Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145161.roa
File: AS145161.roa (raw, json)
Hash identifier: WeMXgp+dIreTEc0khaHfdxti6UyU+huRU6S9o+Jv9TU=
Subject key identifier: B9:41:3F:39:0A:22:3D:63:15:80:92:25:3F:15:4C:98:17:9A:DC:50
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 78DCB711CFBF7596FB1FE39FFC3653D3CC4114EC
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145161.roa
Signing time: Tue 26 May 2026 01:13:28 +0000
ROA not before: Tue 26 May 2026 01:08:28 +0000
ROA not after: Tue 25 May 2027 01:13:28 +0000
asID: 145161
IP address blocks: 240a:a9cf::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:dc:b7:11:cf:bf:75:96:fb:1f:e3:9f:fc:36:53:d3:cc:41:14:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:08:28 2026 GMT
Not After : May 25 01:13:28 2027 GMT
Subject: CN=B9413F390A223D63158092253F154C98179ADC50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3c:07:6e:00:2e:ed:a0:bb:ae:50:c5:e8:a2:
0f:73:3f:7a:71:e5:f0:7f:c0:95:36:c7:c6:ef:e1:
d9:4c:de:26:22:0d:ee:9a:64:3c:ba:63:56:e6:f6:
b0:5a:b9:60:5e:20:37:a0:a5:89:f0:16:bf:4a:94:
c2:84:c5:ed:c4:e1:65:30:fa:39:26:7d:6c:52:61:
3e:2e:47:22:68:9f:62:3b:7a:e4:61:ed:6d:ec:d5:
52:7e:4c:f2:38:f4:7e:ed:1e:f5:a6:3c:26:55:62:
4e:ec:a5:30:7a:a8:e0:36:49:9f:aa:71:fd:14:7e:
89:98:09:48:61:c9:85:e5:a5:0e:ca:f9:e3:ed:9a:
5b:5a:cf:43:76:db:e5:c3:80:1c:35:3c:1c:65:ac:
71:24:50:6d:de:22:bb:fb:96:57:28:bf:49:ab:93:
77:93:82:e0:ac:c0:6b:47:1f:31:8c:1c:ef:d1:73:
e5:bd:56:b1:99:a3:89:b7:43:0d:15:0b:d4:51:30:
86:b5:72:a8:99:df:95:0b:25:8d:4d:56:00:88:18:
99:9e:f8:45:2c:47:e2:00:02:ee:a6:20:cb:9b:a0:
49:02:55:da:00:a6:4d:c6:d5:45:52:87:fc:82:a5:
ac:7b:aa:c2:c3:14:8d:a9:0f:1f:11:8e:15:ea:ac:
f9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:41:3F:39:0A:22:3D:63:15:80:92:25:3F:15:4C:98:17:9A:DC:50
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145161.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a9cf::/32
Signature Algorithm: sha256WithRSAEncryption
05:59:1a:57:8b:a9:ce:c4:1a:a0:80:6f:28:a9:c8:88:82:bf:
5a:65:f4:d8:8d:1f:bd:0b:b9:29:08:d7:87:59:de:e8:9b:f3:
b9:ce:2d:67:cc:e1:52:ce:ce:70:de:fe:b1:9c:63:92:8c:b0:
06:5d:74:14:38:b0:6b:eb:f6:aa:4c:c3:13:0a:fa:f7:a8:a5:
78:03:a9:1f:94:c8:a4:f5:4e:a6:6b:12:7c:2a:49:85:98:b5:
79:20:29:25:6e:d6:32:ed:c1:06:7b:b6:78:7b:a4:df:72:f2:
c4:db:f1:43:a0:71:2a:2b:30:5d:8b:05:0e:64:6e:00:af:c8:
33:9e:23:8d:e5:c6:58:f2:6c:8b:19:d1:2d:a4:8f:f6:d9:25:
82:ba:5f:18:ed:82:cb:f8:c1:c9:95:d6:fa:b7:2a:7c:de:6c:
b1:71:65:bb:1b:5c:b4:60:de:49:b2:73:8d:79:f4:44:36:e6:
4b:4a:8c:ed:56:70:e6:30:3c:f1:9a:d0:84:c1:90:0f:b1:8c:
43:87:c0:11:85:9f:b4:1d:d3:16:25:80:ab:34:bf:7d:2a:c0:
89:ce:c7:2d:c1:15:cc:50:bf:e2:46:52:43:01:0d:35:13:53:
46:a9:ee:0d:8a:12:82:1c:f5:55:bd:e8:0c:17:04:78:29:1a:
42:51:70:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:49 2026 by rpki-client