Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145215.roa
File: AS145215.roa (raw, json)
Hash identifier: 1kpBmxIbA71O/9B16krozXPKObrzgj9PI4PCtZMFunw=
Subject key identifier: E8:09:42:D4:B6:B0:0F:A3:AD:F2:58:8E:51:6E:7A:97:70:E5:8E:DC
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 41ADD02891D6FB0524316A9EA9A70EF31C88FB04
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145215.roa
Signing time: Mon 25 May 2026 01:51:21 +0000
ROA not before: Mon 25 May 2026 01:46:21 +0000
ROA not after: Mon 24 May 2027 01:51:21 +0000
asID: 145215
IP address blocks: 240a:aa05::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:ad:d0:28:91:d6:fb:05:24:31:6a:9e:a9:a7:0e:f3:1c:88:fb:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:46:21 2026 GMT
Not After : May 24 01:51:21 2027 GMT
Subject: CN=E80942D4B6B00FA3ADF2588E516E7A9770E58EDC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:9e:b3:f4:1c:e1:69:eb:07:cd:d3:9e:87:32:
42:0d:9c:c8:8e:d7:40:96:25:02:dc:df:a9:83:39:
c9:77:18:f4:57:c9:6f:86:58:cf:a3:8f:c5:c9:39:
79:4e:ae:30:0a:e1:90:20:24:03:c8:e5:87:8b:97:
84:41:ba:60:3e:6b:b6:fb:f0:a5:2b:d8:ae:1a:cb:
97:20:b9:e7:8d:f2:55:35:42:8e:59:f3:5c:15:24:
95:8d:23:a7:95:7b:fe:03:b1:e6:11:80:e1:fe:12:
f7:d6:e3:97:f0:ef:0b:b5:bd:0c:ec:3b:d3:1c:9a:
4a:5b:05:e7:5f:b8:e5:97:e5:7e:5f:20:4e:39:d3:
9b:83:57:12:a2:2b:e3:35:b4:24:72:2e:fd:a2:97:
d8:ba:db:a9:27:f1:a2:e9:7b:b6:4b:4b:dd:71:0f:
61:1e:5a:5c:ed:64:fb:c2:ba:c4:35:7f:fe:3c:d8:
6e:ea:87:40:31:70:07:e2:99:3c:b2:d7:2c:bc:5a:
92:94:80:10:2d:19:fb:c8:0a:53:63:f0:05:ab:58:
00:c9:07:55:30:d9:b1:8e:87:f4:a4:a5:db:ee:b0:
ba:b7:e4:98:3b:1a:15:70:d9:25:1f:89:1a:4e:4e:
b9:2c:b3:59:1e:e0:46:51:d2:1d:dd:d0:2c:18:b7:
75:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:09:42:D4:B6:B0:0F:A3:AD:F2:58:8E:51:6E:7A:97:70:E5:8E:DC
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145215.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa05::/32
Signature Algorithm: sha256WithRSAEncryption
18:24:df:2a:6f:79:06:2a:29:7c:f5:73:48:1b:ea:2f:27:7e:
70:7d:d7:89:3f:b0:4a:b0:59:4f:00:28:fa:0c:4c:e6:50:7a:
28:b0:6d:86:1c:75:92:ff:7f:95:54:12:14:16:07:8f:43:22:
11:63:e7:22:05:c7:b0:93:19:26:7b:c6:3c:9e:33:a4:5d:01:
75:44:3a:9e:6b:b5:6d:de:c1:a6:78:fa:08:b3:30:cc:72:19:
2b:f0:cf:12:de:fb:de:4f:3e:31:1f:a1:1b:5e:d6:74:43:a8:
b8:a6:ef:59:f2:fd:9f:04:34:b1:18:92:f8:2f:54:3a:08:4a:
73:c9:07:22:fc:0f:af:e0:6f:dd:08:71:a2:e0:b1:fb:fd:d3:
a9:d9:4b:5f:0d:be:58:d4:6d:7d:61:e7:2e:3b:6b:b4:5d:99:
9d:c7:eb:67:60:33:6e:5b:0e:25:e8:db:a6:5d:a3:20:56:bb:
1e:6c:e6:85:8a:d7:24:18:63:4b:3e:3a:ed:50:68:07:fa:68:
cd:ce:03:96:c2:c7:35:f5:4e:98:77:7c:03:6f:43:22:4b:a4:
ee:4f:e7:be:e8:3f:cd:d2:6a:71:01:df:ba:3b:7a:1a:1e:b1:
ce:4a:b6:6d:39:bf:48:17:e6:4b:89:93:ec:3d:9f:c2:a4:5c:
ff:d1:18:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:36 2026 by rpki-client