Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145256.roa
File: AS145256.roa (raw, json)
Hash identifier: cDa5Hte4UPh/FjsZyPVuQaEQd/1++UQuWsXLY2vSf64=
Subject key identifier: F4:3E:D9:03:D0:9C:D4:E7:D5:11:16:54:AD:F3:36:63:71:48:AA:C4
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 25E7C743A4AB7BD3E00F98B9ED2F7605C805FBFA
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145256.roa
Signing time: Tue 26 May 2026 02:35:14 +0000
ROA not before: Tue 26 May 2026 02:30:14 +0000
ROA not after: Tue 25 May 2027 02:35:14 +0000
asID: 145256
IP address blocks: 240a:aa2e::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:e7:c7:43:a4:ab:7b:d3:e0:0f:98:b9:ed:2f:76:05:c8:05:fb:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:30:14 2026 GMT
Not After : May 25 02:35:14 2027 GMT
Subject: CN=F43ED903D09CD4E7D5111654ADF336637148AAC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ca:70:25:85:ad:02:b9:d2:0b:aa:b3:cc:09:
7c:c7:ef:95:5a:62:b1:94:ee:f6:1f:cf:7e:58:a0:
43:85:bb:3f:16:ca:b4:44:7d:3c:94:d6:34:21:11:
46:38:a2:26:56:da:84:bd:e9:89:89:4d:e4:b4:2f:
ce:d5:35:1a:51:27:f6:6a:de:d8:92:b4:3b:64:53:
6c:bc:3d:ab:89:cb:e1:9d:63:51:83:f6:21:8a:a9:
1a:22:78:5f:0b:13:cf:58:ad:ad:9e:73:f7:05:0d:
87:d2:63:6e:25:82:0d:83:43:91:e4:d4:2b:68:0b:
c9:1f:9f:07:a4:62:b7:c6:aa:4c:91:15:21:a4:27:
ff:6b:e0:b6:e9:a7:e1:c6:e7:74:d5:8a:f3:dd:a2:
49:47:6d:09:4d:bf:25:22:b3:23:6c:da:70:ba:26:
ce:6f:18:87:a3:f1:5a:fa:51:84:91:fb:7b:d5:45:
38:61:f6:fb:6d:2a:2a:45:59:85:8f:3d:b0:20:0e:
9a:1b:62:85:10:02:d4:69:26:1d:72:bd:00:31:20:
dc:5c:40:c7:ed:e4:ef:75:46:f5:8d:a6:32:29:8e:
e8:e9:1f:b4:28:e7:78:54:48:66:7d:bc:27:00:43:
2d:9d:e3:a2:d7:bc:e2:d7:4c:61:77:d1:43:28:ab:
b5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:3E:D9:03:D0:9C:D4:E7:D5:11:16:54:AD:F3:36:63:71:48:AA:C4
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145256.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa2e::/32
Signature Algorithm: sha256WithRSAEncryption
8b:b3:5e:af:56:45:cf:9d:8d:4c:2d:67:a9:00:4d:9c:54:2a:
7d:b0:4e:d8:2b:e6:98:81:20:38:b2:b2:f4:bf:c4:4c:dc:69:
df:25:af:70:40:cf:ca:3c:16:33:a2:2e:c5:d9:40:73:0d:b4:
49:f1:20:22:9c:67:f2:95:a3:67:45:31:51:a4:04:0b:5c:aa:
91:6b:d0:19:6c:df:82:ff:20:80:b3:ec:a2:56:01:22:70:99:
57:0b:25:f3:f6:da:1a:32:41:c6:9a:f4:0e:b7:cf:66:37:cb:
bb:a5:2e:73:a1:cd:79:31:b2:19:99:3b:29:9b:63:67:77:3e:
9f:a0:fb:7d:9f:c7:47:78:3f:58:74:9d:10:07:5a:be:0a:23:
85:84:ec:cf:36:ad:2b:96:22:6e:de:60:93:2e:05:ee:d3:6c:
47:ae:a0:c6:f3:6b:8f:2f:64:63:63:e6:a2:96:5a:5b:30:76:
df:9b:d0:77:4c:42:be:7c:13:7c:44:f0:d8:5f:ff:19:70:7b:
11:1d:ad:76:2d:72:91:38:cc:36:27:80:f4:29:fc:b3:fe:5d:
17:6b:6f:be:0a:73:af:52:7e:f2:1c:67:3b:b5:af:49:9c:86:
90:75:5d:17:c5:8f:e9:35:9e:fa:e5:b0:03:2b:11:74:5a:6a:
d3:f9:0a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:52 2026 by rpki-client