Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145737.roa
File: AS145737.roa (raw, json)
Hash identifier: 7wz27hz50NdfOtLP07/MXCITj6beSV7ssJdoWq4bZ2c=
Subject key identifier: 9F:06:37:3C:7B:F0:48:A3:C9:B0:14:33:45:89:90:A5:9E:52:7E:54
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 269A3B7EB1D96684095C4BFB401B3F7435B2219B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145737.roa
Signing time: Mon 25 May 2026 01:20:02 +0000
ROA not before: Mon 25 May 2026 01:15:02 +0000
ROA not after: Mon 24 May 2027 01:20:02 +0000
asID: 145737
IP address blocks: 240a:ac0f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:9a:3b:7e:b1:d9:66:84:09:5c:4b:fb:40:1b:3f:74:35:b2:21:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:15:02 2026 GMT
Not After : May 24 01:20:02 2027 GMT
Subject: CN=9F06373C7BF048A3C9B01433458990A59E527E54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ec:18:c0:17:83:b9:c3:f6:14:11:c1:60:53:
0d:41:67:50:61:ef:55:ab:4b:4a:5c:cb:d8:f9:bb:
81:1e:67:e0:04:5f:4e:05:10:c7:cf:a0:75:15:9d:
4b:55:20:38:8c:50:33:dc:af:17:22:b9:2d:92:32:
eb:5b:07:e8:4b:e1:c1:93:d1:c2:65:bb:28:fe:d1:
2f:da:b1:fc:b6:3e:55:ff:46:70:3c:d9:30:64:7c:
eb:2a:fa:b2:ab:41:6c:06:c4:11:00:f7:0b:28:de:
74:df:f8:b7:26:6d:d3:9a:b9:c4:bf:67:37:90:bf:
65:9a:1a:97:5f:be:77:54:19:9a:92:a0:e0:be:3b:
2b:ee:d8:03:13:e3:15:f8:f2:2d:bc:3c:d9:f3:f5:
e8:e8:95:c8:2e:58:bd:b6:52:5a:8f:6c:c8:e3:84:
ed:84:cf:b0:c0:b6:8f:c7:b4:7a:02:25:2c:d3:03:
12:d6:8a:15:8f:69:56:7e:3c:54:18:09:a9:14:04:
b5:c6:73:70:b4:f5:b7:5c:21:44:33:70:87:da:c1:
9b:a4:09:73:93:f9:85:b7:eb:88:01:31:51:81:fe:
62:11:c3:a5:1c:1d:fa:01:e4:de:55:ce:43:a2:9f:
fe:1a:0e:d6:69:bc:8a:6c:1c:78:f8:21:e9:ab:fe:
3f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:06:37:3C:7B:F0:48:A3:C9:B0:14:33:45:89:90:A5:9E:52:7E:54
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ac0f::/32
Signature Algorithm: sha256WithRSAEncryption
7f:06:07:2f:4b:e9:77:4b:a7:94:88:24:e1:3d:e3:ee:8b:ce:
f1:d4:5d:8b:c0:d1:bc:52:1b:c6:c6:1e:89:3e:66:7d:93:a3:
cf:9f:85:29:88:d0:e9:cb:f5:49:51:eb:91:9a:0a:82:d5:46:
e4:bf:ae:94:6e:3c:f7:79:cc:6a:88:dc:6a:0b:83:0d:e2:dd:
89:70:7f:6f:10:af:bf:da:70:b6:e4:2e:46:be:b4:19:22:20:
57:59:49:e1:cc:6d:59:3a:9e:58:d6:df:0e:6e:bb:4a:40:c8:
25:88:cc:41:66:3c:7e:6d:63:43:30:1f:16:89:b3:3c:dd:da:
a1:3b:b6:46:57:0a:73:3a:b0:4a:76:b0:4d:0e:ca:55:d9:a5:
6c:19:b2:b9:7d:72:69:e3:f2:70:b9:71:4f:50:0b:3e:03:8a:
c8:ed:8d:f9:51:a6:a8:91:be:3c:fa:dc:c2:c8:7b:ba:2e:4a:
6b:ed:bb:7d:fb:dc:74:bc:14:05:fa:ae:61:cf:45:00:09:25:
02:05:a9:af:a2:09:45:55:7c:ff:49:8f:7a:f4:09:1a:35:2e:
f8:22:4b:43:0f:42:03:69:72:a9:5b:04:57:8c:76:95:4a:99:
32:4d:0d:e6:45:fc:3c:70:55:0d:7b:17:21:4a:f9:30:4c:23:
19:a0:13:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:48 2026 by rpki-client