Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145251.roa
File: AS145251.roa (raw, json)
Hash identifier: RNSIeLYQkOhSbBfevSXbXd3OTzFxHLhheE00pZC1SVU=
Subject key identifier: 1E:39:BB:07:6A:9B:26:D9:3E:21:EC:ED:4C:B2:E5:E6:28:88:0D:DE
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1E1D18E059E5339A5750583B3DD31470BC2937C0
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145251.roa
Signing time: Mon 25 May 2026 01:51:15 +0000
ROA not before: Mon 25 May 2026 01:46:15 +0000
ROA not after: Mon 24 May 2027 01:51:15 +0000
asID: 145251
IP address blocks: 240a:aa29::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:1d:18:e0:59:e5:33:9a:57:50:58:3b:3d:d3:14:70:bc:29:37:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:46:15 2026 GMT
Not After : May 24 01:51:15 2027 GMT
Subject: CN=1E39BB076A9B26D93E21ECED4CB2E5E628880DDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:cc:d4:f8:8d:d3:3c:30:67:38:ad:d5:e8:62:
ff:2e:84:e1:28:9f:51:2b:98:9c:a7:20:5e:81:4c:
e9:c5:e1:f1:d1:36:9d:8f:cf:e1:34:d9:2a:09:a0:
79:3c:d6:68:a8:4f:27:34:ba:61:96:5b:41:ef:13:
6d:48:a7:b9:84:2a:31:93:2c:54:ad:c2:4c:95:a8:
f0:de:2b:eb:73:25:65:ee:06:89:09:05:d5:ca:8c:
17:c4:e9:ed:fa:5e:e8:81:f5:1b:53:07:93:4a:d0:
b4:ba:98:53:04:4f:65:37:37:b0:fd:8f:bc:4a:6c:
9b:ed:da:a0:5a:63:3f:fd:84:63:98:c3:86:04:25:
1d:50:d8:2d:e1:cd:21:d0:f9:01:ec:5b:12:0e:28:
c1:72:3e:7c:48:61:da:7e:4a:73:e4:29:cb:7a:2d:
2b:59:a0:29:54:01:2d:38:ae:be:41:97:02:fb:b4:
8c:b1:b2:51:5c:1a:07:72:f4:06:93:b8:d4:87:8e:
9a:73:95:c3:c6:db:f7:c5:fc:c2:79:2b:ed:e3:b7:
5c:ab:74:3c:31:f5:01:b0:13:1e:aa:90:e6:f0:99:
08:6e:c0:f2:ce:6e:37:ff:04:f7:9e:d6:84:e0:02:
b7:6a:19:1e:de:91:4b:8e:58:8e:1c:13:36:2e:70:
77:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:39:BB:07:6A:9B:26:D9:3E:21:EC:ED:4C:B2:E5:E6:28:88:0D:DE
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145251.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa29::/32
Signature Algorithm: sha256WithRSAEncryption
20:c1:5d:6d:5d:e2:8b:1b:7c:c8:a5:f3:f0:58:4c:1e:56:3c:
12:7f:3c:54:0c:8a:8e:8d:17:60:cc:ff:17:a1:eb:25:f7:33:
6a:a8:8b:31:fc:2c:b5:12:c8:d2:98:bc:3e:2a:74:6a:09:cf:
86:f1:72:76:db:e8:51:69:6e:f4:87:fd:e5:42:6c:03:c0:a5:
b0:b3:34:04:71:8d:b4:9e:7d:8f:5f:dd:26:61:1f:b5:1b:b8:
08:ec:48:d3:11:eb:5d:ef:24:ef:3c:9b:65:57:b6:41:38:fe:
79:0d:2f:ab:f7:66:8b:6b:0a:09:c5:5c:97:e6:e1:75:a9:8d:
b5:7c:05:93:75:03:c3:ce:23:79:05:01:48:41:7f:74:fe:84:
11:91:58:38:5d:1a:f9:40:b4:f7:8f:b1:d3:2b:59:7e:28:ec:
82:37:c3:e1:99:8c:b7:91:73:7b:4c:b8:30:35:5e:52:8a:2c:
52:6e:a6:b1:59:f3:e8:95:33:fb:1d:8c:bc:7f:2e:eb:6e:3f:
81:e4:51:4c:a3:3d:eb:c1:a9:9a:85:6a:5b:64:5b:5b:d1:d2:
3e:92:d1:b5:a1:07:b3:66:46:b3:60:57:f9:e0:e6:df:1c:0e:
b4:5f:fb:77:7c:1f:bf:79:07:05:9b:d5:8f:b9:90:02:4e:50:
21:36:9e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:09 2026 by rpki-client