d:f2:81:3a:24:33:e9:d1:e7:89:88:
bb:0e:5d:9b:0d:73:76:ad:e3:aa:2c:d9:6c:3d:e6:
6c:f0:32:c2:6f:bc:e4:a3:47:74:33:ba:df:e4:84:
5e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:1C:1A:19:3B:D5:38:07:C7:02:A1:61:89:AF:47:F2:0C:DB:57:81
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145101.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a993::/32
Signature Algorithm: sha256WithRSAEncryption
87:aa:6e:45:db:a0:87:f1:e4:d2:70:ed:1a:e5:66:70:b4:a6:
34:5c:47:6b:cd:7f:63:17:f0:b8:29:ba:a1:01:df:83:9d:a4:
d2:fd:7f:5c:67:ab:ba:14:87:2e:53:8a:a0:b2:77:a8:90:13:
ed:d9:b9:4b:de:5a:d9:6c:95:b0:cb:93:87:a6:89:2f:40:7b:
47:a2:fb:9c:6f:89:cf:3d:35:26:ce:3f:fc:34:e3:c8:53:b9:
6e:d8:81:97:26:df:0a:98:11:bf:85:0a:87:10:ca:f8:c0:21:
8f:18:e2:ed:2c:1e:75:9f:9b:36:7b:e2:06:45:d1:e5:e7:ce:
b3:a2:b6:e0:b8:97:b3:48:33:ce:6f:7d:4e:29:73:f1:0f:02:
02:1f:f7:bb:e8:af:e0:b3:6b:6c:91:0c:57:f9:2d:e9:9c:15:
5e:94:4c:06:58:7f:30:9d:ef:ec:6c:b7:40:d8:82:38:f3:cb:
a5:7d:86:07:0e:3d:50:99:2b:6a:a2:06:0a:95:b9:4a:8d:ec:
f2:56:b5:dc:fb:1a:aa:11:ed:62:12:ed:1b:c4:d4:dc:55:e5:
6b:a3:0a:c3:57:d9:77:a3:de:43:bc:0a:3e:9b:02:df:05:66:
41:60:83:72:a1:91:7a:ed:b9:57:1b:2f:68:ca:4c:82:68:26:
a8:dd:0a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:13 2026 by rpki-client