Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145548.roa
File: AS145548.roa (raw, json)
Hash identifier: QVVusTzw2rPkRnCG7YdbBJffxryrO+o7t1J7sPTr79g=
Subject key identifier: 0A:1B:43:73:7D:C8:79:75:0F:5F:69:22:A9:D6:99:6A:07:0A:77:49
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0E69BE62058DBF88343A5EFE0543C1495C015CA6
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145548.roa
Signing time: Fri 22 May 2026 07:25:03 +0000
ROA not before: Fri 22 May 2026 07:20:03 +0000
ROA not after: Fri 21 May 2027 07:25:03 +0000
asID: 145548
IP address blocks: 240a:ab52::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:69:be:62:05:8d:bf:88:34:3a:5e:fe:05:43:c1:49:5c:01:5c:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:20:03 2026 GMT
Not After : May 21 07:25:03 2027 GMT
Subject: CN=0A1B43737DC879750F5F6922A9D6996A070A7749
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c1:9e:47:e4:1b:d1:9b:08:4f:28:0f:23:54:
23:12:5c:39:e9:b1:3b:44:96:35:d5:c1:d3:d3:d9:
dd:53:7a:67:40:4d:bf:03:be:5e:e0:08:3d:2f:99:
b3:87:88:70:c8:f9:8b:30:37:fa:bf:d1:27:b6:36:
99:5e:17:9e:ec:04:23:45:f8:91:35:c8:54:1d:6c:
59:39:85:5f:0a:bb:21:70:7b:b1:f6:c0:9b:62:3c:
22:3a:52:b9:11:5d:21:7b:19:da:1a:d7:d1:90:3c:
51:7c:38:0a:9b:89:6d:9e:39:37:fa:24:42:db:32:
bf:ff:09:9c:29:76:c5:ce:a2:58:4f:36:c2:0f:cb:
6c:8b:5e:7f:9e:5a:8d:47:6b:77:4d:26:3f:f0:3f:
78:74:12:c9:ff:f1:ad:cd:71:1c:21:6e:79:c1:ad:
f2:1e:70:58:b3:9c:b4:72:db:71:b9:9d:58:21:db:
89:9c:36:50:21:a6:49:99:ac:28:45:13:73:f2:aa:
86:6f:8a:be:ea:d1:77:8e:3b:61:ee:7e:5b:f2:fd:
f6:7e:81:ec:10:91:4c:e5:81:a7:61:c3:0a:85:57:
f8:4c:2b:03:65:d5:08:2c:79:b6:ea:dd:c8:c3:7f:
ac:2e:13:7a:b8:46:8c:0f:71:c4:1d:cb:97:1d:19:
f3:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:1B:43:73:7D:C8:79:75:0F:5F:69:22:A9:D6:99:6A:07:0A:77:49
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145548.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ab52::/32
Signature Algorithm: sha256WithRSAEncryption
37:e1:be:17:60:cc:e7:88:7b:23:33:3c:e5:d2:53:93:77:45:
02:5c:a3:22:b0:03:f1:27:b9:e4:ac:70:5d:37:b0:4b:2a:95:
3c:0d:57:c1:58:49:da:99:d1:50:66:0f:d4:62:cd:6c:ec:2d:
a2:a2:ff:50:e3:07:23:65:10:d0:92:60:fd:5e:d4:8e:e8:98:
cf:88:e6:ab:9b:ec:5f:e5:e4:b8:e3:00:46:cb:9d:f6:01:1c:
5f:b8:c1:20:6e:34:69:06:d6:03:52:d4:20:80:27:1d:aa:20:
9d:56:c9:db:27:3b:ac:fc:b8:21:bd:b9:ee:11:d2:25:c9:fb:
1c:99:a7:af:3a:38:5d:f4:70:fa:f1:64:7f:24:05:69:ab:92:
a5:1b:b8:51:69:93:3d:12:b9:d5:dc:26:43:5c:38:ac:c8:9d:
90:75:ae:92:64:36:39:fe:9a:64:76:45:be:4e:05:cf:b2:7a:
6c:67:e6:58:7f:a8:46:34:f3:57:d1:b4:c4:0a:3a:de:5a:4d:
12:f8:87:34:6b:f4:e7:e2:8d:26:89:4b:a6:92:6d:98:e5:c1:
1f:b9:dc:47:0c:ad:51:1f:fb:98:0d:05:02:1d:2b:44:83:d7:
26:b4:a1:4c:77:b6:37:f8:22:4d:7a:31:6a:87:ce:da:bc:48:
9d:a8:90:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:35 2026 by rpki-client