Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145990.roa
File: AS145990.roa (raw, json)
Hash identifier: O76DMiizTGrVSGO7uOVCZOG95juOMM5MKyvQmqTLJvQ=
Subject key identifier: A7:94:4D:0B:0C:E5:0F:44:EF:8C:60:22:59:57:F4:5C:BD:A5:0E:D5
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 48EF1835E648C7F711B586D0E2ABD4F86CBBD896
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145990.roa
Signing time: Mon 25 May 2026 06:28:16 +0000
ROA not before: Mon 25 May 2026 06:23:16 +0000
ROA not after: Mon 24 May 2027 06:28:16 +0000
asID: 145990
IP address blocks: 240a:ad0c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:ef:18:35:e6:48:c7:f7:11:b5:86:d0:e2:ab:d4:f8:6c:bb:d8:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:16 2026 GMT
Not After : May 24 06:28:16 2027 GMT
Subject: CN=A7944D0B0CE50F44EF8C60225957F45CBDA50ED5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:34:89:f2:08:f6:a0:f6:4f:2f:64:a0:9c:be:
74:4d:59:44:af:f1:fe:5f:0d:63:46:ac:8b:20:99:
16:62:b9:94:d5:b4:d5:66:73:6d:75:fe:ed:60:2a:
84:e7:77:6d:ba:71:12:d2:6b:f5:2e:2c:e0:11:5c:
d6:08:2b:8d:e8:4c:a3:0f:e1:66:70:18:f3:17:4a:
4f:70:de:40:4e:d4:24:36:8b:28:c8:c6:b0:01:d9:
bd:f1:12:c8:32:a8:a3:9a:52:d0:c5:12:78:c0:31:
ed:95:31:cb:0b:1c:62:3e:36:97:38:5c:2b:f6:5b:
72:4b:1b:d6:4a:76:9c:2d:51:e7:81:ac:ec:6d:cb:
5f:a0:22:9c:2e:3a:55:fc:64:b3:e1:37:ae:5a:09:
b6:04:d8:4f:16:4f:11:11:73:38:a4:8a:e6:0c:34:
90:6d:40:06:0a:c3:cf:b7:a7:6a:59:6e:59:0a:01:
1d:19:d7:c4:70:f8:ea:98:23:b1:c3:0f:37:12:26:
b8:4d:9e:e9:1a:1b:bd:74:d6:f2:e2:5f:b4:0c:df:
62:66:9e:ce:67:b8:99:ef:dd:5b:5b:a5:97:53:28:
af:23:83:97:42:b8:74:92:dc:0a:a3:4a:44:c5:53:
b6:c5:18:f1:2d:23:3a:d6:04:32:8f:6d:a9:32:76:
7a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:94:4D:0B:0C:E5:0F:44:EF:8C:60:22:59:57:F4:5C:BD:A5:0E:D5
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145990.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ad0c::/32
Signature Algorithm: sha256WithRSAEncryption
52:45:71:d9:cf:57:4d:e0:8c:f0:c8:66:8c:58:24:d4:54:ab:
eb:ed:d2:58:5d:9a:d6:5a:6c:31:b6:7c:94:ec:dd:95:f4:81:
1f:14:a9:74:92:e5:c1:c5:16:4a:1d:54:e6:6b:90:32:a4:fe:
6d:34:25:f0:ad:d8:9e:ff:cb:a1:05:ba:3f:ef:5e:f6:69:e2:
a8:14:e2:1a:20:84:b6:38:2e:3b:f0:9c:55:d7:f7:09:21:71:
17:0f:da:50:ef:aa:6b:35:bf:35:e0:23:de:67:c0:31:b5:bc:
fb:0d:90:94:a1:16:fe:b7:99:7c:b7:d7:c9:ec:d1:c9:1a:b3:
e0:b0:a2:13:8c:df:4e:8f:c9:4c:0c:d0:15:0f:c8:0c:15:e5:
bf:ba:e9:dd:12:f1:c7:5f:fb:b7:15:69:07:a4:6e:37:f8:24:
4e:2d:8c:aa:c5:2d:be:e3:2c:30:3b:90:7b:3f:2c:4a:e0:ad:
17:ed:c6:b6:f8:ac:50:39:ab:bc:c7:25:80:2d:03:79:92:54:
8f:d4:23:ad:23:a1:22:cc:91:e6:17:91:f3:d9:3c:39:7b:7a:
d6:4f:21:1d:60:3b:db:3f:13:1e:ba:14:e6:56:d4:6f:10:69:
42:0e:dc:37:89:ad:9b:ab:b5:d4:89:90:56:c2:52:85:6f:cd:
2d:28:b1:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:57 2026 by rpki-client