Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145479.roa
File: AS145479.roa (raw, json)
Hash identifier: heDMmt41xBkUSM4Y6C8lnr+2XefcYYZamF5qrCpZ7Fw=
Subject key identifier: FF:2C:71:32:98:0B:FC:73:60:84:C3:24:4E:88:CF:44:B6:C1:E6:81
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4E8E0BC065391409B272F79EC315F978F4CDE41F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145479.roa
Signing time: Fri 22 May 2026 07:32:30 +0000
ROA not before: Fri 22 May 2026 07:27:30 +0000
ROA not after: Fri 21 May 2027 07:32:30 +0000
asID: 145479
IP address blocks: 240a:ab0d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:8e:0b:c0:65:39:14:09:b2:72:f7:9e:c3:15:f9:78:f4:cd:e4:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:27:30 2026 GMT
Not After : May 21 07:32:30 2027 GMT
Subject: CN=FF2C7132980BFC736084C3244E88CF44B6C1E681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e7:e3:5c:4e:27:f9:9f:f7:59:6e:91:09:8a:
3f:fa:e8:05:4f:0a:37:4b:1b:7e:53:77:c6:90:9f:
a2:b0:13:f8:37:e8:c6:da:dc:e5:d6:1e:a7:d2:04:
5a:44:3f:d7:8d:61:53:b7:34:8c:96:f1:93:34:3d:
f4:dc:f8:9c:7f:3f:c1:dc:36:42:e5:ae:30:4a:75:
82:7f:f1:6b:e1:da:fa:a5:d9:f5:e2:1c:2b:68:a3:
be:32:62:44:ed:7d:9b:b4:4a:6b:b8:7f:54:be:d0:
da:81:d0:ec:19:8e:b1:dd:51:ec:fa:65:87:32:09:
9f:7c:bc:68:2b:33:5b:22:94:74:0f:3b:bf:b6:b0:
48:ab:1a:bb:2d:40:2c:39:90:db:67:38:6c:9b:77:
b1:24:84:ac:c4:7a:37:94:5f:b0:1b:67:d3:d7:79:
64:a8:43:97:86:42:75:b0:f5:c0:84:16:e8:6f:52:
f7:26:ec:5f:ca:41:20:26:96:fe:75:cf:7f:45:2f:
63:9a:97:5e:ab:71:4c:cb:ba:2a:77:8e:11:9d:90:
03:13:93:23:69:f7:fc:09:c3:68:01:29:fe:47:b8:
52:73:cd:b9:b1:c2:c8:a6:62:d0:68:96:87:7f:2b:
67:93:f5:6a:2b:9c:dc:55:78:d3:4f:00:a5:b0:08:
fd:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:2C:71:32:98:0B:FC:73:60:84:C3:24:4E:88:CF:44:B6:C1:E6:81
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145479.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ab0d::/32
Signature Algorithm: sha256WithRSAEncryption
71:07:da:59:7e:37:53:af:ee:31:8a:f3:32:91:36:0e:c1:c5:
a7:37:f2:f4:58:08:d9:ed:75:6b:b2:8d:5d:f4:96:24:97:17:
a3:16:96:40:74:59:7b:5a:bc:9a:93:1e:48:24:37:b3:11:68:
e7:e2:fc:4e:85:99:24:68:0e:23:da:86:ec:12:16:73:67:f2:
23:ea:fb:cc:6e:18:e6:f7:1c:6a:58:80:a5:ab:7e:89:cf:00:
1e:a6:ee:c0:0c:fb:1e:4a:fa:33:f9:cd:c6:b4:20:25:50:55:
56:e5:8a:44:15:a9:84:2b:e6:b6:e8:a6:d0:6a:33:82:30:90:
ed:6e:7c:ce:59:85:c4:54:08:69:ee:73:88:0e:2d:3b:e5:1e:
ba:cc:de:58:6c:bb:53:ad:d0:a4:34:0f:11:d3:38:de:ef:bf:
ed:15:29:5c:4d:92:5a:73:dd:5d:e5:b6:5f:07:4e:9f:cc:ef:
f9:e2:44:d8:18:59:bf:36:87:30:b0:f2:df:e2:9a:c4:22:06:
bf:fb:02:6d:97:7d:04:f8:00:ff:42:9b:5a:11:17:11:bb:86:
74:0a:1c:ca:4b:5f:51:4b:7c:91:29:cc:01:4e:97:bf:87:2f:
a7:ef:09:45:9a:7f:b6:76:da:6a:36:9d:6a:15:2d:77:c5:d2:
58:b6:79:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:03 2026 by rpki-client