Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145063.roa
File: AS145063.roa (raw, json)
Hash identifier: hw23K7Rg7Gte0972eN7sKmKvH9hxh/YlAedxz6DpUkE=
Subject key identifier: F1:CE:AF:03:FE:7E:77:E8:72:D6:58:08:72:41:71:6C:9F:D1:FA:FA
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 450A3309C0DBDE1DCF83CB74641CB57011CBD1DD
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145063.roa
Signing time: Mon 25 May 2026 02:22:29 +0000
ROA not before: Mon 25 May 2026 02:17:29 +0000
ROA not after: Mon 24 May 2027 02:22:29 +0000
asID: 145063
IP address blocks: 240a:a96d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:0a:33:09:c0:db:de:1d:cf:83:cb:74:64:1c:b5:70:11:cb:d1:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:29 2026 GMT
Not After : May 24 02:22:29 2027 GMT
Subject: CN=F1CEAF03FE7E77E872D658087241716C9FD1FAFA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:61:3f:89:39:2c:8a:0c:e7:7d:af:4e:60:a8:
e5:d4:bd:67:9a:90:ea:b2:30:84:df:05:55:09:fa:
45:7b:3e:07:cd:43:1a:81:50:00:98:e2:43:60:cb:
7a:a6:e9:1a:ed:3a:36:87:37:53:63:46:a0:2b:2e:
87:21:b2:1b:80:f8:0b:62:05:b6:b0:e4:50:6d:f4:
4c:22:95:20:06:8e:83:21:a5:17:a3:f6:b4:7c:7a:
d9:91:4f:5e:77:0c:9c:fa:2f:0f:75:8f:bf:45:be:
82:df:a4:ad:c6:2c:77:e1:6d:67:eb:83:e0:46:c3:
09:93:1d:6c:c0:a0:8a:28:0b:ea:d8:38:c4:b7:1f:
a9:7d:1d:bd:ea:49:12:ee:8c:23:b3:0f:c5:99:f8:
66:f2:fb:3a:02:26:22:69:f2:24:b8:42:23:1f:88:
a7:bd:57:f5:38:e4:6f:82:43:fa:ce:31:8a:46:a6:
fb:65:1f:ba:2d:a5:0b:b6:b6:f6:1b:a3:30:49:08:
d1:dc:92:32:90:31:27:63:c4:3f:ae:e5:46:0f:ee:
d4:2e:9c:8f:46:5a:f0:57:5c:8b:fc:63:4f:ce:1d:
95:1e:30:54:82:3a:4b:ed:d5:8a:da:02:41:75:3e:
4f:26:04:88:c6:05:c9:8c:70:7a:58:13:d0:87:14:
0f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:CE:AF:03:FE:7E:77:E8:72:D6:58:08:72:41:71:6C:9F:D1:FA:FA
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145063.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a96d::/32
Signature Algorithm: sha256WithRSAEncryption
17:75:9a:82:8a:87:a8:81:d6:15:dc:35:d4:4b:01:74:f8:bc:
6e:9a:02:41:3c:fd:c2:1e:5e:b9:b8:7f:28:69:bd:29:a6:7c:
c4:60:b4:ee:e4:c5:c8:29:5b:69:a7:9e:01:d3:10:d1:95:52:
85:81:ba:da:50:d7:f8:b9:0e:0d:13:5d:30:ee:40:bf:bd:d6:
25:68:d7:e9:84:28:3a:41:89:8b:54:18:68:87:18:ab:e6:17:
6d:50:51:bc:23:85:55:25:de:81:35:2c:09:b6:7b:1a:33:87:
22:8e:8c:8f:6b:6b:cc:e0:6d:12:35:35:0e:92:0d:ef:90:6f:
6a:1b:92:5b:29:b1:b0:87:a1:28:07:89:b8:96:11:c6:0a:0e:
88:5e:9f:18:88:a3:02:2b:39:59:b6:11:42:56:0d:73:bb:f5:
25:6e:e7:04:d9:2c:e5:41:81:b5:fe:82:e0:0a:22:4b:4d:8e:
de:1e:6f:c9:27:db:fc:14:8a:c8:ab:e5:2e:ed:6d:85:d8:91:
28:8c:7b:3a:51:68:82:cc:19:cf:70:ab:81:06:5f:6f:1c:7e:
d3:21:02:93:68:38:ba:0e:b7:f6:bd:be:09:60:d5:ab:7e:72:
ef:83:7d:9d:6c:24:54:5d:61:8a:36:e3:bd:da:3b:50:18:39:
15:34:0b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:22 2026 by rpki-client