Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145107.roa
File: AS145107.roa (raw, json)
Hash identifier: f/2hq+1BIRlWfBsp84b8ar0lNs5ZkNnCi8qTltTmmo0=
Subject key identifier: C6:66:AF:D9:2A:00:84:8C:29:02:8D:F7:29:C1:E4:9B:08:9B:6A:82
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5D323D2E77181B90F70E09D5320FB33BD568C711
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145107.roa
Signing time: Fri 22 May 2026 07:32:28 +0000
ROA not before: Fri 22 May 2026 07:27:28 +0000
ROA not after: Fri 21 May 2027 07:32:28 +0000
asID: 145107
IP address blocks: 240a:a999::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:32:3d:2e:77:18:1b:90:f7:0e:09:d5:32:0f:b3:3b:d5:68:c7:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:27:28 2026 GMT
Not After : May 21 07:32:28 2027 GMT
Subject: CN=C666AFD92A00848C29028DF729C1E49B089B6A82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1f:99:e4:f1:c2:d9:01:ef:c9:8f:5b:ce:b2:
8b:4a:17:e9:b8:b4:10:c6:4f:53:49:d7:75:c4:cb:
30:2c:86:83:ea:92:1a:f1:d0:bb:bb:89:b5:d1:8b:
dc:b4:da:c6:6b:a9:29:3e:0e:6a:8b:c4:78:c2:31:
f5:a5:b9:00:e5:e2:3f:d8:c9:e7:81:ac:1c:fd:81:
12:09:47:4e:1f:47:e2:54:d9:63:d8:f0:95:b3:66:
85:a1:9b:b5:17:62:c5:be:4e:55:b1:06:35:69:20:
60:ba:95:24:33:8e:dc:ea:f1:46:af:09:75:fe:14:
f0:b5:8a:f1:0d:77:0b:8b:e8:59:12:ea:a9:61:42:
fa:cb:11:de:08:b1:0a:49:91:74:48:d3:08:fa:03:
a9:70:32:a1:6b:2a:98:cb:c1:ae:c7:e3:30:2f:6d:
fc:fa:41:9b:98:97:81:4f:e0:60:9a:1a:e1:be:7a:
e2:05:2e:0a:d2:51:58:20:bb:b0:a1:aa:07:92:cc:
76:2e:2f:f9:f5:dc:a4:79:84:7e:c0:b5:eb:44:07:
db:30:76:e8:43:ea:5e:46:3d:89:01:8d:73:af:c6:
ca:80:4b:5f:92:b8:f7:bf:1c:02:ba:82:83:e9:88:
e0:a3:69:6b:d9:2b:63:00:bf:fe:ed:2e:4c:ca:22:
61:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:66:AF:D9:2A:00:84:8C:29:02:8D:F7:29:C1:E4:9B:08:9B:6A:82
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145107.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a999::/32
Signature Algorithm: sha256WithRSAEncryption
b7:81:d2:3d:de:72:3d:52:ee:de:75:64:21:1a:78:9a:54:f1:
e7:35:6d:f9:28:0c:86:e0:cf:81:25:a2:13:d3:b9:ea:25:66:
e4:ff:65:38:24:e0:b5:a3:d7:7a:2b:82:8c:84:af:9a:37:65:
db:fb:8e:87:3f:b3:b0:88:1d:e8:56:90:b7:ac:75:f8:90:cc:
77:2d:ca:e5:6a:9b:33:57:17:d9:9a:77:ed:ca:fc:81:ec:3f:
00:7a:3d:cb:b5:c2:d8:76:e9:b2:27:cd:25:ce:2e:7b:9f:1d:
c0:a6:2a:17:36:93:e1:95:9e:4c:64:1d:54:c5:b5:c6:bb:c8:
44:06:f3:6b:47:61:6a:82:bd:05:e9:f1:e4:91:cc:fd:33:e1:
b3:77:fc:ac:78:54:64:b2:65:ad:3d:74:b0:d2:10:27:6d:8f:
34:56:63:71:0e:74:ea:f7:69:fe:84:0f:8c:80:a7:a1:79:0d:
71:40:a0:85:b8:41:f9:3a:24:9e:5f:6d:8b:80:58:62:d2:21:
b5:45:46:6f:69:eb:dd:66:3a:26:ad:5a:46:bd:10:f8:e7:4b:
d7:77:23:20:04:8c:92:86:bd:7c:7d:54:eb:01:a2:90:b1:d6:
cf:d7:9d:c6:ac:6a:0b:19:fe:37:d3:e5:ce:94:29:64:db:88:
5b:00:48:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:02 2026 by rpki-client