Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145116.roa
File: AS145116.roa (raw, json)
Hash identifier: ksiXYBZupn3XBj3zkOFDb1FKMGD40xjw6LKj9KA223w=
Subject key identifier: 4C:85:D8:8C:83:18:DD:F1:B4:75:CA:6D:89:AA:65:4C:B6:D8:E8:E7
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 704F77DA20C371DB3A478EB01E327401DDB10783
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145116.roa
Signing time: Mon 25 May 2026 06:28:09 +0000
ROA not before: Mon 25 May 2026 06:23:09 +0000
ROA not after: Mon 24 May 2027 06:28:09 +0000
asID: 145116
IP address blocks: 240a:a9a2::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:4f:77:da:20:c3:71:db:3a:47:8e:b0:1e:32:74:01:dd:b1:07:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:09 2026 GMT
Not After : May 24 06:28:09 2027 GMT
Subject: CN=4C85D88C8318DDF1B475CA6D89AA654CB6D8E8E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d1:c6:ea:fd:69:e8:37:60:51:20:0e:2e:cb:
b0:d3:cd:43:7b:ca:a9:a5:1d:c6:17:b9:67:4a:fa:
16:97:0a:90:14:b8:5b:6d:e0:30:8b:99:20:27:28:
31:31:ff:58:3c:2b:dd:e0:77:2b:98:da:59:7c:8c:
7d:00:21:66:bf:85:90:56:6e:e2:b4:c6:00:2a:fe:
7d:5f:f1:5c:10:c2:eb:43:04:c2:33:28:a9:63:fb:
e6:54:ca:92:15:96:d9:c2:b1:a7:ed:73:a2:bd:4e:
06:02:4c:f6:47:e4:cc:0e:f8:58:2d:23:cc:7a:3b:
39:2d:e7:c3:ff:74:81:9a:20:87:66:df:77:e9:74:
49:ff:5e:8c:b4:bc:b5:95:ee:32:c4:3d:24:bc:7a:
9a:11:f0:02:58:33:03:82:cf:6f:2f:66:03:73:c9:
2a:a7:4e:b9:b5:09:94:e3:85:b1:8c:32:4e:63:13:
f5:00:4d:a2:9e:2f:3c:c7:2c:a9:18:c2:50:5b:85:
30:0e:43:e0:7a:c2:bd:56:03:1b:07:37:a2:1f:8d:
f1:21:01:cb:c4:e4:4b:93:da:22:78:75:06:16:24:
3a:13:6e:10:e1:0b:1e:43:e2:42:d9:d5:d5:84:1b:
b5:fb:0b:15:f7:6a:b8:88:b5:66:52:75:4e:43:47:
5b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:85:D8:8C:83:18:DD:F1:B4:75:CA:6D:89:AA:65:4C:B6:D8:E8:E7
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145116.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a9a2::/32
Signature Algorithm: sha256WithRSAEncryption
49:e8:c2:2b:bd:bf:da:94:79:b9:1d:7d:18:90:50:bf:68:bc:
99:e1:30:f0:a4:79:31:83:60:65:47:98:4b:d5:e1:7f:69:70:
2f:d6:e7:83:e4:51:3d:ef:34:e4:41:17:4b:34:da:6d:d6:3b:
ca:cc:03:8c:8c:3a:f2:62:8e:cc:48:e5:ed:d2:ee:2f:df:f8:
6e:b4:b0:6f:63:d5:84:19:16:9f:ff:ba:1b:d5:61:2a:93:9f:
d4:79:a7:18:ea:b4:59:95:6a:5e:6f:dc:a1:4f:46:34:76:e7:
03:38:af:66:ec:4d:8a:e8:d5:30:8e:ad:48:2c:60:dd:bf:34:
7c:78:df:dd:8d:c8:c3:da:a9:fc:58:1d:4b:89:59:69:d3:f2:
b1:5f:08:1e:ec:d2:61:a6:df:40:57:ef:b1:18:2f:3e:35:24:
4c:80:fb:34:cb:a1:fc:f7:50:3f:99:6d:7c:5f:73:69:70:08:
fc:c5:18:71:1a:9b:36:19:95:04:fa:0e:cd:2f:99:ca:80:03:
e5:fe:b2:1f:29:d6:b2:2b:99:5a:a4:0b:a1:57:ec:bd:62:c5:
32:53:c4:8a:e9:5f:16:07:98:51:c4:3e:60:8d:ad:4b:19:46:
18:96:76:f1:93:29:8d:61:cf:05:bf:ad:65:c8:0e:c5:b5:8f:
a5:f1:87:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:50 2026 by rpki-client