Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145135.roa
File: AS145135.roa (raw, json)
Hash identifier: Q8/GRx4yyEjG7PvMyW9LmpW/zUG/1chtnVFRlYeeSXU=
Subject key identifier: 99:AA:8C:80:5E:3D:D7:27:7A:6F:5F:21:34:B2:56:BF:34:1B:08:AE
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6ABD8B4777A0B49954812B878513AB41E5177623
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145135.roa
Signing time: Tue 26 May 2026 01:13:16 +0000
ROA not before: Tue 26 May 2026 01:08:16 +0000
ROA not after: Tue 25 May 2027 01:13:16 +0000
asID: 145135
IP address blocks: 240a:a9b5::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6a:bd:8b:47:77:a0:b4:99:54:81:2b:87:85:13:ab:41:e5:17:76:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:08:16 2026 GMT
Not After : May 25 01:13:16 2027 GMT
Subject: CN=99AA8C805E3DD7277A6F5F2134B256BF341B08AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5f:24:95:49:55:0c:ef:ce:e9:2c:7a:1f:27:
21:9f:5b:a5:4e:16:a7:4b:2d:27:2a:a9:ff:86:7c:
ef:d0:53:fd:a0:ee:8d:90:04:8c:06:35:54:c6:e6:
23:29:56:78:2f:19:f4:18:6b:a3:47:50:52:ff:6c:
49:17:f2:1c:0c:11:94:ed:c8:f2:c0:9e:18:95:5e:
13:d6:b3:ad:1f:59:68:1c:86:99:f1:46:2d:bf:6e:
85:5a:d7:f4:75:ba:1b:b4:01:fb:47:1b:fc:16:ce:
22:03:3f:a4:09:c9:fb:4c:20:3b:10:2b:e0:93:35:
66:75:da:85:a2:cd:ef:88:a6:46:13:76:55:36:a0:
8d:f3:33:a2:e5:b3:61:1c:d9:50:50:42:79:72:ad:
d2:53:78:ca:41:70:be:23:19:f0:55:e7:d2:2d:74:
22:a1:d2:7f:89:99:9f:a2:e6:6d:f3:d8:cd:d9:6c:
cc:f9:f0:33:5d:40:ca:47:d0:16:49:2d:ae:84:c5:
25:2a:77:0d:10:a7:be:0d:d1:24:96:4d:4c:14:b7:
b2:7a:38:3a:85:d8:f2:a1:c9:d9:a1:b0:8b:10:9c:
c2:98:f9:e8:84:d8:37:08:6d:fe:1e:8d:43:84:a3:
b3:ac:f0:d3:c1:6e:0a:7a:06:6e:2d:ae:90:c0:6c:
44:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:AA:8C:80:5E:3D:D7:27:7A:6F:5F:21:34:B2:56:BF:34:1B:08:AE
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a9b5::/32
Signature Algorithm: sha256WithRSAEncryption
41:99:ec:e9:19:1d:e3:b7:7c:44:92:86:38:80:9d:0e:ab:90:
68:21:d5:51:68:2c:c0:5a:75:80:76:e1:9d:65:bf:19:0e:ed:
75:6d:14:f7:2c:2c:aa:38:71:fc:88:2e:35:26:5f:22:f5:a0:
a9:5b:db:f5:62:5c:db:2b:5e:f3:9e:23:cc:0c:7a:e2:48:3a:
1a:e4:6d:01:52:10:78:f8:1d:e1:76:7e:5e:9a:c1:95:ca:51:
56:ba:97:46:25:4e:ac:71:bd:1f:b6:11:96:93:c9:fa:07:d6:
80:12:fa:5b:8c:ac:73:12:5c:da:37:20:14:73:1c:e8:dc:a3:
83:5f:ec:fc:dd:1b:70:40:f5:6b:7c:83:54:a9:4c:84:9e:4d:
8e:cf:dc:01:8b:dd:3b:ee:e7:51:21:18:3f:21:f6:e3:6e:fe:
ec:ec:5b:66:35:29:dc:40:6f:14:ec:29:31:5b:f9:f0:1a:7c:
a2:c7:38:6d:f5:de:c1:e0:17:90:a5:d7:3c:e4:b5:60:ad:8e:
64:75:df:d3:fd:14:f6:40:c3:ac:e5:71:99:9c:75:9e:e8:47:
95:48:08:4e:08:92:60:e7:9e:38:a2:73:b9:51:40:4c:74:15:
10:c7:9a:c5:70:03:46:b2:9d:0a:7c:21:8f:8f:49:f5:10:e9:
4e:df:50:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:40 2026 by rpki-client