Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145203.roa
File: AS145203.roa (raw, json)
Hash identifier: ubGA69aj2eqvbW9YMkwfIYidTy861ub1eX8cKKwvbSs=
Subject key identifier: 65:FF:64:B7:80:F6:28:FD:76:09:C1:3C:F1:BC:CC:88:CF:52:C4:18
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 50CAC69A3B1E346E61E047866B1FE5ADFB486D09
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145203.roa
Signing time: Fri 22 May 2026 07:32:02 +0000
ROA not before: Fri 22 May 2026 07:27:02 +0000
ROA not after: Fri 21 May 2027 07:32:02 +0000
asID: 145203
IP address blocks: 240a:a9f9::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:ca:c6:9a:3b:1e:34:6e:61:e0:47:86:6b:1f:e5:ad:fb:48:6d:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:27:02 2026 GMT
Not After : May 21 07:32:02 2027 GMT
Subject: CN=65FF64B780F628FD7609C13CF1BCCC88CF52C418
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:aa:36:96:19:74:e2:e2:1f:90:ac:82:88:b1:
e7:61:df:f2:8a:6f:ba:59:a8:27:eb:d2:34:aa:d2:
cc:e3:8c:64:5b:7f:31:61:9c:38:2c:7b:63:9c:9d:
85:d9:2c:1f:28:1a:3c:56:ac:c6:23:ce:d7:4b:0c:
e2:e6:35:be:a3:c2:79:5c:8a:80:03:83:f9:3e:85:
f8:12:fa:be:6c:65:db:e9:b6:bb:1d:f8:c4:c0:08:
b7:0c:03:11:72:a6:35:27:f3:d7:e9:50:73:d2:74:
cc:54:b0:c8:56:dc:79:79:e2:1b:bf:66:05:61:61:
20:9f:d8:99:c5:8c:09:49:5e:2f:d8:7f:f0:f5:5f:
70:92:65:6f:03:ef:83:a1:7b:67:0d:44:c2:48:95:
e6:a3:54:b4:71:e2:84:2e:60:ca:30:db:5f:77:4a:
2c:92:41:19:c3:aa:17:1b:a5:71:17:61:0a:1a:72:
9c:27:e6:ed:7f:d1:bf:33:d8:3f:8e:46:3d:b4:0c:
01:29:22:de:a8:84:9f:1d:fa:d5:8f:a1:5e:40:04:
42:df:a6:a8:93:3e:92:90:dd:04:f4:d3:bd:7e:96:
01:08:79:a9:61:7a:9d:5c:2b:ac:f1:0d:d9:15:60:
cc:38:0f:a8:85:4a:f2:b3:80:76:53:e6:35:07:dd:
e1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:FF:64:B7:80:F6:28:FD:76:09:C1:3C:F1:BC:CC:88:CF:52:C4:18
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145203.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a9f9::/32
Signature Algorithm: sha256WithRSAEncryption
ae:9b:32:e9:13:55:61:56:45:d6:ff:70:eb:89:d9:20:bd:5d:
f3:16:23:e8:38:cf:00:51:5c:c1:77:e9:ab:71:dc:cd:20:1c:
fa:f5:25:4d:9c:a1:f6:f6:da:37:dc:16:cc:15:ae:38:93:d1:
70:6b:6a:88:69:b6:ae:60:d0:61:97:b9:47:37:83:9a:cf:da:
ee:5d:84:27:b9:5f:84:34:ec:e5:b7:33:cc:df:73:7b:4c:01:
ce:16:65:6f:e7:a3:ff:ee:7c:82:07:03:39:d9:6a:94:f0:28:
27:1d:47:4e:ac:1d:9f:16:a8:63:01:cc:da:e7:bc:18:2a:b4:
e5:f7:e6:cd:84:2c:d6:ef:05:03:64:ff:82:ce:e3:ce:3e:47:
ab:23:5d:b3:ca:3f:a3:1b:24:94:b6:a0:bb:c5:e7:0c:7e:e2:
82:08:f6:40:aa:4e:76:11:6b:37:44:37:d6:2b:b5:da:a7:70:
30:46:65:7b:f3:77:4d:a4:44:cc:a1:e4:8b:11:07:9f:55:da:
3d:8a:67:e4:fd:85:7f:03:72:9e:ca:9c:9a:b7:56:dd:f9:cb:
59:36:1a:99:6b:6c:a1:09:42:9d:04:ea:ef:97:0a:fa:0f:31:
2d:93:8f:2a:1f:c2:ba:df:f0:03:a9:c7:a9:0d:c8:c0:78:20:
ce:8b:41:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:30 2026 by rpki-client