Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145799.roa
File: AS145799.roa (raw, json)
Hash identifier: ueFD+Ox6P9URoCxS+yQ3bAecV2n1ezlXYK49yRvSYdw=
Subject key identifier: E0:F2:F7:93:93:8A:AA:27:9C:72:E0:48:73:30:28:DA:E9:16:CB:4F
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6B37155525D5C197C1B66FF8CF1E1C07B9170EAF
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145799.roa
Signing time: Tue 26 May 2026 08:52:59 +0000
ROA not before: Tue 26 May 2026 08:47:59 +0000
ROA not after: Tue 25 May 2027 08:52:59 +0000
asID: 145799
IP address blocks: 240a:ac4d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:37:15:55:25:d5:c1:97:c1:b6:6f:f8:cf:1e:1c:07:b9:17:0e:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 08:47:59 2026 GMT
Not After : May 25 08:52:59 2027 GMT
Subject: CN=E0F2F793938AAA279C72E048733028DAE916CB4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e6:89:b0:bd:de:1b:31:8e:42:4f:93:8d:b8:
4f:c9:28:8d:97:3e:8b:bd:2e:5e:0a:60:32:77:11:
f2:08:59:0b:b5:ba:d9:7e:05:f7:e9:01:ec:5e:e3:
f0:13:68:91:d6:ef:93:be:f6:1b:14:59:75:b1:9e:
ee:f8:60:9f:8c:82:60:61:fb:26:fb:2c:6f:57:21:
2d:87:1a:c6:55:bd:3e:cd:68:0f:26:40:5c:a1:93:
5f:4e:1e:95:c2:bc:c4:53:12:83:95:8b:b6:cf:f0:
d9:f7:d4:c1:80:55:77:2a:c3:a2:c9:31:97:68:0e:
ae:44:76:17:34:e8:0d:f8:63:ba:84:cb:53:12:57:
c4:28:fb:6b:e6:40:7e:b8:21:37:1e:7a:ad:1d:98:
38:a0:8e:07:af:2b:29:87:3e:df:9e:9f:a7:db:9e:
a0:0c:d9:fc:fc:82:69:2a:68:26:0e:23:a5:2c:d1:
34:9d:93:73:94:1f:7e:a2:aa:74:f7:e2:db:b9:26:
c4:fa:7e:67:d2:fd:c3:08:9b:09:51:35:a0:22:66:
a6:35:fc:3b:95:c6:9c:64:ff:01:07:29:04:1b:6a:
18:91:b6:81:ec:67:f3:df:5c:fe:bd:d9:46:0c:1a:
9c:8c:90:b9:83:98:fb:8d:97:7e:9a:5f:8b:c7:cc:
69:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:F2:F7:93:93:8A:AA:27:9C:72:E0:48:73:30:28:DA:E9:16:CB:4F
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145799.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ac4d::/32
Signature Algorithm: sha256WithRSAEncryption
2a:cc:07:fb:ff:01:3c:91:be:ca:56:c3:e5:42:61:c8:4a:41:
78:37:9c:7b:78:70:df:00:35:2a:22:92:bb:53:13:bf:aa:46:
5f:af:06:9c:80:a1:57:59:ab:c2:16:bf:c2:b4:4b:ce:30:c5:
1c:4c:e4:de:33:32:7b:79:2e:6d:5d:3e:bc:3a:ec:be:50:9b:
c4:ac:bf:ab:94:a8:61:d2:e7:5a:fc:c8:76:8e:87:f2:71:2e:
8e:fd:41:e4:04:3f:03:07:8b:c9:58:35:7e:62:fa:ee:78:c4:
d9:50:b8:d9:a6:cb:5c:58:10:28:c4:19:7a:89:40:a6:88:20:
67:8e:d0:e4:23:76:8f:21:01:34:74:28:4b:53:f0:d2:fb:2f:
73:c1:3d:a6:47:b1:a4:b9:df:aa:bb:ff:74:2f:08:a0:a1:ca:
b7:48:99:a3:48:5d:cc:63:07:a8:b8:0d:5c:e3:f5:bb:48:85:
49:0f:96:4d:1d:37:4b:dc:cc:44:17:dc:33:99:93:28:62:3c:
6e:d4:cf:f4:9b:6e:5b:00:68:b5:5d:af:85:38:70:96:72:fc:
c2:c4:50:2a:f5:26:c4:81:c0:c1:f3:3b:86:30:ba:7e:de:03:
c6:05:0b:ad:87:a5:9c:42:ad:a5:69:1e:d3:62:76:7a:8c:55:
62:8b:fe:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:09 2026 by rpki-client