Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145999.roa
File: AS145999.roa (raw, json)
Hash identifier: Xt5nk1eR1lfpzaAUVpBuiUE9/A84Wn51jBU1ljR5p9E=
Subject key identifier: A7:3B:85:D0:3D:50:F6:0D:8A:C6:BA:AE:2E:8D:E8:E2:DD:6E:99:71
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 576BE4CCBF03C2B3EB0EE88CC250DF9557CD7732
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145999.roa
Signing time: Fri 22 May 2026 07:09:13 +0000
ROA not before: Fri 22 May 2026 07:04:13 +0000
ROA not after: Fri 21 May 2027 07:09:13 +0000
asID: 145999
IP address blocks: 240a:ad15::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:6b:e4:cc:bf:03:c2:b3:eb:0e:e8:8c:c2:50:df:95:57:cd:77:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:04:13 2026 GMT
Not After : May 21 07:09:13 2027 GMT
Subject: CN=A73B85D03D50F60D8AC6BAAE2E8DE8E2DD6E9971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:2f:11:cc:e8:82:73:21:b1:bc:eb:fb:de:d1:
96:e1:d6:58:ba:16:59:60:e9:d4:46:88:0f:43:77:
8b:52:5d:bc:a1:55:e2:0f:c4:9a:96:c1:b8:a0:a8:
8b:6b:36:ec:1e:bd:c7:d9:53:10:cb:95:c4:bc:08:
b0:5e:b0:43:de:96:c7:61:29:da:48:cc:ab:be:dc:
45:57:59:48:e5:a7:85:64:da:b6:f2:55:61:43:95:
32:59:d3:47:fe:a9:8e:73:ad:5f:cb:7e:ab:12:d6:
3b:68:1a:11:69:12:fa:49:6c:59:fa:d9:0f:1f:e9:
ae:2e:de:3d:2b:73:90:82:4d:a4:3e:4a:1d:b0:bc:
8e:05:21:b0:b9:f1:7d:12:ac:b7:5f:a7:58:e5:5b:
91:8f:e8:99:53:48:8f:e8:1d:38:d9:cb:3e:6f:3e:
f0:0e:a6:13:f3:d0:8d:ef:4c:ad:a4:4c:d3:9b:8b:
e5:81:d3:14:1b:b0:de:d2:40:18:40:b2:90:4b:14:
d9:10:e9:7e:2f:99:f6:29:f7:95:0f:1d:23:29:fb:
d5:aa:2f:4f:8b:13:9b:d4:65:50:c8:e6:d9:84:87:
14:22:db:13:ee:d5:52:ac:39:30:df:24:9d:cb:ab:
22:36:f7:d3:35:15:ae:03:26:30:d6:26:95:fc:54:
81:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:3B:85:D0:3D:50:F6:0D:8A:C6:BA:AE:2E:8D:E8:E2:DD:6E:99:71
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145999.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ad15::/32
Signature Algorithm: sha256WithRSAEncryption
37:f6:f0:80:de:99:32:1f:a4:db:0f:41:be:dd:7f:45:b2:f3:
b5:d2:37:c2:b5:fb:2b:7c:c9:2d:d5:db:79:d1:84:38:c5:60:
d2:bb:cf:8e:fe:b5:ce:90:6f:b0:9b:c5:e9:99:aa:7b:67:1c:
02:0c:de:11:c7:d6:f5:4e:da:db:0d:dc:1d:12:5c:67:ee:65:
ad:05:ce:28:aa:a7:d6:e0:fd:6e:f7:13:14:6d:d2:17:04:a0:
c7:40:6e:3c:33:3f:76:08:85:96:50:1e:a0:07:96:45:c6:e4:
7d:d5:03:42:f7:29:bb:6c:41:2a:cd:36:ee:54:ed:2f:57:fc:
53:01:1f:cb:87:e8:1d:58:ca:5d:99:18:e4:b7:0a:4e:af:83:
94:55:58:f1:79:c0:40:28:e0:4b:57:60:d7:21:9b:36:71:b2:
5c:20:c4:f4:0b:62:f0:02:d3:c2:61:6f:c0:35:50:0d:0d:2b:
5d:fa:f5:5a:19:05:ef:d3:d2:cb:d0:9b:5c:2f:71:c5:21:a6:
37:5b:29:b2:ad:d8:bc:eb:b7:73:da:87:e2:c4:cd:8a:35:7a:
37:7c:24:dc:34:bf:7c:b0:fb:47:bc:51:7b:58:43:c0:29:4c:
97:4e:eb:59:fb:2e:db:a4:03:30:96:e9:01:7b:5e:d3:49:cb:
6e:52:7f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:49 2026 by rpki-client