Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145257.roa
File: AS145257.roa (raw, json)
Hash identifier: 33AgOUAJfSBqRackKyT80VHkjil8PhKwqwM/YLcG32A=
Subject key identifier: 43:96:99:BD:54:39:62:87:4F:E5:10:E3:9D:D4:04:EE:3F:BB:E3:52
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: E600986976669839FD8A0A4E837900BE7AF9F1
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145257.roa
Signing time: Tue 26 May 2026 02:35:29 +0000
ROA not before: Tue 26 May 2026 02:30:29 +0000
ROA not after: Tue 25 May 2027 02:35:29 +0000
asID: 145257
IP address blocks: 240a:aa2f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
e6:00:98:69:76:66:98:39:fd:8a:0a:4e:83:79:00:be:7a:f9:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:30:29 2026 GMT
Not After : May 25 02:35:29 2027 GMT
Subject: CN=439699BD543962874FE510E39DD404EE3FBBE352
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7e:2d:25:6d:ab:a0:c2:9d:ed:ff:62:9a:28:
06:22:fd:ad:fd:cc:32:51:7c:e9:9b:96:66:48:26:
53:bb:6b:60:92:dc:06:d8:bd:b8:02:87:b7:03:14:
48:79:97:dd:03:39:17:59:48:6f:ac:0e:78:db:32:
5a:4e:f8:d2:15:96:c1:54:8d:3a:8a:21:d4:21:c2:
68:08:3a:cc:e1:a5:7e:9a:d4:cf:c9:73:6c:cc:14:
fa:30:a8:14:5e:7a:33:ab:66:bf:3a:12:76:dc:e3:
5d:09:01:f7:ae:5a:0b:34:88:94:ac:5d:9f:be:52:
74:56:e3:f8:9a:58:c1:48:ed:49:68:81:1e:30:1e:
78:71:92:77:f8:42:97:7d:6b:d0:ae:7a:18:2e:7e:
50:44:12:73:e8:b7:db:29:de:d6:bb:ab:5a:e1:68:
71:96:27:a2:8d:ff:5e:48:d8:0b:d6:d5:08:de:8c:
7f:f8:f0:65:17:58:b7:1a:c3:c7:e6:c3:ed:05:f7:
66:84:81:6c:dc:37:fe:db:47:f1:47:9c:0d:ca:fa:
7c:43:a8:ff:a7:4e:79:24:83:da:f4:8d:58:c2:e3:
6c:21:e4:f6:f6:4a:7d:10:8b:a3:b3:4e:1e:6d:8d:
b5:53:69:9a:71:42:db:dd:8b:83:57:0a:e2:76:96:
22:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:96:99:BD:54:39:62:87:4F:E5:10:E3:9D:D4:04:EE:3F:BB:E3:52
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145257.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa2f::/32
Signature Algorithm: sha256WithRSAEncryption
3d:40:55:c9:17:d4:0c:15:fc:84:83:5f:79:d1:22:3d:9b:ef:
8e:4c:5d:76:3b:f1:da:48:fa:1f:72:2e:54:a0:30:72:79:7a:
34:c5:2c:8b:51:6d:ad:6c:95:44:7b:fb:59:86:a5:a6:1b:05:
14:37:78:17:91:41:c9:5d:5d:ef:3e:64:53:5d:f8:1b:8a:1a:
3a:c3:5c:1d:46:3c:e5:74:5a:1d:bc:2a:e8:a0:fa:6c:4f:79:
a4:74:7d:13:22:fd:c7:d4:01:c0:31:a4:41:51:f8:e5:db:7a:
c0:3c:02:09:b3:b5:26:3c:6e:73:c7:2e:a8:8e:50:b7:92:28:
c5:b8:61:cf:0d:e9:f1:ee:b4:7a:07:24:31:5d:5a:25:ba:13:
da:10:ff:2b:1c:d4:d2:c4:76:99:da:25:ae:9a:c8:4b:37:2f:
36:6c:b9:21:d8:ef:9d:52:dc:db:d2:10:2b:36:53:8e:13:83:
b7:4e:dc:8c:a6:6d:37:3c:ae:bd:1c:29:13:fc:06:1c:c8:43:
ce:ee:ec:04:95:f8:bd:c6:0e:31:70:38:26:1f:94:5c:24:19:
bd:91:c6:ad:e9:a7:11:5b:39:e1:49:e5:ce:7a:25:f6:07:a7:
5a:2a:6c:b5:3f:f2:4a:d4:b7:5f:0c:bd:77:4f:06:9d:20:8a:
67:15:81:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:27 2026 by rpki-client