Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145509.roa
File: AS145509.roa (raw, json)
Hash identifier: bJC7n4cHPAqwF39FVcl+06uokY/m8N/0ngoDc70iq7E=
Subject key identifier: 34:F9:47:38:1F:C9:AB:B5:E8:96:29:DA:18:7C:35:71:BA:DE:26:8A
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4101172169B6880A176C68D892F5A282EFD1731F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145509.roa
Signing time: Fri 22 May 2026 04:07:53 +0000
ROA not before: Fri 22 May 2026 04:02:53 +0000
ROA not after: Fri 21 May 2027 04:07:53 +0000
asID: 145509
IP address blocks: 240a:ab2b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:01:17:21:69:b6:88:0a:17:6c:68:d8:92:f5:a2:82:ef:d1:73:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:02:53 2026 GMT
Not After : May 21 04:07:53 2027 GMT
Subject: CN=34F947381FC9ABB5E89629DA187C3571BADE268A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:c8:19:27:45:21:d3:e7:e4:05:3d:ac:a5:34:
51:0d:bf:1c:fe:61:dc:64:26:25:0b:70:f7:db:6f:
7f:9d:61:88:e0:d4:81:8b:62:dd:f8:8b:e7:ef:e9:
98:71:fc:2d:81:8f:36:1e:99:67:a4:84:ef:2d:4c:
05:84:b5:73:46:33:9e:34:52:89:35:60:19:3b:40:
03:61:d2:14:4d:45:e7:7e:c5:3c:c7:0c:d4:b2:79:
bc:dc:a3:84:4e:dc:55:4d:f1:6a:bc:e5:ec:ee:7a:
90:6b:b8:e7:36:aa:b7:60:d9:08:e1:38:d2:8f:57:
27:5b:6c:63:ab:e5:36:c7:ed:5b:7a:f6:77:3e:a1:
57:82:32:06:31:29:ca:f7:5e:9e:b4:64:4f:55:dd:
32:d6:27:79:7e:57:83:6b:cc:fa:ba:e0:e1:ee:9a:
c9:29:f1:df:7c:de:9b:91:18:3e:1e:e8:92:a3:ed:
9a:51:77:8f:ed:fd:5f:45:c2:38:eb:d3:4c:41:a2:
a2:96:38:e7:52:bb:da:cb:1e:39:da:6c:b3:b7:36:
08:b6:73:3d:73:43:ed:27:e3:fa:c0:98:0d:54:b4:
16:5e:ba:83:b7:aa:b6:71:48:77:10:a4:67:0a:f8:
68:1c:de:fa:82:5b:7a:fb:60:66:8e:50:76:c7:15:
e3:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F9:47:38:1F:C9:AB:B5:E8:96:29:DA:18:7C:35:71:BA:DE:26:8A
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145509.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ab2b::/32
Signature Algorithm: sha256WithRSAEncryption
93:bf:a5:e0:41:52:6b:21:f1:84:c9:5a:e1:1c:e8:bb:ac:5a:
39:da:e5:16:9b:e0:b2:75:a5:a0:1a:f3:79:53:3d:13:a0:b1:
92:1f:95:f6:00:52:4a:57:9d:11:4e:ff:34:79:ee:d0:1d:9a:
45:17:4d:a0:91:af:de:5d:c4:cf:40:2a:62:7b:2d:f3:f4:e2:
04:87:ff:72:f3:3c:ef:a2:13:8e:b0:17:fd:31:d9:1f:39:38:
0f:28:65:d4:3a:1e:e9:3b:b3:a0:cd:85:b1:93:49:39:66:b7:
41:ab:bc:b0:30:f6:9f:a1:e2:28:01:a1:52:d9:7e:61:2f:29:
08:ae:ad:f5:80:0f:6c:09:b1:53:4f:5e:9f:c5:2d:49:0a:06:
a3:71:b0:a7:36:e8:1a:a2:bc:04:9a:93:9a:30:74:32:57:84:
3d:55:a3:64:3e:9d:c7:5a:7c:24:ed:61:aa:80:47:b3:ff:83:
87:79:04:69:00:82:d7:ef:5c:9b:20:db:4a:b6:74:34:0b:c5:
7c:98:87:e8:0e:93:45:d9:5a:9f:04:b1:85:ba:30:cd:8b:ca:
0f:6e:a2:f3:8c:a9:98:8f:b0:56:12:73:ae:0c:9a:39:29:64:
c1:f6:0a:54:fc:e8:88:90:34:7f:7c:5e:c3:47:f0:65:69:c9:
c9:71:d5:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:00 2026 by rpki-client