Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145153.roa
File: AS145153.roa (raw, json)
Hash identifier: WCvj/zaW9KCIb+v6pqs1jm7CAkQOrI6zz7UIsN2CWXw=
Subject key identifier: 49:E9:61:3D:8D:AC:C4:7F:5C:18:C6:AA:14:67:A1:70:7D:D2:ED:7E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1981022CB8570DA0467D1B0F6886EDE91556C0EE
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145153.roa
Signing time: Fri 22 May 2026 04:26:54 +0000
ROA not before: Fri 22 May 2026 04:21:54 +0000
ROA not after: Fri 21 May 2027 04:26:54 +0000
asID: 145153
IP address blocks: 240a:a9c7::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:81:02:2c:b8:57:0d:a0:46:7d:1b:0f:68:86:ed:e9:15:56:c0:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:21:54 2026 GMT
Not After : May 21 04:26:54 2027 GMT
Subject: CN=49E9613D8DACC47F5C18C6AA1467A1707DD2ED7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6c:f9:ea:86:d8:b8:00:13:72:8c:b2:47:21:
8b:be:54:8b:1b:d0:a5:7b:fa:be:8c:f7:7b:a6:b3:
60:03:68:78:b7:df:66:a2:f1:0f:18:4c:f1:e6:95:
45:ae:83:89:51:fe:7d:9c:b9:60:1d:b4:53:25:6c:
0e:7a:a1:85:ed:ef:97:93:e4:27:19:63:e2:47:c2:
c9:46:93:3b:d3:6a:54:34:da:39:01:48:87:55:61:
ce:9f:c9:04:9f:20:b9:41:68:90:78:81:74:f7:d5:
9c:ce:f3:a0:e3:ef:ad:e7:51:f5:cf:98:02:1e:d2:
45:61:cd:79:af:4e:61:13:1f:ee:7f:85:c2:d6:24:
a7:62:24:e1:0c:86:a8:ec:04:fd:23:6f:22:c1:94:
99:e7:e4:e0:63:34:a5:ab:39:cf:ae:f7:75:8c:16:
02:34:d7:17:6d:cc:58:1c:e0:d5:ab:7c:b1:bf:14:
5c:5c:c1:ee:a8:19:ad:30:1d:2d:81:ad:d9:c7:ae:
71:fc:8f:0a:89:6a:b9:82:82:0e:e1:44:fc:ce:01:
97:32:da:d3:a8:ec:fd:2b:1d:be:24:38:12:05:b3:
ad:84:de:54:39:21:88:00:e3:17:f4:57:42:79:71:
35:96:8c:19:93:11:b6:0b:0f:29:98:ee:99:a7:87:
27:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:E9:61:3D:8D:AC:C4:7F:5C:18:C6:AA:14:67:A1:70:7D:D2:ED:7E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145153.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a9c7::/32
Signature Algorithm: sha256WithRSAEncryption
55:46:b8:a2:ca:0c:fc:fc:55:e2:ca:f5:5f:37:f5:5f:eb:aa:
3f:7a:ec:31:94:07:4d:fc:ba:36:bd:e7:9c:55:1c:e7:f7:20:
0c:4b:0a:02:c3:0a:50:98:69:94:cc:e3:2a:c7:e9:9b:47:3a:
be:2e:23:e4:eb:fa:d2:0e:28:3f:b9:de:57:54:53:bb:0a:7d:
57:e7:c3:b0:7c:b2:f9:97:10:fe:8d:fe:86:d5:bb:ab:ce:29:
f9:df:04:69:2a:60:46:7d:cc:4f:63:09:f2:ac:63:5f:c3:78:
96:1c:0e:8f:d9:7e:55:9f:f5:90:52:55:f6:d4:1b:2e:33:6c:
8e:e9:e5:52:19:e3:7d:07:39:99:f8:8c:03:16:fb:1e:90:a4:
17:22:34:fe:13:49:e9:19:70:71:94:b7:30:9d:67:02:08:4c:
4a:97:28:69:4a:99:14:0f:92:5a:f8:d7:36:5f:96:15:47:58:
c6:5c:70:ba:08:5b:60:85:1d:c6:e8:fc:9a:82:b8:24:bb:9d:
18:af:3c:25:13:68:b3:09:23:c8:81:ef:cd:31:1d:ab:2a:f0:
a4:82:ef:54:5f:c8:bb:10:e9:fb:e6:50:7c:85:49:94:e0:f4:
9d:5a:9c:a8:b6:c3:12:df:39:3a:35:2e:45:f1:51:62:e4:75:
ad:44:18:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:46 2026 by rpki-client