Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145649.roa
File: AS145649.roa (raw, json)
Hash identifier: iCpeeFoMnrCphj/9rn/J+jNSmRyyrbeLh7ti5SL4kAM=
Subject key identifier: 4D:E8:2F:35:4D:84:21:DA:D8:B9:62:E5:41:D8:03:BC:2A:C3:D0:A1
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 704984C953592EC3D2DC827EEFC5C27A852AA977
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145649.roa
Signing time: Fri 22 May 2026 07:32:09 +0000
ROA not before: Fri 22 May 2026 07:27:09 +0000
ROA not after: Fri 21 May 2027 07:32:09 +0000
asID: 145649
IP address blocks: 240a:abb7::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:49:84:c9:53:59:2e:c3:d2:dc:82:7e:ef:c5:c2:7a:85:2a:a9:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:27:09 2026 GMT
Not After : May 21 07:32:09 2027 GMT
Subject: CN=4DE82F354D8421DAD8B962E541D803BC2AC3D0A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:07:70:56:a3:d9:18:4e:36:79:1d:84:b5:96:
1a:fe:93:ce:d7:8a:b8:9f:5b:00:a9:00:ea:6c:48:
34:42:d1:10:64:94:a8:be:f2:d5:c1:0e:6c:95:16:
fb:97:80:cf:fd:af:1f:c9:7f:22:b0:d7:19:f8:46:
16:2a:b7:93:8b:b1:a8:27:f3:72:29:b7:d9:5c:07:
cf:0f:e6:78:d9:c7:42:92:20:34:a9:1a:27:d0:79:
59:65:31:0a:b2:2c:b2:bf:43:53:fc:a4:9a:1e:dc:
cc:e6:31:b3:da:02:16:55:3f:ef:47:3a:1b:b5:92:
32:b9:1a:b5:36:66:e9:7a:7f:bf:78:6b:47:e8:95:
2d:a2:ca:6c:fc:d5:7c:8c:34:3d:e5:34:6b:37:12:
08:ea:08:04:e8:65:0b:f2:9c:6c:4e:ee:b2:9b:0d:
7f:9e:81:0a:b6:59:83:ff:db:65:d6:d2:b1:89:b7:
cc:e3:c4:73:e3:80:5f:fc:65:6d:c3:e7:2e:4e:69:
b7:fb:73:c5:78:8a:18:8f:56:9d:86:0a:3f:e4:af:
8b:12:43:0a:ff:67:72:db:cb:f0:48:47:f4:d1:71:
21:cd:d6:10:dc:c5:4e:f0:fe:b6:82:66:16:bd:b8:
5d:81:18:a2:a9:bc:e7:37:1e:aa:a9:c1:31:b8:89:
9b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:E8:2F:35:4D:84:21:DA:D8:B9:62:E5:41:D8:03:BC:2A:C3:D0:A1
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145649.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:abb7::/32
Signature Algorithm: sha256WithRSAEncryption
0e:57:47:7b:b1:9f:34:7b:3d:e7:1a:63:6c:52:97:8e:59:ca:
77:86:5b:ea:e1:fa:47:0f:ce:50:8b:14:b0:ce:78:c0:cf:8c:
af:7c:e6:75:28:08:b7:63:67:6c:44:4c:88:94:34:f6:cd:22:
5e:5c:a9:fe:6a:7a:e9:c7:2b:b1:bf:1a:66:d2:2a:c0:e9:23:
f6:b8:16:d9:1d:2d:16:b5:7c:8f:17:2d:9c:d7:a2:fd:1d:e9:
c7:24:89:36:66:74:ba:13:bc:27:a1:e1:f4:3d:ed:82:50:08:
c7:7b:7d:b3:29:7c:8a:ef:2e:5c:74:55:e0:0e:df:90:3c:f1:
42:3d:88:5f:63:6d:ab:0d:da:62:c2:93:7c:f9:81:84:0e:79:
04:f4:12:51:ac:e5:36:76:f7:a5:b8:99:f0:6b:e8:13:74:d5:
15:6b:ce:e3:6d:87:e4:55:c8:72:d6:64:71:d6:48:31:82:51:
59:32:f9:42:02:13:de:97:ad:f4:48:8f:68:4f:44:d1:9a:f8:
75:80:e3:24:08:3a:0f:2e:db:ed:23:c2:95:90:a5:e3:b4:22:
cb:8d:98:90:16:70:8c:29:c3:52:36:b6:44:5a:4a:58:a1:a4:
67:52:b2:89:ef:da:8a:45:01:b6:2e:2b:a4:67:13:67:d2:f2:
4f:ee:cb:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:11 2026 by rpki-client