Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145139.roa
File: AS145139.roa (raw, json)
Hash identifier: XJIRaTJ3kQRcYnmSRqGKG+PQ4LpTCG7eQAwJwq3OfSc=
Subject key identifier: 17:59:6E:3C:0A:D8:F8:19:8E:10:B8:11:7A:7A:FA:93:F4:B7:CC:68
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 23ADDF54D34F480E93D5135915138F5379193130
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145139.roa
Signing time: Mon 25 May 2026 06:28:49 +0000
ROA not before: Mon 25 May 2026 06:23:49 +0000
ROA not after: Mon 24 May 2027 06:28:49 +0000
asID: 145139
IP address blocks: 240a:a9b9::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:ad:df:54:d3:4f:48:0e:93:d5:13:59:15:13:8f:53:79:19:31:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:49 2026 GMT
Not After : May 24 06:28:49 2027 GMT
Subject: CN=17596E3C0AD8F8198E10B8117A7AFA93F4B7CC68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:03:0f:ff:ea:75:00:28:7e:de:7e:96:dc:38:
2a:b2:66:6d:fa:dd:ab:31:2a:e9:62:b0:2c:04:b5:
53:8d:05:0b:40:b1:8d:ea:a9:23:4e:3f:e6:2f:44:
4f:15:27:8c:b0:4e:c9:14:a6:e2:ad:5c:c3:fc:ea:
d6:84:b0:2e:d6:77:73:23:fd:49:f4:00:4b:55:98:
0b:42:86:35:59:5d:d7:fb:a9:30:a3:48:0c:a8:89:
31:1c:1d:44:40:b2:4a:16:ad:bf:6c:6e:2f:58:23:
12:76:ce:7e:e3:93:29:40:b1:7c:62:aa:ff:cd:13:
a7:c1:c5:db:74:49:8d:f3:58:25:04:5b:39:51:f5:
81:28:07:28:75:73:ba:72:37:86:27:8d:e5:00:49:
32:22:67:1e:96:9e:24:fe:79:02:9c:2e:45:6e:bd:
4f:95:a9:a0:1f:86:d3:b2:c2:00:b3:ce:8f:92:9d:
3d:64:19:94:e5:11:80:6a:5e:6a:9c:6e:f5:44:02:
4e:61:5f:ef:04:70:d9:ec:a2:07:02:3b:e1:bb:25:
5c:78:38:b1:b4:de:ec:ab:a8:f5:85:e6:99:7a:02:
f6:d1:62:c6:2b:68:1e:a4:83:81:a1:6b:a4:81:84:
26:2f:e4:81:d0:35:8c:5f:57:85:ba:9f:ce:4b:12:
cd:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:59:6E:3C:0A:D8:F8:19:8E:10:B8:11:7A:7A:FA:93:F4:B7:CC:68
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a9b9::/32
Signature Algorithm: sha256WithRSAEncryption
7e:53:05:72:69:a7:7c:74:50:e0:b7:3f:5a:55:bd:12:42:25:
09:a9:a0:51:d2:33:08:2a:86:ac:ca:f5:33:1f:d3:8c:c9:c3:
3b:ea:35:9a:bc:9f:c0:b1:4d:aa:a1:73:d3:f4:d4:7f:50:9b:
6c:6f:4e:be:c5:1d:65:91:c7:02:93:13:77:ca:1c:80:bd:c6:
a3:9d:6b:09:c2:af:21:21:7d:9e:83:f3:f9:59:98:41:45:07:
07:a2:8f:40:e8:43:c5:9c:70:3f:00:e5:4c:7a:29:c9:4f:f9:
e2:4a:93:ba:7d:aa:b4:83:d5:94:8d:ed:51:e1:1e:9b:97:c2:
d5:2e:f2:97:51:46:7b:ee:01:d7:df:7d:f6:75:01:12:b7:7b:
19:14:96:a0:1e:03:b4:3b:23:9f:29:ca:a1:1d:ee:76:63:be:
86:79:59:44:7b:e6:c6:e1:d9:16:72:e7:4c:f0:a7:71:1f:cb:
6c:76:e7:0f:4a:5c:58:20:3b:42:95:91:31:f4:78:cc:6f:47:
8c:7d:52:fc:6f:a4:6e:90:ee:ae:ee:12:fe:60:64:c3:02:07:
2f:6c:22:7b:bc:d1:ac:60:a0:fa:64:fd:e8:26:e2:c6:6d:50:
c6:f4:e2:f9:47:80:8c:0a:72:89:ef:88:4f:26:4c:e2:41:bd:
d8:45:73:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:01 2026 by rpki-client