Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145117.roa
File: AS145117.roa (raw, json)
Hash identifier: NkWdkcDEtnrb0wsEKasxDBLfo9hcVuJBDxK19zy0M/Y=
Subject key identifier: 4B:AC:AC:B1:21:F3:4C:8D:87:96:5D:88:EC:48:68:5C:59:23:52:C6
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3D65BD8A582E355ED0A5F5BF349CA3385A45132D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145117.roa
Signing time: Fri 22 May 2026 07:09:11 +0000
ROA not before: Fri 22 May 2026 07:04:11 +0000
ROA not after: Fri 21 May 2027 07:09:11 +0000
asID: 145117
IP address blocks: 240a:a9a3::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:65:bd:8a:58:2e:35:5e:d0:a5:f5:bf:34:9c:a3:38:5a:45:13:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:04:11 2026 GMT
Not After : May 21 07:09:11 2027 GMT
Subject: CN=4BACACB121F34C8D87965D88EC48685C592352C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d1:a6:9b:48:fe:95:95:10:8f:d9:75:3a:6f:
fc:01:0b:09:a9:f6:6a:35:4b:0b:42:80:17:42:81:
cc:68:26:b5:92:c0:d9:03:36:1f:f6:63:a8:be:87:
77:93:91:61:ca:4e:28:0c:46:13:38:01:fc:b6:f7:
85:f4:24:70:25:47:1a:0b:80:fa:e6:30:a4:34:b2:
f5:cf:33:9c:1e:a2:6b:ff:0f:bf:9d:69:92:a7:c4:
49:ad:ab:f8:5a:bf:cc:e0:5a:46:da:e4:26:95:1c:
c7:c2:af:0a:b9:2f:17:72:ed:1a:1b:9b:d7:12:23:
e5:f2:26:c4:c7:62:8f:7a:51:18:5c:60:e3:f2:83:
68:0e:20:44:b3:dc:f8:37:8e:8f:e4:c9:57:68:25:
24:3e:0b:b6:48:34:df:19:f2:08:21:87:46:9f:18:
a7:f1:01:1e:96:66:1a:c3:a5:0a:f0:8a:db:3c:a3:
c1:08:fc:5f:a9:6a:fd:32:29:e4:00:2c:ae:a8:7f:
86:1a:f5:92:48:8e:ef:62:64:20:4a:bc:45:d2:c3:
d2:a8:17:31:86:77:c2:04:64:b2:71:63:f3:78:f1:
2c:26:29:ab:f1:09:00:b2:57:6f:70:fc:35:d1:f4:
a0:f6:45:bd:b8:3c:66:40:a4:43:96:2e:63:79:af:
b5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:AC:AC:B1:21:F3:4C:8D:87:96:5D:88:EC:48:68:5C:59:23:52:C6
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145117.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a9a3::/32
Signature Algorithm: sha256WithRSAEncryption
a6:54:1c:d8:e9:c7:b4:d2:c3:03:74:a6:2c:4a:38:aa:61:a2:
85:3c:5a:5b:f9:4a:2f:4b:52:5a:76:e1:67:19:68:3d:b9:92:
bb:ea:52:7a:15:d5:3b:90:b7:86:07:2b:2e:e1:55:3a:f6:b7:
a5:f9:d7:92:79:20:4c:d7:9b:7a:3d:d1:d7:39:99:b7:7e:c8:
f8:6c:8f:fa:74:b3:cd:d9:0a:b6:25:f5:a5:b0:43:29:b6:5b:
03:14:1f:03:c9:2c:64:93:9d:31:dd:59:b3:fb:a7:9b:f8:bf:
6a:3f:e1:17:99:c3:76:67:ec:59:d2:d3:10:aa:4c:1f:37:75:
da:86:c2:45:b7:d8:47:91:7e:59:b2:bb:28:87:98:b7:52:e2:
f8:82:15:18:b6:6a:89:2b:ba:75:7b:ab:5c:2f:65:f8:cc:c0:
33:65:da:8a:d3:10:ee:4e:38:e8:4f:98:b4:23:69:ec:a5:2b:
50:eb:4d:28:36:85:3c:1b:8b:5d:d0:b8:02:56:43:ce:7c:d8:
92:71:aa:79:ba:5e:7c:fb:3e:2a:0d:32:73:ee:d0:23:d1:36:
18:f5:bb:9d:bd:a6:81:7f:aa:a1:23:b7:f9:7b:a2:2c:8b:8d:
29:54:56:9e:d4:69:94:03:82:76:8d:c4:c9:90:85:39:30:8d:
70:78:b0:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:58 2026 by rpki-client