Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145140.roa
File: AS145140.roa (raw, json)
Hash identifier: S0hd6NtWDWy5LFtmn5/DfYWGI+e5+3Uf4UuQWTrwa1s=
Subject key identifier: C7:2A:9E:9C:71:CC:97:09:A9:81:9A:D3:42:54:08:59:94:70:EA:BC
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1587BC84D54BB3486B890BDCDE0FD0E1835C78A1
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145140.roa
Signing time: Tue 26 May 2026 08:52:44 +0000
ROA not before: Tue 26 May 2026 08:47:44 +0000
ROA not after: Tue 25 May 2027 08:52:44 +0000
asID: 145140
IP address blocks: 240a:a9ba::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:87:bc:84:d5:4b:b3:48:6b:89:0b:dc:de:0f:d0:e1:83:5c:78:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 08:47:44 2026 GMT
Not After : May 25 08:52:44 2027 GMT
Subject: CN=C72A9E9C71CC9709A9819AD3425408599470EABC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:dc:4f:f2:aa:c2:d7:c7:ac:6d:0e:8e:02:59:
e1:04:3a:46:04:49:20:c5:11:2f:f5:a7:e8:0d:b1:
67:70:69:8f:9c:16:d7:a7:5c:57:aa:eb:17:dc:ab:
5f:4e:e9:db:a9:7b:76:6a:86:13:3c:9e:a6:2f:6a:
a1:a7:47:4e:2d:a0:e7:82:97:d7:3c:ee:11:bd:84:
73:8b:e7:24:60:0e:2b:c8:58:8d:49:62:59:be:80:
d8:94:3d:3a:bf:53:2a:33:27:e7:78:2d:ed:74:b2:
8d:fd:58:05:fc:a6:8f:a5:7f:e9:61:ca:9a:4a:fd:
c0:12:10:93:45:29:14:49:7a:4b:f2:74:4a:eb:b1:
9c:0f:c5:84:28:e7:36:c8:34:5b:fe:d0:9c:46:5d:
7d:6f:ae:a8:e1:da:16:be:2c:04:15:f7:dd:2c:e1:
c7:c7:cd:13:60:d2:ad:c9:44:be:fa:9b:7e:14:fe:
ab:19:6e:a1:5c:7b:9c:bd:bb:f2:31:53:77:fc:be:
83:76:0b:27:dc:ec:33:73:66:d6:c1:90:4a:32:13:
6f:51:d3:e6:b7:f5:d9:da:01:a2:eb:09:aa:dc:0c:
98:d0:ad:cb:5c:ea:96:03:ff:1d:42:f0:e6:37:c8:
08:94:77:00:15:c3:97:fb:56:c7:34:5a:9a:d9:66:
a8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:2A:9E:9C:71:CC:97:09:A9:81:9A:D3:42:54:08:59:94:70:EA:BC
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145140.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a9ba::/32
Signature Algorithm: sha256WithRSAEncryption
33:3c:88:74:94:7f:e0:a3:fc:f4:07:a5:7d:4f:57:86:ff:e3:
65:5f:0c:85:94:18:20:bb:9e:84:ff:54:bb:46:56:85:47:b8:
ed:da:c0:85:3b:1e:2f:49:a3:09:7c:da:03:18:de:af:28:73:
1a:3b:29:4b:af:c8:66:82:9f:28:da:ad:fd:47:da:05:80:a3:
5a:2a:c1:7d:05:d1:f0:d7:68:9c:b2:df:69:c5:e4:31:82:23:
8f:47:47:7c:40:33:38:43:82:c6:72:15:d8:e9:3a:55:f1:53:
56:8d:8d:1d:29:03:4b:26:da:16:dd:a3:12:2e:c5:6c:4f:fe:
a5:ba:6b:ac:5d:66:00:8e:f0:a8:82:3e:79:85:d3:b8:97:c8:
5b:90:70:aa:3e:f5:aa:8d:c7:c3:21:12:04:d2:41:71:27:13:
9c:4c:67:19:98:e1:6b:96:3b:db:2f:24:22:28:a5:d4:52:b1:
da:c7:fd:3a:61:6d:b5:44:83:44:c1:a7:8e:61:e2:10:04:e4:
0e:79:f2:1b:c9:b0:c4:d3:0a:0a:80:f7:36:7a:9f:ae:ea:66:
5d:50:98:33:c5:d0:bf:1e:9a:4d:8a:07:29:e0:ab:f5:11:97:
8c:4e:19:7b:04:aa:3d:1f:96:41:0c:ee:55:9a:1c:d7:da:d5:
a6:9a:0a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:43 2026 by rpki-client