Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145128.roa
File: AS145128.roa (raw, json)
Hash identifier: 01l/hTFzQKtB3cv6EdXM/xe5nAVWqXIM8ErFdv0iNkI=
Subject key identifier: E4:18:96:A8:85:AA:5F:AA:BA:F0:02:4F:0E:3D:C8:A0:4B:60:16:0C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 26323E3A69899764FD2EC870C7116FA9A286310A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145128.roa
Signing time: Mon 25 May 2026 01:19:56 +0000
ROA not before: Mon 25 May 2026 01:14:56 +0000
ROA not after: Mon 24 May 2027 01:19:56 +0000
asID: 145128
IP address blocks: 240a:a9ae::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:32:3e:3a:69:89:97:64:fd:2e:c8:70:c7:11:6f:a9:a2:86:31:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:14:56 2026 GMT
Not After : May 24 01:19:56 2027 GMT
Subject: CN=E41896A885AA5FAABAF0024F0E3DC8A04B60160C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:2b:62:4d:9b:21:37:ae:06:60:8d:78:d8:5e:
16:93:1f:06:aa:6a:ad:ab:75:bf:74:86:32:ea:a3:
11:bd:39:30:d5:3f:0c:13:1d:bf:57:bb:05:7d:5a:
9a:e1:0a:3b:26:6a:3d:98:c1:9e:f8:78:40:44:32:
d8:a2:cb:aa:71:ea:fd:94:9f:9b:ca:de:2d:ad:9e:
ef:6d:95:0d:03:5f:45:63:fa:0d:72:57:ca:fa:6c:
d2:06:4c:05:29:63:e4:4a:dd:aa:93:0b:1e:8b:4b:
1e:65:5a:27:73:8b:08:e7:85:a7:90:85:eb:f6:37:
de:ba:1f:df:20:c2:7d:6e:ea:78:0a:33:0e:de:62:
91:e3:b7:82:0d:b0:b5:63:fa:9f:8f:17:98:3a:ea:
0c:55:ab:23:00:47:91:bf:ed:74:51:be:1a:99:ae:
16:14:24:45:2e:64:88:c1:33:ca:df:83:a7:d0:b3:
46:20:f6:4f:c0:97:18:f0:38:24:b6:6b:ec:a9:c4:
a0:5b:a6:7d:d5:9b:76:61:8e:09:44:69:06:c5:f7:
b0:54:d3:e2:cb:4a:a4:46:92:d8:88:31:3f:29:4c:
d7:2a:55:0f:90:98:92:e4:9f:32:7c:5f:20:90:48:
77:d6:7d:ca:d1:c3:3e:f8:df:cc:91:10:86:06:3b:
f7:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:18:96:A8:85:AA:5F:AA:BA:F0:02:4F:0E:3D:C8:A0:4B:60:16:0C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145128.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a9ae::/32
Signature Algorithm: sha256WithRSAEncryption
5b:1b:90:56:b6:a9:00:c8:25:2d:8f:ae:ab:7c:a2:80:e4:62:
51:5c:13:7f:5c:8b:0e:ee:c6:05:3c:e3:cb:d5:a1:25:da:e5:
1a:b2:41:49:df:09:cd:1a:f2:a5:d0:2a:4a:e9:8a:07:40:30:
93:23:3e:0b:2a:48:f7:76:5d:cf:ab:05:ec:d5:6a:9a:fa:e9:
e1:16:92:e4:04:39:8d:16:4e:83:10:3c:e2:2e:79:1b:c2:ab:
42:1d:c4:88:23:a8:9f:c6:08:03:53:db:e0:bd:79:04:dc:be:
5a:8d:83:0e:ff:64:ca:41:fc:1f:98:28:5b:11:1a:93:7c:10:
68:10:a3:25:e9:9d:d4:57:6f:15:f8:e6:58:8a:c5:15:19:c8:
61:af:1a:97:e6:f7:45:8d:3b:ae:0e:82:0a:80:b3:75:75:44:
15:a6:d4:d7:8c:f6:e1:20:92:35:81:d1:16:27:a5:b3:50:90:
86:93:3d:22:30:db:a7:cc:86:11:50:c8:75:5a:45:57:d4:14:
4f:6a:67:eb:61:f9:38:de:eb:32:ca:dc:bc:9c:f5:a8:08:e3:
b1:86:4e:c8:73:26:83:00:60:79:a2:f8:43:bc:38:66:38:9b:
65:80:41:28:6f:e2:d7:89:78:5a:62:f3:fa:8a:cd:d9:80:94:
77:d4:5c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:29 2026 by rpki-client