Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145495.roa
File: AS145495.roa (raw, json)
Hash identifier: c+ArRkQGntrAv6B8Sfo5AFuZy5Lvl6z9u/nMYkJX5oM=
Subject key identifier: 49:C0:45:E8:F2:37:D4:07:15:F1:CF:17:39:13:B8:05:1C:AD:32:0F
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5CEFA8A820D82ADB6B25CD7409C90FDE3642D33E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145495.roa
Signing time: Fri 22 May 2026 07:32:14 +0000
ROA not before: Fri 22 May 2026 07:27:14 +0000
ROA not after: Fri 21 May 2027 07:32:14 +0000
asID: 145495
IP address blocks: 240a:ab1d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:ef:a8:a8:20:d8:2a:db:6b:25:cd:74:09:c9:0f:de:36:42:d3:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:27:14 2026 GMT
Not After : May 21 07:32:14 2027 GMT
Subject: CN=49C045E8F237D40715F1CF173913B8051CAD320F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a6:43:36:09:43:73:2e:40:f9:85:04:cb:73:
7d:11:7f:5a:9f:7e:14:91:6d:1d:c4:a7:51:12:a9:
a9:0b:f2:41:33:17:0a:c2:b1:a1:fb:e6:5c:49:65:
45:24:d1:ff:56:a2:95:59:16:15:62:66:2c:40:90:
7d:02:42:58:67:fb:5f:06:09:97:eb:c0:46:f4:7e:
c2:2d:56:9f:41:d7:f4:79:4c:19:74:40:cf:e1:7b:
68:05:37:96:99:dc:20:e4:08:da:9b:6a:af:e9:e4:
51:40:d1:98:d3:2a:40:5c:f8:34:78:48:ab:c7:9c:
ce:71:cd:27:af:1e:0b:23:8f:f6:92:55:2b:03:3c:
64:76:bd:08:a5:0f:04:5f:b0:3a:23:b6:22:da:de:
7c:bd:db:48:a4:69:2e:fe:35:88:56:4b:e1:a5:b5:
ad:3f:cd:64:53:32:6a:30:3e:54:1c:ea:9b:18:4d:
2c:d0:d2:bc:e1:1c:ca:01:b4:d2:0a:44:ff:2f:cf:
02:da:5a:1a:a5:bd:6b:63:2c:35:f7:fa:56:a0:b8:
99:fe:1d:a8:12:62:03:99:58:89:15:53:f4:f6:04:
6f:fc:8a:1a:4c:ec:6d:16:36:4e:34:c8:b8:09:80:
e5:77:d4:41:35:8b:a5:a1:4f:44:fc:f9:fe:71:5c:
f4:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C0:45:E8:F2:37:D4:07:15:F1:CF:17:39:13:B8:05:1C:AD:32:0F
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145495.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ab1d::/32
Signature Algorithm: sha256WithRSAEncryption
6b:9c:42:3e:d9:12:d1:6b:8a:cd:b7:2c:58:99:dc:5d:c9:c7:
76:bc:e7:96:2f:8a:d9:0d:0f:71:ac:a4:ad:9d:7b:61:f2:ff:
5f:00:80:af:48:1c:26:1a:49:ac:c5:e7:d2:46:4d:f0:3f:c0:
e6:09:e7:07:98:dd:eb:c8:b4:53:0c:fd:34:22:60:8d:37:f3:
60:13:f0:5c:58:a4:a9:37:13:06:1a:5f:fb:3f:10:26:43:b4:
48:ad:d2:6a:f6:bc:b2:b9:9d:9a:04:93:6c:e6:e7:fc:f9:0c:
59:e5:b2:2e:46:81:ad:2b:19:54:2c:3d:8f:16:8b:78:cb:53:
d2:5b:a4:8c:98:5a:73:77:f3:c6:4c:eb:6d:ec:a0:5d:e3:72:
cf:4e:47:d9:e4:ab:05:90:78:18:58:88:07:19:4f:01:2f:18:
3b:00:48:8c:0b:c2:aa:98:83:8e:8d:de:09:58:49:c5:10:b4:
33:6a:94:6e:b5:b9:28:58:a1:70:41:73:4c:da:9f:50:44:a0:
32:fb:f9:86:da:ad:66:36:1c:09:d0:90:65:67:d2:65:21:59:
98:43:67:36:64:af:7c:e0:4d:53:42:ce:6f:24:de:bd:68:fd:
08:a6:77:1c:39:2e:08:6b:73:45:dd:1b:6a:ec:82:1d:69:08:
77:4f:9a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:42 2026 by rpki-client