Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145549.roa
File: AS145549.roa (raw, json)
Hash identifier: g8akDz/sVMayHXGaAYqHIbcRmAt+zVkwISOu3N2KM7Q=
Subject key identifier: BD:58:1A:72:DF:63:8B:7C:8C:46:13:24:FE:67:AA:87:C0:58:2C:11
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4C1642F9A3D4BCE36FECF74EA0EEE0045792BD87
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145549.roa
Signing time: Tue 26 May 2026 06:12:36 +0000
ROA not before: Tue 26 May 2026 06:07:36 +0000
ROA not after: Tue 25 May 2027 06:12:36 +0000
asID: 145549
IP address blocks: 240a:ab53::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:16:42:f9:a3:d4:bc:e3:6f:ec:f7:4e:a0:ee:e0:04:57:92:bd:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:07:36 2026 GMT
Not After : May 25 06:12:36 2027 GMT
Subject: CN=BD581A72DF638B7C8C461324FE67AA87C0582C11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d9:f9:2f:b8:57:85:e3:ec:a3:bd:60:d6:1e:
8d:e8:86:86:af:19:81:d6:7e:cd:16:ad:dd:9d:15:
8e:58:bc:89:7e:a2:a5:38:8f:d3:75:d3:71:ab:b1:
df:43:32:6e:fa:ac:0e:9f:cc:87:61:2e:79:61:d4:
b6:c0:19:fe:ff:3c:4c:6f:09:68:e7:7d:3c:72:fd:
92:28:05:46:2a:68:15:f3:45:34:c9:2a:bd:1a:f9:
2c:6b:1d:73:41:8b:78:de:84:2a:54:6d:7f:c5:18:
83:13:23:89:0b:7f:5c:27:cb:dc:90:58:f7:fc:a5:
62:f0:4c:5f:f8:8d:bb:ae:7a:e5:b6:06:76:72:06:
df:b3:17:28:c9:16:76:2d:43:3b:79:18:60:19:f7:
33:7b:51:1e:79:28:89:ee:df:e1:1f:3d:50:dc:20:
2e:24:f7:87:8d:19:14:71:57:5a:dd:1a:7f:5a:39:
13:6d:98:b0:46:75:31:78:5f:67:52:e8:33:41:ca:
06:74:60:40:ee:82:ed:92:a9:e0:37:a1:44:ed:32:
e1:35:6b:f8:63:53:4a:86:0d:6d:16:c3:10:a2:cd:
8e:6f:f8:c2:7f:d6:b6:bc:c5:6e:04:12:47:97:15:
eb:7b:b9:cd:ce:a2:13:4c:aa:6d:54:08:7a:f9:0e:
65:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:58:1A:72:DF:63:8B:7C:8C:46:13:24:FE:67:AA:87:C0:58:2C:11
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145549.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ab53::/32
Signature Algorithm: sha256WithRSAEncryption
2d:f1:47:b6:d9:af:3c:dc:62:64:d2:e7:9e:c8:40:2a:bc:f6:
9a:d1:3a:32:1e:cc:91:ba:03:9f:2d:e4:d9:96:eb:b4:80:e7:
bf:d2:32:9a:a4:cb:67:09:ed:bd:de:13:01:a0:60:ab:22:74:
ee:67:e2:f2:0f:21:85:eb:29:8a:d2:88:97:e8:dd:2f:b7:94:
a4:d7:91:b4:dc:55:88:d8:6c:04:2a:ff:91:c3:5b:66:65:a3:
b4:1d:ec:1f:25:f4:a9:c3:95:98:01:40:80:88:e6:c8:60:9b:
1f:f3:ce:09:81:76:31:3d:c3:2a:c6:da:c2:2d:83:bf:84:d4:
0a:7b:c1:5b:e8:83:43:c7:1d:a4:a5:05:ec:13:f9:62:93:6d:
a8:c4:93:e1:79:d8:d1:66:c8:59:89:c0:da:58:fe:bc:ed:61:
09:e3:39:fd:0f:11:17:f3:2a:75:cd:64:2d:92:57:03:48:59:
80:e8:d8:c2:b9:88:1a:9a:44:c3:c3:ca:58:65:8b:b7:34:fb:
3f:1e:ff:eb:f8:07:f4:0e:d4:9e:2d:e7:13:db:0e:c0:18:06:
3a:7f:de:a9:08:27:d9:0e:1b:6d:38:d4:92:d3:65:c5:e8:59:
a4:b4:b7:bb:cf:2d:3f:1f:2f:c8:ef:ac:77:97:70:35:79:fd:
86:07:af:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:46 2026 by rpki-client