Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145467.roa
File: AS145467.roa (raw, json)
Hash identifier: 8AwrdeWmf8lm1hFr/kWNUEmDyrNau1MkNWtt8aFrMGc=
Subject key identifier: 9B:B3:3E:64:78:F9:6B:35:E2:D6:A6:93:DC:78:E1:8A:7C:A2:03:12
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0CE071569DBEE8CFF512AE95DD2F0B8D65BCD859
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145467.roa
Signing time: Fri 22 May 2026 02:48:07 +0000
ROA not before: Fri 22 May 2026 02:43:07 +0000
ROA not after: Fri 21 May 2027 02:48:07 +0000
asID: 145467
IP address blocks: 240a:ab01::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:e0:71:56:9d:be:e8:cf:f5:12:ae:95:dd:2f:0b:8d:65:bc:d8:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:43:07 2026 GMT
Not After : May 21 02:48:07 2027 GMT
Subject: CN=9BB33E6478F96B35E2D6A693DC78E18A7CA20312
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:2c:7c:1d:62:41:d7:d6:28:f4:bb:83:41:e7:
44:d1:6d:87:71:cc:ea:79:67:7a:e8:f2:b8:e7:3c:
4a:db:b5:a5:92:2f:b0:48:a0:38:db:9f:6d:e3:2e:
55:29:b1:44:b3:03:74:49:32:f1:d5:dc:e8:34:0b:
68:04:00:e1:2f:b6:48:fc:ed:1e:27:c0:57:f4:21:
f3:83:3f:f0:37:36:5c:53:4d:51:32:2d:b5:40:5c:
75:eb:c6:66:d1:f9:28:e4:cd:30:64:6d:c1:04:82:
77:46:b7:55:ba:55:46:29:36:80:ea:12:90:4d:5c:
02:07:3d:7f:e5:2f:ab:0c:a7:3e:94:dc:f8:96:00:
43:40:72:73:0a:4a:bf:d3:f3:10:a1:c9:2f:7c:8d:
fc:c1:05:1f:a6:90:e1:fb:f9:d6:ba:fa:07:1d:83:
51:5f:68:e4:49:aa:82:dc:04:dc:1e:e7:96:ce:62:
1c:1c:f8:97:45:63:8d:c8:b8:ee:9a:5a:d8:2f:99:
59:83:33:92:79:d5:d0:95:23:35:09:b4:6f:fd:6c:
12:4b:a1:9f:65:a4:ed:6d:e6:63:84:ad:c0:39:0f:
47:e2:71:f3:e6:9a:58:3c:e0:44:c2:ba:83:39:ed:
90:a2:bb:a5:86:30:79:c0:4c:f8:77:50:9b:b4:ae:
61:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B3:3E:64:78:F9:6B:35:E2:D6:A6:93:DC:78:E1:8A:7C:A2:03:12
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145467.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ab01::/32
Signature Algorithm: sha256WithRSAEncryption
2a:32:43:02:b9:97:45:26:7c:89:67:84:b8:24:8a:80:39:a7:
9e:21:f0:28:ba:29:87:c1:74:38:52:1c:19:19:94:c4:33:fc:
48:38:2a:67:be:b3:46:eb:06:6a:60:45:45:01:3e:b3:af:35:
e1:fd:6a:22:74:bd:4b:7f:9e:93:5a:c4:ca:85:14:97:a4:fe:
ef:06:77:13:5d:17:ca:73:99:46:00:f7:62:52:e6:4c:58:f1:
16:32:5b:f9:5e:c6:ef:40:5e:54:b4:4a:22:71:a8:a8:10:b2:
89:25:1a:fa:65:13:d4:94:4a:a8:77:1c:be:61:0a:e6:e5:96:
96:0f:5c:05:f4:9f:ef:af:cb:0b:95:9d:75:96:3a:70:fc:07:
5e:65:7f:b7:87:3e:67:ba:eb:d6:a4:8a:f1:17:76:fe:b6:95:
e3:6c:da:19:b7:40:5e:f6:36:28:8d:ac:54:61:11:ab:48:9d:
3f:45:32:93:32:66:3c:1a:91:56:1f:9b:4d:7e:ed:8e:6c:5f:
46:f0:ad:48:ed:1c:5c:ec:10:d5:c6:4b:6c:a2:6f:e9:8d:2b:
ba:59:85:4e:09:2e:40:26:14:61:41:13:70:60:a8:f9:4d:02:
34:37:c9:6c:3b:d9:81:36:f0:7b:b0:22:a5:57:9e:62:78:a7:
3e:64:fb:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:33 2026 by rpki-client