Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145198.roa
File: AS145198.roa (raw, json)
Hash identifier: zn01YqNS5poEt2a5OAKMkXcIIGFzoO884OXsVrZQwEw=
Subject key identifier: 01:C3:84:45:57:AF:6F:A2:6B:F3:DB:5E:7E:71:7A:F3:76:60:AD:25
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7975D2A317468AD88B735264A5895FE5340B6F23
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145198.roa
Signing time: Tue 26 May 2026 06:30:54 +0000
ROA not before: Tue 26 May 2026 06:25:54 +0000
ROA not after: Tue 25 May 2027 06:30:54 +0000
asID: 145198
IP address blocks: 240a:a9f4::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:75:d2:a3:17:46:8a:d8:8b:73:52:64:a5:89:5f:e5:34:0b:6f:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:25:54 2026 GMT
Not After : May 25 06:30:54 2027 GMT
Subject: CN=01C3844557AF6FA26BF3DB5E7E717AF37660AD25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:30:17:64:95:bb:26:4e:36:b5:d3:9c:53:5e:
4a:8b:5f:37:c5:53:a9:9b:ce:57:55:32:cc:7c:36:
6b:2b:14:9a:f5:cc:a5:98:b6:11:35:32:e7:a1:d4:
29:df:62:26:5c:a7:c0:9c:a2:81:09:e4:1e:53:e1:
c2:f9:ea:87:d6:e3:76:5b:1a:13:c6:f1:ed:43:ab:
31:2a:2f:b7:16:c3:94:1b:ff:45:cc:dc:e5:90:df:
bb:e3:37:32:40:c4:ca:3c:3b:7f:ad:97:93:2c:2c:
de:ad:f4:01:af:a1:23:fc:96:3d:01:68:d4:89:dd:
3d:1c:03:6c:78:99:1c:bc:73:ce:76:2c:37:80:2f:
8e:6c:0f:39:b2:8c:12:2e:82:bd:55:b9:28:33:7a:
5a:2f:7e:4a:fe:36:71:cf:2d:e8:a9:7f:0d:1c:14:
6b:7b:87:5f:74:37:0a:be:d8:99:af:ac:26:fc:bb:
81:3e:30:c4:57:0b:95:cd:d2:51:59:b9:60:2a:c6:
40:83:4d:0a:2d:4e:fb:32:07:96:0a:17:2f:72:7c:
c9:0c:67:fd:a5:5a:52:6a:4d:2e:bb:a8:ce:2c:f8:
55:37:4f:c9:6a:3b:bd:e7:2e:90:4f:f5:19:40:f2:
c6:f6:78:b9:bc:d8:5f:b7:7b:c3:f3:ed:ff:4f:e9:
64:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:C3:84:45:57:AF:6F:A2:6B:F3:DB:5E:7E:71:7A:F3:76:60:AD:25
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145198.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a9f4::/32
Signature Algorithm: sha256WithRSAEncryption
29:75:28:84:30:08:1b:20:32:48:98:e3:25:93:8f:e1:dd:cc:
e6:1b:79:b6:c1:cd:cb:46:0c:45:86:50:4d:91:9f:af:bf:9d:
00:f9:b8:4b:7c:8a:51:e0:d3:56:91:d5:28:a2:e3:71:ed:87:
b1:34:49:9c:88:f6:7d:87:f5:60:9c:db:81:28:ea:e2:18:d5:
71:39:d4:20:52:23:03:64:88:8f:d5:65:f1:16:70:d4:9d:59:
43:14:bd:43:9a:ec:38:56:02:4e:c1:74:44:bc:ee:5f:87:18:
c2:1b:ed:a8:c1:06:ff:8f:b2:87:c6:02:1e:5c:a7:14:27:29:
0f:7b:df:4b:c9:2a:9a:a0:06:24:66:34:66:ba:50:a0:95:1b:
72:51:04:e4:4c:71:41:97:54:69:a3:84:fb:09:f4:61:52:b4:
97:73:71:98:ff:00:44:ce:d7:4f:d0:2d:27:f4:17:17:34:20:
e6:12:d8:3d:63:9f:a1:c3:f7:1a:13:b1:1f:21:cd:4b:2b:94:
32:cc:e4:7e:85:59:d5:f2:e7:b1:0f:f8:b1:22:ec:09:72:cc:
79:d9:4d:f8:41:0d:3e:d4:b4:65:b1:33:28:73:0b:e7:18:2a:
60:cd:c8:6d:5d:6d:d2:cd:39:ff:09:78:32:b8:a4:3c:ac:67:
5f:98:73:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:36 2026 by rpki-client