Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145265.roa
File: AS145265.roa (raw, json)
Hash identifier: uEx62uYhh1j46QLwScYb4dxtLIDSJ1ZAl3p7DkAuM+E=
Subject key identifier: 40:82:1A:95:44:36:FF:FA:DE:28:A1:9C:F0:C3:8B:A2:2D:8D:80:27
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 51615CD0F654945DB527145A235D6CAA90248026
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145265.roa
Signing time: Fri 22 May 2026 07:41:20 +0000
ROA not before: Fri 22 May 2026 07:36:20 +0000
ROA not after: Fri 21 May 2027 07:41:20 +0000
asID: 145265
IP address blocks: 240a:aa37::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:61:5c:d0:f6:54:94:5d:b5:27:14:5a:23:5d:6c:aa:90:24:80:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:36:20 2026 GMT
Not After : May 21 07:41:20 2027 GMT
Subject: CN=40821A954436FFFADE28A19CF0C38BA22D8D8027
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:06:61:48:74:66:0d:89:2e:36:a2:90:2b:71:
4e:41:62:77:9e:e7:f3:46:24:08:90:8b:c6:9b:a5:
71:b8:a4:53:2e:c0:ff:ea:75:6a:69:78:57:22:73:
7c:fd:b9:ee:d7:01:b4:bf:71:ad:71:2a:58:d4:90:
bf:f9:92:c0:87:ca:e9:52:19:39:99:4f:b2:66:83:
c5:32:18:f1:19:e9:49:4a:16:90:a6:c4:43:7a:64:
64:89:b9:64:74:03:9c:d1:cc:65:45:b5:34:bc:a5:
fc:bb:c0:a2:bd:d4:25:aa:7b:47:4c:1c:9f:82:7a:
3b:e3:ff:dc:1b:a6:cc:27:34:ad:27:c6:34:fa:3a:
d1:10:2b:61:1b:f7:45:f9:75:da:31:f3:76:f5:b1:
37:34:93:31:ad:b1:f7:3a:4c:1e:9e:46:3c:b4:be:
1b:a3:2b:48:fe:8d:ec:57:b3:d4:94:28:57:ac:61:
01:ef:77:3d:20:f8:3d:c9:ea:c2:fb:71:42:96:27:
de:ca:31:19:44:0c:1b:1e:40:f7:eb:70:32:08:bb:
2f:84:7d:88:fa:f8:a0:04:d8:23:af:a1:d9:06:4c:
fe:5d:cd:5c:1a:c7:35:5e:bc:0e:87:f6:2d:70:4b:
41:b4:b3:b9:0b:1c:78:80:47:43:0e:7d:69:28:28:
b5:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:82:1A:95:44:36:FF:FA:DE:28:A1:9C:F0:C3:8B:A2:2D:8D:80:27
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145265.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa37::/32
Signature Algorithm: sha256WithRSAEncryption
5d:61:40:3e:d1:52:1a:4e:e1:96:71:db:b3:02:95:5a:6e:b4:
c9:94:00:ec:6c:9b:ac:e3:f0:78:c1:ca:a6:25:3c:b3:4d:68:
77:97:23:ce:66:fa:70:b8:30:c6:3e:77:f0:cf:b2:cf:b0:6c:
91:46:bc:54:5d:28:c9:fe:2f:2f:a2:44:7c:39:67:56:1b:74:
9a:99:2d:8e:88:f8:19:9a:3b:ea:45:bb:62:70:e5:c5:c9:ab:
43:50:6e:a3:74:9e:7e:31:48:03:1f:15:9a:03:2f:b1:b3:00:
6b:98:1d:d3:dd:19:fc:b4:89:fc:13:4a:e8:7c:68:16:60:6e:
4c:f1:c8:1a:8c:b2:ad:df:4a:eb:3c:fe:60:24:61:cb:7d:7c:
1a:08:ab:de:86:dc:81:fa:ac:93:a3:0f:a0:e4:20:5f:2e:e5:
ef:05:07:5c:aa:7f:b9:d8:f4:ae:ea:4f:0f:dd:2f:25:30:f6:
a6:42:ce:88:94:25:0e:e6:6b:7f:b9:9a:7b:a4:3b:2c:fd:f6:
ca:9b:ac:c4:5a:5a:b9:cd:fa:8b:f7:0c:b8:dd:f9:fc:86:97:
f1:73:70:1f:db:f5:0e:0e:94:94:0a:84:90:32:58:37:61:f0:
e0:6c:73:d0:b3:35:0f:64:af:08:03:11:65:7b:2c:30:5b:e6:
9c:d6:63:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:49 2026 by rpki-client