Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145149.roa
File: AS145149.roa (raw, json)
Hash identifier: bk7m+bBEqWBZ9R2iz5GSOsFHOE8vLPeL+nJ+K+wNk5I=
Subject key identifier: 41:E3:23:58:2A:47:99:61:34:55:FA:89:9B:44:41:CA:72:E5:0F:F9
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0EB177B968712EE6D905D129EF036F80FDFC6107
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145149.roa
Signing time: Fri 22 May 2026 04:27:00 +0000
ROA not before: Fri 22 May 2026 04:22:00 +0000
ROA not after: Fri 21 May 2027 04:27:00 +0000
asID: 145149
IP address blocks: 240a:a9c3::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:b1:77:b9:68:71:2e:e6:d9:05:d1:29:ef:03:6f:80:fd:fc:61:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:22:00 2026 GMT
Not After : May 21 04:27:00 2027 GMT
Subject: CN=41E323582A4799613455FA899B4441CA72E50FF9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:b9:90:b9:20:58:b0:1e:19:27:13:22:25:d9:
ea:3c:cd:e8:ff:76:89:f1:1b:13:e3:23:80:bb:8b:
7a:83:ad:99:79:15:65:85:af:92:38:2f:ad:77:66:
68:0a:be:ca:d7:5e:dc:09:95:60:68:3c:dd:2b:cf:
96:e0:7c:f3:ec:5f:d6:16:94:cb:2b:1b:ef:24:ea:
64:ec:ea:62:b7:ba:8d:a4:e6:60:48:2a:fb:63:b0:
87:72:bb:13:c5:61:09:29:22:45:cf:b5:a1:b1:60:
70:89:c5:e7:1b:bb:e1:3c:be:81:37:81:ae:6b:d0:
33:ad:3a:c9:40:f3:4b:08:8f:30:2d:44:f0:30:ac:
70:e1:4a:7c:b9:1d:ad:eb:da:be:82:54:e6:ac:01:
f2:b6:b7:ca:5d:fb:e2:9a:dc:ff:3d:33:17:44:bf:
e1:b1:77:9a:8e:c3:17:fd:dd:2f:60:43:f1:fe:69:
35:48:64:53:3d:08:6f:33:74:8f:7a:d4:59:49:ba:
42:5a:97:78:47:25:48:f5:e8:81:de:85:13:ab:62:
63:b7:0d:78:71:38:89:f1:bc:58:21:03:66:e7:47:
bd:c8:ac:0b:21:b4:83:8a:ac:21:b6:37:88:65:75:
2c:db:de:a0:fe:32:83:67:94:95:8b:77:84:47:53:
7a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E3:23:58:2A:47:99:61:34:55:FA:89:9B:44:41:CA:72:E5:0F:F9
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145149.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a9c3::/32
Signature Algorithm: sha256WithRSAEncryption
8d:92:1e:da:a7:ca:96:8f:20:85:85:4e:15:f2:72:77:19:17:
c8:52:2f:cd:6e:57:3d:c6:1a:5e:9f:23:a6:3a:0a:2d:f4:d2:
fa:38:0e:b9:6d:a9:70:b7:5a:2c:11:43:83:1d:41:47:69:71:
a9:66:58:a8:42:90:f5:af:43:f9:93:08:0b:b6:f8:6b:41:60:
9d:89:46:cb:f2:0e:eb:e8:a9:93:21:7d:2a:d1:07:87:a2:40:
fd:ea:fe:0d:c3:5b:07:92:a9:9f:7f:13:aa:58:e7:e6:0e:63:
cd:24:ca:de:21:ab:cc:2f:04:66:3a:82:38:04:ad:98:0e:23:
e0:65:70:94:3a:16:11:b6:0f:62:ec:5c:38:d0:79:e4:82:55:
d6:b6:59:99:72:b6:d6:9c:99:e5:22:a7:63:90:a4:9a:f3:b0:
57:75:88:bb:34:41:a7:b6:d2:de:f9:f1:97:47:0a:1a:2a:36:
39:40:d7:f0:a6:c2:62:22:e1:50:af:9a:45:60:d2:14:e5:00:
b0:27:d5:47:ac:85:63:25:4c:92:dd:c8:78:cc:57:9a:f6:06:
2f:eb:77:46:35:12:53:d4:37:c7:9b:d6:8a:61:e3:bf:d6:43:
16:0f:a2:56:15:5f:e3:ff:74:d5:ec:85:23:d2:49:9d:1f:ac:
f9:32:d7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:57 2026 by rpki-client