Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145148.roa
File: AS145148.roa (raw, json)
Hash identifier: 3GZ9HG4q2IoN7QlIHnMXgWrnFNKCjrpY91NmIbCd9IQ=
Subject key identifier: 8E:2A:F6:41:CB:79:C9:D2:19:2A:F7:57:C8:A9:78:AF:EA:33:55:54
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4F68FD5299CB21F65335365D2967F4131670B323
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145148.roa
Signing time: Fri 22 May 2026 06:05:17 +0000
ROA not before: Fri 22 May 2026 06:00:17 +0000
ROA not after: Fri 21 May 2027 06:05:17 +0000
asID: 145148
IP address blocks: 240a:a9c2::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:68:fd:52:99:cb:21:f6:53:35:36:5d:29:67:f4:13:16:70:b3:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:17 2026 GMT
Not After : May 21 06:05:17 2027 GMT
Subject: CN=8E2AF641CB79C9D2192AF757C8A978AFEA335554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2c:d6:77:cc:cf:54:9c:0a:40:a5:6f:8c:d0:
49:4d:28:21:30:6b:e2:b2:5a:86:1e:cc:fa:91:fa:
dd:9b:c2:c3:dc:a0:1a:79:ed:e6:7a:db:17:bf:2f:
0e:d3:f4:79:16:93:e3:a9:ae:c1:2b:15:b0:37:60:
9d:56:03:42:cd:91:ef:e4:ff:e4:4b:6a:57:32:c5:
07:00:35:1b:80:cb:f1:47:46:f7:d4:17:42:0e:24:
87:8b:b0:c0:09:11:f5:ca:a9:a6:13:4c:b9:04:68:
a2:34:d3:e4:c7:30:fa:b0:df:45:2e:cc:4b:e2:60:
e2:00:f0:89:18:d3:84:33:e7:df:a3:03:ad:56:f4:
b1:fd:27:34:53:14:33:25:c2:ee:e0:17:e4:05:5e:
c4:74:72:22:ae:59:bc:e5:01:54:d2:09:f0:ca:8e:
00:1c:4f:bb:a8:aa:bc:26:db:a2:18:54:9b:8a:e0:
48:9a:1b:2f:5a:22:60:72:d9:2e:d7:6a:80:3e:21:
ff:06:0a:34:c7:9f:bc:c9:70:bc:96:01:e9:f5:ad:
36:44:fc:0a:f0:51:69:5a:41:4a:73:03:a2:57:81:
30:d4:ab:67:aa:43:83:81:92:33:bf:bd:f9:1a:c5:
b7:eb:4d:4f:35:25:cd:76:03:56:d9:6a:3e:d7:42:
cb:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:2A:F6:41:CB:79:C9:D2:19:2A:F7:57:C8:A9:78:AF:EA:33:55:54
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145148.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a9c2::/32
Signature Algorithm: sha256WithRSAEncryption
75:80:02:61:60:22:88:44:b8:be:55:7d:dc:fa:6c:ad:1d:75:
f8:8c:6c:bf:3d:37:1c:0a:fc:ad:c3:59:df:22:f4:25:2d:5e:
9e:14:37:16:ba:de:47:f5:4f:89:be:72:c8:1b:8a:ec:39:0b:
a3:48:b4:70:f0:6d:e8:10:df:6b:9c:c7:88:83:64:df:3a:1c:
4e:f2:f7:8b:86:01:5a:54:09:dd:f6:aa:09:45:32:26:b9:62:
66:9b:6a:28:ee:e2:fc:77:73:1c:02:30:8d:00:17:0c:24:e0:
70:4c:08:4a:e6:b6:97:ce:b6:98:94:52:44:00:0c:01:05:73:
56:e7:06:dc:7a:1f:a4:e6:78:4e:cb:03:c1:ca:23:79:0c:7c:
b7:cd:2d:40:8d:64:9c:02:aa:46:17:23:01:a3:a1:88:06:77:
90:17:f8:94:31:8b:ad:d3:3f:4e:a4:de:4d:e5:f2:7b:a7:07:
de:c1:05:0d:8c:f0:55:98:fc:72:cb:83:89:5b:9c:9e:8c:e0:
83:7c:49:3f:5f:e7:fe:10:b7:cc:96:82:97:2d:ca:14:cc:7f:
a1:7f:a1:db:a2:63:aa:6a:ef:bc:ca:de:31:d6:b7:e5:7a:21:
a8:47:f8:a1:a3:14:b6:79:ba:c5:ae:39:42:bb:5c:5d:3a:71:
d0:e2:c3:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:50 2026 by rpki-client