Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145103.roa
File: AS145103.roa (raw, json)
Hash identifier: l36rulUbmdpi+XeZqIhWKIcVBCh55YkE/0/G9Ec+w7o=
Subject key identifier: 56:EB:89:33:ED:FC:7E:41:A1:46:14:EF:AC:84:C3:02:BB:13:56:6E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2773DBE1B262A91DFD9C1119D11ACCEFEE530877
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145103.roa
Signing time: Tue 26 May 2026 02:34:51 +0000
ROA not before: Tue 26 May 2026 02:29:51 +0000
ROA not after: Tue 25 May 2027 02:34:51 +0000
asID: 145103
IP address blocks: 240a:a995::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:73:db:e1:b2:62:a9:1d:fd:9c:11:19:d1:1a:cc:ef:ee:53:08:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:29:51 2026 GMT
Not After : May 25 02:34:51 2027 GMT
Subject: CN=56EB8933EDFC7E41A14614EFAC84C302BB13566E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:1c:3e:5f:a9:46:c5:77:d4:7c:29:51:13:b4:
bd:2f:31:70:f6:5e:79:3c:9c:c0:06:b8:d2:aa:4b:
da:2c:3d:57:4d:d1:ee:c1:f6:45:2b:70:ce:b1:58:
ee:22:6f:b2:05:a7:be:44:08:3a:f3:77:cc:4c:5e:
5e:5e:fe:66:df:02:cc:3a:25:4a:07:6e:7c:f1:f9:
7c:3f:80:22:73:96:9d:7b:e7:84:28:a3:38:08:e1:
d3:1a:7f:4e:c8:f2:bc:20:53:f0:56:8f:bb:22:a7:
5e:0d:ce:2d:40:c0:38:74:e7:a4:7e:50:de:e8:cb:
b9:59:c3:00:30:56:d5:5d:b5:c6:90:68:62:6a:fe:
47:62:50:21:47:da:1e:64:80:7d:1a:80:9f:ca:fb:
01:b8:43:18:01:2d:75:e4:4d:28:36:3d:88:b0:c9:
5a:34:83:f1:4d:a2:84:c4:20:28:27:17:b0:9c:cd:
bf:7e:83:4b:da:43:12:6d:25:ce:75:93:3f:16:66:
fb:8b:e3:a6:08:92:6a:77:46:14:04:23:ee:43:1a:
25:0b:30:6f:2f:b8:36:bb:bb:19:39:ca:28:b3:44:
c6:a7:5b:5d:d0:28:b6:a3:37:4c:e0:07:76:a0:60:
b5:69:f6:ea:c5:4d:3c:19:1c:6c:5f:80:ea:fb:eb:
2d:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:EB:89:33:ED:FC:7E:41:A1:46:14:EF:AC:84:C3:02:BB:13:56:6E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145103.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a995::/32
Signature Algorithm: sha256WithRSAEncryption
26:59:9b:29:b0:31:be:fb:0b:e3:ac:bd:96:ed:b9:87:0f:89:
18:47:b9:39:07:53:7c:73:9b:60:89:e4:fe:25:36:e8:66:71:
f3:16:01:f3:73:1e:ff:90:4a:90:c0:eb:61:68:22:82:44:fd:
a9:fb:89:6c:f5:9b:fe:32:21:b2:fe:1a:fc:41:61:87:8c:b6:
85:0f:44:30:8f:fa:3d:7a:0e:31:9a:5f:c2:19:32:12:b5:bc:
3f:02:3b:cf:87:17:e8:3b:0b:76:da:be:f6:50:f6:bd:60:fe:
fd:32:7d:ee:61:bc:32:76:65:6c:8b:82:42:ed:ef:e5:0f:ac:
9f:91:1b:13:6a:a9:79:a5:fe:1e:a4:5c:96:ae:bd:fd:3d:3e:
91:c9:12:9e:d8:59:e6:70:83:79:da:ed:35:9f:2d:d8:15:98:
83:ac:d8:57:6d:52:2e:5e:d6:3d:1d:55:ad:97:a6:a5:b6:ba:
eb:d7:6d:98:39:2f:c2:be:25:20:25:bb:e9:58:3b:d7:c5:92:
e7:98:c9:86:ba:53:22:b0:6c:01:e8:ad:6e:2d:05:fe:81:26:
69:ee:e6:63:bf:fb:5a:c3:3d:d2:11:b9:2e:e3:60:c0:1e:2f:
53:9c:bd:07:95:bd:59:48:bf:82:94:b2:7d:53:8a:bc:5b:b7:
71:6b:62:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:18 2026 by rpki-client