Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145109.roa
File: AS145109.roa (raw, json)
Hash identifier: VKxTpXDptIpwYab/3YmcCwZuQdmpN9+4I6QFPe7nSCs=
Subject key identifier: CA:DF:29:22:8C:05:07:18:E3:DD:C5:02:A2:8C:1F:BB:A0:CB:7F:59
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 097732F27BEC926C720D94F64DED700F65D9CEEA
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145109.roa
Signing time: Mon 25 May 2026 01:20:38 +0000
ROA not before: Mon 25 May 2026 01:15:38 +0000
ROA not after: Mon 24 May 2027 01:20:38 +0000
asID: 145109
IP address blocks: 240a:a99b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:77:32:f2:7b:ec:92:6c:72:0d:94:f6:4d:ed:70:0f:65:d9:ce:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:15:38 2026 GMT
Not After : May 24 01:20:38 2027 GMT
Subject: CN=CADF29228C050718E3DDC502A28C1FBBA0CB7F59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:74:f7:cc:92:d3:bf:ec:69:e7:ee:2f:15:df:
5a:f1:5d:90:5b:ce:29:80:ee:50:bd:ed:bd:d6:d3:
86:f4:68:f1:b8:26:f3:5c:cc:cf:93:2e:25:e2:5b:
68:de:c7:81:59:60:bb:b8:fe:32:c4:1d:6a:0d:b3:
e8:11:05:b6:08:20:19:96:21:ee:ab:10:13:5b:ba:
33:7a:1b:47:d2:0c:6c:fa:b1:76:6a:d2:cc:21:d5:
2a:ac:ba:bd:be:7b:32:f9:31:dd:bd:38:91:85:27:
77:97:82:cc:1a:5a:2b:b2:87:b1:8a:cb:ae:7b:30:
58:16:df:a0:e0:b7:cd:10:47:00:62:ee:7d:b7:1f:
2a:1e:22:3f:65:1d:93:c9:9e:b3:0a:13:c0:83:ae:
c9:b4:15:45:b2:4e:87:4b:d6:4e:ef:53:4d:5e:58:
42:e5:45:64:89:19:94:cb:da:ca:ac:41:51:75:7e:
fc:1b:cf:fc:82:78:44:5d:47:a9:51:48:25:6f:19:
f8:bf:98:78:8d:f9:99:58:11:28:a5:dd:77:f4:bc:
99:78:54:7c:ab:03:dd:a8:ff:5c:d0:1f:35:cd:a6:
c8:19:51:c6:5c:43:1b:a9:87:83:66:95:fa:5a:4d:
33:39:82:20:2c:5b:94:11:1f:6a:fa:ab:ed:ac:14:
52:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:DF:29:22:8C:05:07:18:E3:DD:C5:02:A2:8C:1F:BB:A0:CB:7F:59
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145109.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a99b::/32
Signature Algorithm: sha256WithRSAEncryption
81:c1:96:37:3c:a1:78:fa:16:9c:00:47:ca:46:6f:80:4c:8a:
4d:79:e1:4c:30:bf:ba:ca:bb:ec:7b:78:b4:fd:22:aa:eb:01:
f6:f9:2d:13:0b:f3:a5:c4:9f:70:28:59:a9:96:4a:27:f6:a1:
ec:38:05:1a:89:30:32:57:ab:92:c9:97:f9:20:d9:63:53:4c:
f8:7c:c2:de:74:44:ee:62:32:0f:0d:e9:0e:6b:0d:81:79:a4:
bb:3b:11:fc:96:3e:e8:46:a7:4b:58:7d:6d:f5:4c:7b:82:23:
55:36:57:d7:d8:3f:f9:88:d0:60:6c:3f:c0:34:a7:35:ce:ce:
fe:6c:eb:22:ff:96:a8:00:f2:5e:3a:9e:94:4e:9b:6f:8f:f8:
f9:93:2c:5c:c0:a8:2d:36:92:92:ef:b0:b6:e7:10:4a:91:6f:
75:82:20:e8:09:ae:93:5b:ab:cb:e6:e7:b6:8a:26:15:42:de:
01:c2:7e:32:cf:69:65:78:e5:6b:2f:53:b1:79:9a:60:15:44:
4d:8b:2e:bc:98:73:ad:97:99:e0:6c:90:e9:47:3e:d7:a6:f6:
37:2a:bc:2d:eb:e6:00:87:52:9d:47:d5:75:b7:56:3b:52:e7:
60:2c:97:35:91:2c:b7:e1:20:f2:63:6e:ad:a8:a7:af:89:ef:
9a:c1:ad:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:58 2026 by rpki-client