Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145189.roa
File: AS145189.roa (raw, json)
Hash identifier: FhTxAD+jKyIpXfacrktdeCWBPRP+v0nqy2VWDeU0GdI=
Subject key identifier: 46:1C:0E:44:C3:E5:0F:A2:AF:84:84:4B:65:B6:BC:68:53:D0:39:9E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 43DF6F175BA599DC7A0745B0A3C395FE3D17B9BA
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145189.roa
Signing time: Fri 22 May 2026 01:50:09 +0000
ROA not before: Fri 22 May 2026 01:45:09 +0000
ROA not after: Fri 21 May 2027 01:50:09 +0000
asID: 145189
IP address blocks: 240a:a9eb::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:df:6f:17:5b:a5:99:dc:7a:07:45:b0:a3:c3:95:fe:3d:17:b9:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:09 2026 GMT
Not After : May 21 01:50:09 2027 GMT
Subject: CN=461C0E44C3E50FA2AF84844B65B6BC6853D0399E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ab:05:3f:10:0e:ec:4f:88:f3:87:4f:09:33:
24:06:e8:a1:3d:ef:7e:5c:85:a5:be:9b:1e:54:f1:
6d:a8:b3:e9:1a:83:97:37:11:97:c8:98:86:b0:19:
93:6f:c6:ba:24:2b:6e:12:65:a0:fa:ba:90:97:8f:
15:70:d4:9a:b2:16:82:b5:95:86:13:95:83:7b:1b:
18:23:10:da:72:56:27:fc:f7:d1:15:ae:2d:99:5a:
a7:e6:9a:85:24:5a:87:01:af:01:f4:95:20:55:e2:
5c:92:df:a6:4a:fe:4d:03:24:cc:2a:7e:48:ed:d0:
c1:e7:41:d1:0c:23:97:40:c2:fe:85:04:4a:e9:d9:
72:31:00:0e:aa:fd:5d:42:d3:3e:a6:a9:9a:44:e4:
eb:38:38:4d:62:2c:fb:c8:b1:57:a4:93:8b:64:4d:
a5:3d:3e:d5:ec:e9:88:14:02:0a:59:49:80:5e:3d:
4b:f7:cf:bb:52:0f:14:bb:8b:6b:d7:43:86:6c:fb:
eb:f3:a2:4e:05:39:a9:2b:93:fe:bb:48:82:3f:c1:
1d:73:02:83:0c:86:4d:68:d3:f5:2b:f9:9a:ce:94:
41:f6:a9:93:e8:94:cf:14:31:90:2e:83:26:d0:59:
b8:e7:ce:f5:e0:e4:fb:07:33:49:bc:d5:46:69:32:
8b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:1C:0E:44:C3:E5:0F:A2:AF:84:84:4B:65:B6:BC:68:53:D0:39:9E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145189.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a9eb::/32
Signature Algorithm: sha256WithRSAEncryption
45:a7:58:3d:fa:52:36:42:64:b3:67:f8:bd:37:9f:34:6f:c5:
a6:46:f2:b7:1e:df:ec:40:37:6d:19:56:4f:a0:71:57:01:e7:
ca:97:6f:07:b8:09:e1:fd:9a:29:a7:a6:c0:91:6f:4a:c6:48:
0e:7d:62:b3:2a:d7:e1:fa:de:da:e6:43:6c:93:00:57:94:f5:
c2:db:e0:3c:fa:4f:2c:19:52:2c:c5:76:29:bf:34:ad:07:d0:
72:69:4d:87:23:c8:f8:62:14:a5:1a:e0:5f:fc:ad:62:8f:a9:
e1:3d:60:42:29:e0:99:56:a7:71:b0:20:21:ba:ea:fa:24:e5:
e8:45:19:3d:c1:28:9c:cf:65:2a:4f:ec:c1:8c:a3:eb:b7:53:
1a:45:36:93:d7:6a:51:3b:23:1f:b7:45:f3:f0:f7:82:fe:10:
2f:a5:f9:95:17:1a:20:73:9d:99:d3:6e:50:5e:6c:60:85:00:
2e:ae:53:d3:9d:44:a2:95:dc:da:3a:56:7b:13:1a:ef:92:c1:
5f:4d:88:0a:46:24:99:56:ad:22:cc:37:4a:3c:fd:4e:86:d9:
94:b7:03:89:68:5e:e9:c5:c4:6c:f6:28:da:dc:e4:34:05:0a:
0c:39:3b:4f:ea:c4:21:8b:33:be:35:8a:18:94:89:16:29:3c:
af:15:ae:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:27 2026 by rpki-client