Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145171.roa
File: AS145171.roa (raw, json)
Hash identifier: vaLK3CAD4oVQFYFRPHBHsV5Zp9lkGEKElbRfOSb1nCk=
Subject key identifier: 38:49:6D:30:65:CC:B8:88:48:96:BA:AF:27:88:DB:D1:7C:F5:6D:B2
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0EB833335B33A9209904337E25EE87D4EA347817
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145171.roa
Signing time: Mon 25 May 2026 01:19:57 +0000
ROA not before: Mon 25 May 2026 01:14:57 +0000
ROA not after: Mon 24 May 2027 01:19:57 +0000
asID: 145171
IP address blocks: 240a:a9d9::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:b8:33:33:5b:33:a9:20:99:04:33:7e:25:ee:87:d4:ea:34:78:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:14:57 2026 GMT
Not After : May 24 01:19:57 2027 GMT
Subject: CN=38496D3065CCB8884896BAAF2788DBD17CF56DB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:1c:b2:f7:8e:5d:95:04:11:37:42:86:bd:47:
35:75:76:86:8e:1b:9b:2c:b3:e1:42:32:a8:56:96:
30:61:bf:84:64:29:f5:67:46:b8:3b:3c:ae:c3:9d:
ed:df:36:d2:7a:6d:69:c8:a5:cb:73:70:53:44:5d:
83:12:80:fe:da:68:de:47:00:21:c3:35:00:89:b6:
e8:25:1d:c5:86:08:e0:5b:3b:14:7f:f3:f5:63:ce:
7c:c6:92:92:27:1a:f8:3a:f6:7e:8e:5f:11:d0:b7:
24:3d:d4:d5:5c:b5:93:f1:fb:d7:38:ef:28:c1:66:
e1:0e:c5:ee:81:c7:83:43:7d:f7:ef:6e:fa:fa:c2:
c3:0c:3d:e0:94:19:d3:19:e4:77:a9:3c:2d:e6:fd:
27:5a:be:76:77:d4:12:27:6d:0e:90:a5:f9:8b:5e:
58:26:5b:dc:33:54:1f:00:b5:9e:99:49:03:6c:ad:
c7:0e:df:4e:35:ff:fb:35:33:4c:87:9f:0e:2d:59:
50:59:1f:19:c0:8f:42:8b:eb:0a:77:20:8a:bf:e2:
6b:95:90:e1:f8:5d:b4:83:c1:0b:f7:8d:b9:af:f3:
0e:7b:2f:89:22:1f:df:c4:64:f5:a7:69:87:78:6a:
1c:b2:c9:c4:34:d0:22:27:47:6e:c5:88:fd:95:14:
f8:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:49:6D:30:65:CC:B8:88:48:96:BA:AF:27:88:DB:D1:7C:F5:6D:B2
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145171.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a9d9::/32
Signature Algorithm: sha256WithRSAEncryption
34:7c:32:c7:00:1c:05:e4:c1:6a:e7:e6:cb:9a:62:59:4f:9d:
b2:89:67:1b:fb:e3:84:dd:c2:12:9a:fb:6a:3a:d8:f9:ab:67:
4a:52:90:65:92:05:87:98:4c:14:9e:55:be:03:17:5f:2e:62:
55:59:47:e9:1d:7b:e4:ba:a6:91:12:4e:91:d8:34:0d:98:40:
98:88:f2:af:4a:41:79:bb:26:93:2f:46:d0:72:18:66:56:b7:
30:a2:aa:92:dd:36:bd:69:64:98:83:01:8e:1d:ac:d2:8b:b8:
b5:3c:e4:b8:e2:33:d6:5e:06:97:dd:bb:f9:21:b1:4b:a3:70:
aa:e3:40:ca:d2:0d:ad:46:8b:cf:18:97:47:51:a1:c1:0c:fa:
3e:de:eb:5a:81:c3:33:fc:d6:72:18:89:d8:22:8b:92:76:0c:
10:b2:43:ba:1b:8e:ec:8e:87:a7:d0:f3:62:9a:c3:09:69:26:
5b:48:24:c8:e0:46:a0:b5:4c:5c:7b:72:62:e5:df:16:33:28:
38:ca:8b:61:ae:19:31:99:81:4e:19:92:6e:e3:2f:5f:37:e5:
58:e8:38:f6:89:86:a3:ac:aa:79:78:07:0c:63:d2:a1:a7:31:
85:27:38:99:4c:26:16:18:f0:aa:ba:17:e4:7f:ed:41:90:61:
85:0b:7a:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:33 2026 by rpki-client