Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145264.roa
File: AS145264.roa (raw, json)
Hash identifier: j6noQ6tgBFidT5zA2fXLZ7PyL8ab291AGhGCBD6qfRY=
Subject key identifier: 3B:DE:9B:62:D9:AB:29:5B:C5:D7:16:93:EC:D1:E4:A9:FC:E4:E7:B8
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 192E9ABB2AE51C7653D5ACFE8C0155A1C9419A6E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145264.roa
Signing time: Fri 22 May 2026 01:50:34 +0000
ROA not before: Fri 22 May 2026 01:45:34 +0000
ROA not after: Fri 21 May 2027 01:50:34 +0000
asID: 145264
IP address blocks: 240a:aa36::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:2e:9a:bb:2a:e5:1c:76:53:d5:ac:fe:8c:01:55:a1:c9:41:9a:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:34 2026 GMT
Not After : May 21 01:50:34 2027 GMT
Subject: CN=3BDE9B62D9AB295BC5D71693ECD1E4A9FCE4E7B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:c0:e0:b8:db:d2:d8:87:e8:7e:87:a8:96:bb:
46:5e:9c:34:b8:45:1d:d9:59:22:9a:c2:33:5a:60:
fb:a3:4c:82:ca:02:71:f9:ca:a8:8f:4c:60:b7:07:
8c:c6:2f:71:18:bd:74:8d:cd:9b:fb:44:46:d6:e5:
b8:52:a5:05:9f:62:50:9c:6c:12:79:53:e1:61:22:
cc:b9:3e:cc:a2:c8:84:aa:a7:fd:d6:34:7a:a3:43:
b0:a2:b9:e9:c6:94:f3:6d:59:41:4d:af:51:af:a6:
6d:dd:b9:91:bb:61:92:a6:c5:d6:a4:bb:7d:f9:9b:
fa:28:11:ba:e7:67:84:a1:06:25:43:f4:e4:31:91:
4e:8e:e8:65:c6:32:28:4b:ec:68:79:66:97:b9:32:
05:08:87:76:09:e0:1e:8b:59:c9:d7:63:ca:ea:7b:
18:b4:0d:1d:1c:66:a5:9f:21:1d:b7:33:ea:36:c3:
5e:1c:8f:3b:0f:2a:62:fd:28:8b:fe:3c:d1:0c:7b:
c3:e4:c7:e7:25:6d:fe:e8:04:00:54:af:4e:e5:ef:
56:5e:05:9a:58:c5:8d:a0:ed:32:49:73:6a:d1:fd:
31:2a:20:c3:51:c4:74:3e:90:fd:dd:c1:1d:3f:38:
e4:11:28:6a:cd:26:66:a2:40:4e:f3:cc:a3:97:16:
6f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:DE:9B:62:D9:AB:29:5B:C5:D7:16:93:EC:D1:E4:A9:FC:E4:E7:B8
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145264.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa36::/32
Signature Algorithm: sha256WithRSAEncryption
07:48:16:74:bb:c3:79:bd:b4:fb:5a:11:4c:e2:e0:a6:76:6f:
67:7e:34:ea:21:1b:28:48:c7:6a:2d:e0:3a:f9:77:e5:7e:93:
32:b0:4d:88:19:e8:5d:a8:67:b0:78:c7:18:3f:3d:ea:43:d2:
ec:22:ac:60:1b:1f:d5:7c:68:9a:07:0b:8b:86:0d:0e:b6:47:
b7:76:3f:0f:6e:e8:79:b6:0c:90:24:27:62:42:42:3e:7a:0c:
cb:92:6f:67:8e:37:5f:9e:ab:ce:d5:86:98:e0:9b:1a:40:99:
6d:38:4d:d1:80:11:1c:8f:7e:a9:55:5e:5f:b8:09:a9:9f:e2:
fb:f6:fc:4f:cd:67:de:d2:ae:d1:7a:75:d3:37:1d:49:cd:b6:
ce:d9:30:32:38:cc:52:e0:e0:8a:86:e2:84:de:59:dc:dc:70:
1f:13:eb:db:77:a4:dd:4c:5f:29:e2:52:0f:15:11:2d:86:43:
d3:99:ba:ab:e2:fe:53:3d:14:a5:09:d8:ff:89:14:76:bb:7d:
1d:b4:86:34:86:c0:7a:ef:6a:f9:e5:86:8c:e1:e2:78:f6:0c:
be:28:ca:df:69:22:e9:55:5f:15:5f:80:79:0b:82:92:9a:8a:
79:5c:21:b6:9e:b2:fa:d1:2c:89:9c:5c:37:6f:38:c4:8a:e7:
e6:73:b2:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:15 2026 by rpki-client