Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145539.roa
File: AS145539.roa (raw, json)
Hash identifier: POcSYJ5Sy9cEdf442Dm5Pv7rbMb46fpR+2e8TIEZL04=
Subject key identifier: 4A:11:1E:4B:CF:BD:1E:94:70:CB:F5:40:98:D7:EB:AE:DA:4D:05:A4
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0C596A3750FC95C9E5746171C7C7A040CE9A0CC6
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145539.roa
Signing time: Tue 26 May 2026 03:17:06 +0000
ROA not before: Tue 26 May 2026 03:12:06 +0000
ROA not after: Tue 25 May 2027 03:17:06 +0000
asID: 145539
IP address blocks: 240a:ab49::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:59:6a:37:50:fc:95:c9:e5:74:61:71:c7:c7:a0:40:ce:9a:0c:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:12:06 2026 GMT
Not After : May 25 03:17:06 2027 GMT
Subject: CN=4A111E4BCFBD1E9470CBF54098D7EBAEDA4D05A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:91:ca:33:39:e9:04:74:52:23:dd:41:87:da:
f9:1f:5b:72:f0:4a:a6:2e:13:96:2a:76:0a:41:c6:
8c:88:57:be:0a:24:31:fe:8b:07:8c:76:08:0c:86:
db:86:f0:4d:ac:c1:bc:3b:ef:05:fe:51:a0:b4:91:
eb:a6:ac:4d:69:3b:99:42:21:0a:16:82:ab:fc:55:
fc:d7:14:97:92:1e:59:af:9c:22:ec:33:c8:85:9e:
1e:b8:10:e6:ff:ac:9e:5c:ba:78:5c:80:0e:fb:e3:
43:5f:5e:fb:cf:6d:40:e1:b9:d8:6b:05:e6:f3:68:
e4:a8:5b:df:de:a4:54:9c:38:5b:ac:48:6e:c4:e8:
78:2e:1c:d2:3d:b2:c7:68:97:07:30:a4:fe:26:4b:
57:70:97:46:99:bf:8c:7e:aa:32:e4:60:0d:5e:53:
f0:8a:50:b3:9d:b3:6c:12:4d:95:ae:48:82:2c:ec:
af:b4:5b:42:f1:42:a5:9a:2c:c0:76:7c:58:12:66:
2c:9d:06:64:da:ef:e4:b6:f1:05:58:d8:c5:2a:09:
92:f9:20:e9:91:84:76:d8:48:11:e6:ca:0d:a8:c7:
c4:fb:fc:13:9d:23:de:e3:0f:e5:48:e3:b3:fe:e5:
92:ed:50:4d:87:0b:15:60:d4:27:fe:cf:0c:40:86:
74:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:11:1E:4B:CF:BD:1E:94:70:CB:F5:40:98:D7:EB:AE:DA:4D:05:A4
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ab49::/32
Signature Algorithm: sha256WithRSAEncryption
3b:a4:28:5b:4d:e8:17:70:41:11:cc:0a:41:82:6e:ad:89:fc:
04:ec:a3:5f:c1:7a:c3:60:89:30:17:1b:47:b5:cb:b1:6c:a8:
d2:13:87:69:0b:80:9c:e8:cb:b0:70:9c:b7:6a:bd:8e:a9:02:
92:5a:80:94:06:26:c7:56:42:bb:a2:c0:f7:44:bb:5a:f0:31:
51:97:bd:a9:7d:9a:a2:61:c7:1a:3a:c8:ca:58:2a:d0:8e:ec:
63:82:13:48:bf:46:f3:7b:d6:97:03:7b:8a:db:5f:cb:35:32:
2f:f2:4b:01:70:98:4f:e8:82:16:f6:ee:16:65:4c:8f:00:bf:
93:85:6e:cf:14:16:31:ac:63:a9:f9:0a:10:b4:82:33:cf:4b:
6e:7b:e1:0b:a2:b7:86:c4:67:f8:8a:bb:e1:98:99:6e:6c:b9:
a5:36:c6:f3:d7:4e:0d:d8:f7:c8:0c:38:18:4a:3e:8f:4e:04:
1e:da:12:59:2b:29:6e:fe:5e:b4:54:2a:ef:21:26:92:02:3d:
e8:ee:f5:33:9e:60:34:40:4e:0a:bd:92:84:85:4b:3a:63:30:
23:88:ed:f2:76:ed:8d:00:39:cb:0c:5b:f8:86:87:dd:b7:bc:
66:a6:20:2c:17:c6:55:72:e3:64:60:30:81:10:fd:4e:e4:99:
f0:63:88:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:39:02 2026 by rpki-client