Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145493.roa
File: AS145493.roa (raw, json)
Hash identifier: BcYIX1QQaTuFm7lZ+lTybMgmoKpiqIhRFCBXnlzBwkM=
Subject key identifier: E0:54:4E:20:6D:73:3B:73:C1:8D:34:4C:55:91:7E:CA:F6:4F:F7:2D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 16A0F49A126414BA8B6D1394BFDDEEE63A888317
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145493.roa
Signing time: Tue 26 May 2026 08:52:39 +0000
ROA not before: Tue 26 May 2026 08:47:39 +0000
ROA not after: Tue 25 May 2027 08:52:39 +0000
asID: 145493
IP address blocks: 240a:ab1b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:a0:f4:9a:12:64:14:ba:8b:6d:13:94:bf:dd:ee:e6:3a:88:83:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 08:47:39 2026 GMT
Not After : May 25 08:52:39 2027 GMT
Subject: CN=E0544E206D733B73C18D344C55917ECAF64FF72D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:c1:e1:77:b6:fd:c8:cc:1a:8e:d4:31:9f:55:
e9:90:5c:28:6c:d2:54:31:ad:65:b2:da:e3:ef:d6:
88:1b:1d:be:c7:22:f1:67:8f:5e:d0:c6:4c:ef:b5:
06:56:a1:2d:e8:70:94:a1:6e:d6:5a:cd:3a:eb:09:
39:8f:94:6e:8a:e6:4a:2b:d5:f2:c8:29:bf:93:2c:
b6:4b:3b:a1:be:7c:66:83:e7:20:ae:2e:3a:7a:3a:
53:66:5d:fe:f1:e5:94:10:f1:ff:0f:fa:23:2e:6f:
7d:be:ff:d8:90:46:32:2d:a9:1c:cf:95:0e:c2:bf:
c8:24:38:87:07:0a:19:a0:f8:0c:58:f0:20:d6:ae:
02:81:85:5a:38:7a:22:d3:a3:1a:c9:6c:3f:3d:f0:
7a:14:21:3c:1b:c0:24:f2:22:f3:9a:0a:d1:71:b4:
85:5e:18:82:f9:fa:a7:3e:13:6c:8e:ba:c4:e7:98:
ff:be:e3:02:f6:a5:53:20:5b:10:83:cd:27:e6:e3:
b1:71:00:ad:ec:5a:27:66:a9:64:89:4d:02:fa:da:
1f:c3:8e:de:a4:76:77:7f:3b:66:d2:b2:7f:59:dd:
65:4d:f7:88:03:cf:fb:ce:8f:2d:99:3c:f0:47:bb:
f7:58:77:8e:ff:6b:f7:d1:44:00:91:80:88:82:c8:
ff:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:54:4E:20:6D:73:3B:73:C1:8D:34:4C:55:91:7E:CA:F6:4F:F7:2D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145493.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ab1b::/32
Signature Algorithm: sha256WithRSAEncryption
85:f7:e7:f2:7f:f2:c5:8c:d8:f3:59:ad:4c:47:24:a6:b8:c9:
32:5a:f7:ff:28:91:13:8b:2c:29:99:78:7a:42:65:05:f3:b6:
17:3d:c0:c7:0d:c0:a1:80:06:e1:8d:0a:97:8a:34:f2:9b:13:
23:11:2e:fe:f7:8e:19:a5:7c:2a:f0:59:0b:38:7e:8e:a2:30:
4e:c7:f0:cf:34:18:f2:7f:19:cc:1d:eb:ac:ba:0a:21:bc:86:
1d:03:2b:c7:d2:cd:26:1b:1e:14:ec:95:dd:8c:a7:23:a2:90:
8a:ac:79:88:76:a7:41:9e:cf:06:a0:a1:37:17:2c:16:a2:a8:
a1:b6:b1:c7:41:1e:87:e4:72:be:f6:d0:67:e1:e2:8c:e7:47:
74:fe:23:b5:ea:b5:ec:3b:bd:10:10:8f:fe:e7:79:77:83:08:
70:52:97:3b:12:b4:98:45:d9:71:b3:06:4f:cb:cf:03:9b:95:
72:bd:2b:44:eb:fb:72:b7:2e:bb:a8:c7:d1:a5:ac:2d:02:70:
7a:c9:fb:70:09:97:1b:1f:41:ce:59:0e:1e:22:e1:60:66:73:
29:92:f5:3c:53:d8:2b:3b:44:0f:64:d7:c4:00:d8:14:2f:65:
6d:c7:18:b9:76:51:b8:06:69:be:9e:e5:bb:81:6e:31:2b:76:
0c:6b:2d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:51 2026 by rpki-client