Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145023.roa
File: AS145023.roa (raw, json)
Hash identifier: bvEGwuIUmnDQFMemaQI2GTnTzLX52xOcl+EnBBZle6w=
Subject key identifier: BF:A3:17:69:2C:8A:1B:EC:13:5E:6B:E4:33:3B:23:7A:14:89:00:0E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3663FE389D4DA58D043EB125E2950DC8924B371D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145023.roa
Signing time: Fri 22 May 2026 07:32:18 +0000
ROA not before: Fri 22 May 2026 07:27:18 +0000
ROA not after: Fri 21 May 2027 07:32:18 +0000
asID: 145023
IP address blocks: 240a:a945::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:63:fe:38:9d:4d:a5:8d:04:3e:b1:25:e2:95:0d:c8:92:4b:37:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:27:18 2026 GMT
Not After : May 21 07:32:18 2027 GMT
Subject: CN=BFA317692C8A1BEC135E6BE4333B237A1489000E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c6:b4:ca:16:79:63:93:14:77:42:08:cd:82:
fb:0c:a5:ac:3a:bd:9e:98:ff:8b:65:06:06:59:8d:
67:19:b7:ed:1e:fc:52:cb:05:9d:ca:ee:e7:13:ad:
6a:09:ec:e0:f4:e7:a2:92:93:f9:57:a9:cd:b8:e2:
7e:4b:54:5b:85:3f:ea:3d:61:bf:53:64:f2:9a:11:
80:80:6b:36:85:7a:36:09:c7:a0:ed:a5:75:f2:34:
87:c6:2b:59:34:68:d9:b3:b1:b9:ab:60:32:f0:a2:
27:3f:03:01:ed:f8:b2:42:49:f6:47:8e:32:13:29:
59:55:09:16:cc:69:8b:c1:b5:25:86:11:5e:4d:56:
90:08:b9:61:e4:91:1e:37:a0:a4:60:9a:ec:be:a0:
74:71:f1:07:26:46:46:9e:46:e3:f0:85:6e:69:70:
5d:63:32:42:8f:9e:f5:c6:7f:a6:c2:ff:fd:43:b9:
e9:c0:fc:b8:b4:ff:d6:72:92:ca:ac:04:44:7d:6a:
f8:59:71:d7:07:52:41:53:76:20:10:c6:e8:3f:9b:
e7:c9:12:d1:fd:d0:97:d2:66:0b:db:45:bb:79:29:
ad:ca:ac:6e:78:68:1d:05:85:9a:22:cc:4d:31:5f:
88:e1:14:5d:76:18:14:bb:51:e1:6e:08:2d:41:11:
ac:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:A3:17:69:2C:8A:1B:EC:13:5E:6B:E4:33:3B:23:7A:14:89:00:0E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145023.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a945::/32
Signature Algorithm: sha256WithRSAEncryption
3a:2e:95:9f:6e:3e:1b:cd:c2:81:1d:f1:72:f7:3c:19:2f:b9:
82:0a:05:08:79:ca:ac:f8:c1:36:3f:bf:f1:2f:e6:5c:6f:8c:
07:67:1a:d8:19:3a:52:df:4c:21:b5:9f:0f:55:d1:47:44:b4:
0f:67:03:81:f0:ad:4c:59:06:03:72:87:5b:ae:67:8b:1a:03:
54:f2:33:c7:8c:d4:b6:47:ea:af:a8:17:ae:fa:3c:93:30:34:
8b:64:e6:72:43:47:1b:fa:47:14:78:60:03:00:36:c2:c2:d6:
47:12:34:13:49:67:99:8d:59:c2:3c:10:5e:1c:7a:c2:55:d9:
58:83:e8:1c:d0:55:d9:7b:00:d4:ef:94:cf:7c:72:0e:5d:4f:
f6:52:ae:2c:51:c3:28:eb:b5:90:5d:e6:fe:a0:fa:aa:fb:d5:
85:f9:29:ae:7b:48:db:99:ab:cf:7c:d7:5c:5c:d2:9c:26:cb:
f7:de:2b:e4:53:ad:3a:e8:9f:ed:dd:99:a4:83:0f:4a:d8:06:
79:c3:73:5e:d5:b5:16:a1:33:6a:27:6c:e3:60:e3:f6:7f:81:
50:5d:3b:af:1c:a7:ca:7f:4a:42:53:f1:79:59:c6:46:e8:67:
f2:42:14:d5:5e:35:6d:02:0b:19:b1:a7:26:3a:7c:13:a4:ad:
55:31:d4:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:26 2026 by rpki-client