Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145138.roa
File: AS145138.roa (raw, json)
Hash identifier: uJHwZU5Fdk0P8xDvx20JoUF8DraFKZAgJz/xg1ltPJM=
Subject key identifier: BE:37:ED:39:D4:C0:54:2B:6A:C6:04:89:6C:67:6E:F4:E1:63:4B:C3
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 22D7FAD72AAA67557BA76706D06F339FCC675E05
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145138.roa
Signing time: Mon 25 May 2026 03:19:32 +0000
ROA not before: Mon 25 May 2026 03:14:32 +0000
ROA not after: Mon 24 May 2027 03:19:32 +0000
asID: 145138
IP address blocks: 240a:a9b8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:d7:fa:d7:2a:aa:67:55:7b:a7:67:06:d0:6f:33:9f:cc:67:5e:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:32 2026 GMT
Not After : May 24 03:19:32 2027 GMT
Subject: CN=BE37ED39D4C0542B6AC604896C676EF4E1634BC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:60:e1:38:7e:87:89:64:95:ca:9b:c8:1c:44:
a8:86:b8:f9:e3:2d:34:ac:05:74:9e:cc:69:61:86:
8e:2c:84:8f:5d:db:c0:35:ec:12:2f:95:45:70:90:
69:06:01:6b:6c:88:7c:14:0b:d6:8e:f8:31:1b:85:
f0:4f:af:a1:82:61:ea:60:16:bb:a4:69:a5:3e:c3:
c1:86:89:1f:ca:2d:09:94:9d:6c:03:f6:cc:6e:0d:
2c:11:d7:be:d4:9a:a8:ca:6f:e9:9f:5a:2b:85:30:
26:e3:66:73:17:96:0d:f6:e3:db:77:0d:59:a1:87:
08:35:30:a0:27:c3:41:78:74:5a:ab:4a:d5:f9:f6:
06:f7:ce:0c:56:e0:8c:a4:f6:a7:71:bb:dc:0c:5b:
73:95:5a:b5:31:32:31:e9:75:77:0b:b3:88:20:55:
24:c5:1b:b6:00:f9:f9:e1:d6:9e:b0:91:ec:9e:b6:
eb:ff:32:a8:d0:9f:14:02:1f:5e:d8:57:cb:a8:23:
c3:fd:8a:f2:3a:da:cc:51:b2:c2:22:43:d6:98:f9:
ea:19:5d:e8:fe:01:3f:08:bd:8c:27:d7:cc:a1:7b:
80:79:fe:42:a0:d4:58:42:d2:24:a1:96:6c:61:12:
14:73:c4:9b:6d:bf:01:88:a2:a3:bc:8f:f9:bf:d7:
43:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:37:ED:39:D4:C0:54:2B:6A:C6:04:89:6C:67:6E:F4:E1:63:4B:C3
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a9b8::/32
Signature Algorithm: sha256WithRSAEncryption
43:90:4c:9a:0a:09:e8:d7:da:c9:1c:63:fd:c3:6e:21:8e:e8:
65:73:f5:fc:6f:eb:e0:83:a7:72:36:41:23:3c:f9:84:85:86:
70:3c:d4:39:af:1c:f1:f7:46:32:9c:a6:14:16:07:28:eb:e8:
ea:3b:d5:09:e9:13:b4:c7:98:48:16:4c:48:82:ac:49:a4:5b:
4e:c4:e8:1a:85:e4:d0:22:3d:2d:12:7d:b6:33:2e:20:b3:54:
59:e3:88:1f:79:fe:0b:0c:1c:5c:7a:79:05:18:d8:19:f5:a2:
02:ae:63:fa:fc:5b:9a:76:f3:04:95:ab:ac:72:df:32:c2:b2:
60:bd:70:0f:01:3f:0b:b1:c5:06:91:ff:2b:5c:79:d4:f3:6e:
ca:29:7a:71:72:53:00:16:cb:61:2c:c9:c6:3a:c9:34:68:5d:
36:41:49:89:a9:0a:3d:f9:f2:ff:e8:ae:d7:30:93:77:34:23:
69:32:3b:4b:1d:76:da:a9:a8:2a:c8:20:07:7d:b1:99:58:c7:
4e:a7:00:80:5b:1f:3c:33:15:db:58:5f:27:c8:cc:d6:aa:e9:
2b:bc:d1:e7:57:8d:62:bc:2a:c4:23:50:e7:d8:cc:ad:8e:fe:
5d:b0:b9:a7:e7:b6:3b:47:47:d4:ca:a2:a2:f2:cc:87:c0:95:
68:7a:b2:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:35 2026 by rpki-client