Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145147.roa
File: AS145147.roa (raw, json)
Hash identifier: uCTb9SMQrigd1Vwkgc2+12MjtWzhryguSogxNTTXde4=
Subject key identifier: 68:C6:4A:B1:F4:B5:0E:D0:82:7C:D6:53:91:77:10:E0:D6:55:B5:E4
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 47A0A86886957429E78500D1194FC53F56E8B1BA
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145147.roa
Signing time: Mon 25 May 2026 01:51:05 +0000
ROA not before: Mon 25 May 2026 01:46:05 +0000
ROA not after: Mon 24 May 2027 01:51:05 +0000
asID: 145147
IP address blocks: 240a:a9c1::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:a0:a8:68:86:95:74:29:e7:85:00:d1:19:4f:c5:3f:56:e8:b1:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:46:05 2026 GMT
Not After : May 24 01:51:05 2027 GMT
Subject: CN=68C64AB1F4B50ED0827CD653917710E0D655B5E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6a:6f:28:90:8f:83:cb:c1:d9:48:70:67:47:
6e:87:ff:42:29:9f:c3:d9:b5:f3:e6:6d:1c:55:44:
3c:54:9f:bb:1e:50:c1:a0:03:91:d8:90:ce:2c:34:
71:e0:81:06:41:e1:eb:d2:76:09:b7:13:2d:9f:da:
69:c9:c5:55:1b:6d:89:eb:e3:23:01:58:24:34:1e:
cb:57:4f:e9:9a:83:f4:4b:6f:8c:39:0b:25:6b:d8:
f2:2e:6e:96:35:03:07:8d:0d:ee:1a:03:39:f4:30:
06:0d:09:1c:2b:87:06:52:3d:dd:c1:f9:2f:3b:5d:
84:02:da:18:23:d7:93:80:bd:5d:70:3e:4a:47:00:
8e:bb:30:64:ab:97:90:c3:e4:74:45:b5:34:a0:92:
34:79:4b:43:c8:c7:06:16:b1:e6:ac:d1:fb:70:c0:
1b:6f:af:a0:e9:54:79:ed:75:96:14:a4:75:cf:c2:
eb:4f:c4:d9:85:76:53:7f:42:2e:35:b8:27:b9:2c:
c0:d6:6c:93:d3:1a:c5:49:22:df:e4:6e:b9:8c:a2:
0d:06:ed:4f:18:76:e4:43:4e:ec:b5:e6:6a:f9:bf:
eb:b9:53:36:25:52:2b:bc:f3:77:d8:f5:8f:44:b3:
e0:e9:fb:96:92:66:a9:1e:55:5a:00:ea:fc:7a:fb:
03:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:C6:4A:B1:F4:B5:0E:D0:82:7C:D6:53:91:77:10:E0:D6:55:B5:E4
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145147.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a9c1::/32
Signature Algorithm: sha256WithRSAEncryption
a3:08:eb:5d:40:97:95:12:0d:3a:6f:03:76:4b:c7:70:0b:f7:
62:1a:e4:9b:0b:1f:aa:0c:c6:fb:98:3d:f3:9c:3b:4c:df:69:
29:be:25:d6:8c:9a:24:c4:1b:74:3d:dd:0c:a5:f8:dd:ce:a8:
29:8e:cf:79:e8:fc:f0:fd:ec:11:07:d0:ce:27:a9:4f:df:cc:
a6:13:94:1e:4f:c3:00:cf:71:52:58:01:d5:d9:72:29:da:73:
a0:17:83:f8:8d:2b:06:06:22:4d:b9:1b:e7:15:f1:4d:ea:f1:
65:fa:bf:ef:f4:56:8b:96:99:30:db:22:b8:b0:ac:78:5f:2c:
48:77:23:ad:6e:df:ed:9e:42:25:2a:b2:51:81:cf:9c:4e:80:
90:f0:b7:80:74:b4:54:c5:8e:aa:48:6d:1e:a9:a4:49:8c:13:
b6:d2:bd:ef:7e:85:f6:96:72:9f:76:6b:3c:5d:a5:f6:44:6b:
00:83:f0:91:7b:cb:91:bd:b4:76:6b:54:67:c8:69:e2:c1:86:
0d:3e:eb:e6:30:5e:00:07:b4:21:2c:62:03:58:80:c7:4d:36:
fe:48:50:ed:e8:5a:c1:7e:ef:b7:34:60:97:f6:1d:71:49:e4:
f3:27:ee:66:8d:c4:5b:14:9c:43:ab:f8:4a:aa:7a:01:c3:c7:
b0:0b:8d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:50 2026 by rpki-client