Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145118.roa
File: AS145118.roa (raw, json)
Hash identifier: 0vMdsk8fzNDri/fAUukETP0lp6WOIQoOb+BbBnmMoHg=
Subject key identifier: FF:FF:ED:9A:65:F0:41:19:75:31:7A:F3:DF:85:29:1E:77:A2:C9:38
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2F55CFD387AB647D16C58817115490976A281388
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145118.roa
Signing time: Fri 22 May 2026 07:41:02 +0000
ROA not before: Fri 22 May 2026 07:36:02 +0000
ROA not after: Fri 21 May 2027 07:41:02 +0000
asID: 145118
IP address blocks: 240a:a9a4::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:55:cf:d3:87:ab:64:7d:16:c5:88:17:11:54:90:97:6a:28:13:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:36:02 2026 GMT
Not After : May 21 07:41:02 2027 GMT
Subject: CN=FFFFED9A65F0411975317AF3DF85291E77A2C938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:24:73:b9:d4:9d:f3:31:31:a1:c6:be:bc:54:
6b:6a:b6:7e:4b:50:df:02:2f:af:c4:fc:4d:64:4b:
57:36:80:20:ff:29:5a:7c:8f:6c:f9:0d:a1:88:98:
49:f4:89:8f:cc:09:66:60:96:be:54:1e:a6:93:4b:
98:f6:ea:0c:34:1c:1d:96:c0:14:e4:23:5b:54:72:
31:92:03:29:94:17:48:0d:db:bf:53:d2:6f:ec:04:
38:8a:d3:44:4b:09:f3:a3:1d:3d:23:00:3d:c2:45:
1f:13:b4:1a:b0:77:49:dd:2c:f0:db:91:c2:2d:11:
58:bb:2e:40:b5:5b:1a:cf:52:07:8c:50:38:3c:d4:
7a:6d:f7:88:13:e7:74:ab:5b:4c:85:67:b4:d6:93:
6e:88:aa:6b:84:74:88:f2:6f:82:90:ac:64:c0:a6:
cc:a2:23:8e:c2:ad:a4:15:72:14:95:93:d1:e1:93:
f4:6e:fe:b0:11:21:24:b4:6c:fb:69:e6:38:61:91:
52:66:d4:4d:c5:31:34:45:0f:36:f0:c4:9f:c7:f5:
82:b4:17:88:9b:49:bc:01:a8:67:34:de:df:75:9f:
e2:ef:25:f1:81:48:f9:26:5b:79:9b:7e:9f:1e:91:
b8:d8:04:56:c2:08:d6:28:eb:62:ae:ed:23:c3:96:
48:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:FF:ED:9A:65:F0:41:19:75:31:7A:F3:DF:85:29:1E:77:A2:C9:38
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145118.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a9a4::/32
Signature Algorithm: sha256WithRSAEncryption
5c:58:aa:18:b7:12:eb:fc:f3:a3:94:9c:39:7f:62:79:2f:cf:
87:70:d6:0d:75:7f:5f:5c:4a:4f:52:7c:66:87:ff:8d:9d:2d:
f4:4d:62:dc:ad:02:42:b9:de:7e:a5:da:37:2b:44:f8:08:69:
75:b0:cf:e3:3e:84:c4:cd:74:5a:74:d9:a0:c0:8c:e7:a2:2d:
0c:70:d4:35:48:f9:5c:2c:63:6a:48:f4:9d:f4:51:26:86:dc:
a3:2b:5e:7f:aa:3b:37:e4:30:95:97:13:4d:39:46:5c:91:9a:
89:fb:70:b0:cc:25:5e:32:d4:cc:62:c5:fb:7f:ea:91:aa:7e:
6f:d4:c0:11:f8:a5:f3:05:94:c1:b2:41:d5:dd:05:98:42:34:
dc:08:7e:c9:f0:b0:34:bd:8e:1f:43:0d:20:7b:2a:76:41:af:
a5:98:9d:5d:76:23:7d:2c:4d:56:8f:f2:b1:d4:66:1f:06:99:
10:dc:4c:d8:a0:19:8f:e5:54:6f:c4:75:28:ed:74:3b:04:bb:
d8:ff:29:05:48:2d:1c:ee:bd:f1:c5:7c:f8:3c:00:f0:e8:19:
ef:2f:59:dd:2b:61:ea:d7:24:b4:bc:98:7b:9c:67:09:61:ec:
fc:1b:40:8e:8c:86:6c:d6:38:74:e7:16:7d:e9:40:e8:6c:0f:
70:b9:5e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:44 2026 by rpki-client