Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145735.roa
File: AS145735.roa (raw, json)
Hash identifier: F8VhJa9N3KqHMun5aRA4wCYyKzPs8mBb4qJjpgy64Wg=
Subject key identifier: 49:4C:23:49:AB:F2:CF:5B:F0:DB:3B:35:1B:FE:99:7E:06:FC:78:F5
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1904EA2E238D64DBAFCF2AD5F2186548E18F6609
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145735.roa
Signing time: Fri 22 May 2026 02:47:52 +0000
ROA not before: Fri 22 May 2026 02:42:52 +0000
ROA not after: Fri 21 May 2027 02:47:52 +0000
asID: 145735
IP address blocks: 240a:ac0d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:04:ea:2e:23:8d:64:db:af:cf:2a:d5:f2:18:65:48:e1:8f:66:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:42:52 2026 GMT
Not After : May 21 02:47:52 2027 GMT
Subject: CN=494C2349ABF2CF5BF0DB3B351BFE997E06FC78F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:dd:d7:62:dd:68:e1:a6:ba:c8:cb:82:bd:5e:
b8:9e:38:95:45:7d:d5:c0:55:cb:1d:9a:8c:34:9c:
b8:3f:de:8f:11:09:ed:d6:df:2b:04:e9:cf:65:43:
85:d8:09:18:a0:70:c8:2e:e0:a9:b8:b3:e8:98:c9:
e5:a0:5e:c8:8c:04:a3:ee:47:fc:ed:19:fe:5f:7d:
f4:27:37:67:fd:a4:93:81:57:7f:db:ef:85:cb:a7:
3a:f1:21:46:b7:84:4f:e4:7f:46:1e:e4:55:20:4b:
6d:f0:0f:b9:db:24:88:48:78:97:96:69:e1:0f:19:
ae:5e:42:d4:8b:95:2d:3a:d7:a6:28:a3:56:3e:d2:
dd:eb:39:61:b6:16:c8:4d:15:1e:be:a6:fb:16:b5:
2e:84:b4:cc:0c:da:09:9d:1c:b4:28:c4:6b:4f:d3:
91:ad:e8:f9:04:ef:92:0c:d9:6e:a5:0d:15:c4:dc:
c5:ad:a3:0a:34:c6:7d:4d:f4:f1:e4:d7:9b:06:7e:
b5:62:04:7e:a7:b3:6b:32:d5:cc:f5:f3:49:4f:7c:
d8:e7:92:2d:d2:f6:6d:03:37:f4:9d:2c:29:8d:25:
a2:0d:ea:c6:0c:12:09:92:12:e0:90:0d:88:65:3e:
b3:1f:40:90:49:cb:c2:cc:1c:9a:9f:1c:8b:1b:8d:
c2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:4C:23:49:AB:F2:CF:5B:F0:DB:3B:35:1B:FE:99:7E:06:FC:78:F5
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145735.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ac0d::/32
Signature Algorithm: sha256WithRSAEncryption
1e:98:cb:ce:d5:9a:4a:5b:73:a5:d1:db:bb:79:b4:6a:23:b4:
7a:e9:1f:df:73:fa:ae:56:01:87:c0:33:64:8a:f8:c1:38:c7:
17:b2:99:95:e9:14:28:8c:91:00:52:80:1c:71:4e:5e:81:53:
91:b2:01:fe:4b:a2:2e:4a:a7:28:57:b4:60:ec:fc:b1:09:b5:
f5:ef:7b:68:e0:c2:d1:a0:0a:95:2c:bb:a3:21:46:d1:c1:da:
b4:ea:bf:59:2a:e1:0d:ed:bb:d0:d7:99:07:eb:1c:91:bb:5b:
e9:b7:47:d9:ac:ce:42:6d:85:37:27:8a:16:08:2a:cf:3b:09:
ca:5b:a0:ec:0b:46:b9:38:48:ec:b2:74:5c:01:c7:50:57:fe:
cf:58:ff:54:7e:47:b9:61:16:af:69:a6:99:42:6a:3b:cc:29:
e2:59:9b:50:5f:a4:f9:93:cf:4b:7e:a2:da:a0:e2:9e:21:08:
45:e8:92:32:f8:79:38:0b:47:9b:00:3e:a4:a5:9a:0d:5b:02:
08:cc:0e:cb:50:58:0f:14:7b:b8:87:60:96:07:21:de:59:b4:
77:ed:1d:67:a4:7b:4c:bb:d6:50:02:cd:76:b4:e8:a5:b7:38:
b4:a7:b8:e1:2d:d6:1d:b8:18:cb:55:17:02:80:8a:49:08:87:
87:8f:c5:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:15 2026 by rpki-client