Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145268.roa
File: AS145268.roa (raw, json)
Hash identifier: plRiGlgYSQEIan9Tx3kppU06xWGIvlKIcJiKGwzRmXs=
Subject key identifier: 30:A8:9E:52:B5:9F:2D:2D:61:7D:49:DC:90:1E:51:DA:3E:AC:11:98
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1B09693913BFDB94866AD3BA75FF55C6192DE1E5
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145268.roa
Signing time: Fri 22 May 2026 01:50:24 +0000
ROA not before: Fri 22 May 2026 01:45:24 +0000
ROA not after: Fri 21 May 2027 01:50:24 +0000
asID: 145268
IP address blocks: 240a:aa3a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:09:69:39:13:bf:db:94:86:6a:d3:ba:75:ff:55:c6:19:2d:e1:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:24 2026 GMT
Not After : May 21 01:50:24 2027 GMT
Subject: CN=30A89E52B59F2D2D617D49DC901E51DA3EAC1198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fd:0d:72:48:5e:3e:4a:98:31:51:0c:38:a1:
f8:81:36:31:06:b6:1f:8c:43:8b:a3:45:f9:55:b8:
07:ff:b8:47:25:6d:2e:01:d0:c6:5e:61:10:58:26:
7c:ce:2f:83:a8:35:d1:ad:a4:a2:b7:31:0e:0f:1f:
15:67:ed:ac:b6:b4:b5:90:0d:67:56:1d:b3:75:31:
57:7e:98:4b:5d:39:93:86:d0:fe:c5:a7:82:d9:9b:
60:74:02:c5:9f:70:a1:18:bd:da:ef:62:9c:9f:6d:
7e:54:17:6c:ea:ef:e9:45:f7:05:80:02:72:57:1a:
5a:40:b2:3b:7f:f8:eb:cb:ba:85:c3:8e:fa:c8:c3:
33:70:f6:e2:a1:b1:2e:0a:0e:23:7f:7e:68:da:4c:
a1:d7:65:81:a6:46:a3:e9:fa:d0:44:c4:2d:26:47:
48:ca:4c:81:84:25:55:1c:48:dc:cd:d9:f0:e0:27:
de:dd:c8:57:01:11:ec:7c:d8:b9:6a:60:8e:d2:d4:
43:ef:42:29:d8:3e:fe:d8:fb:26:f3:39:b4:f6:8e:
f6:a0:7c:19:da:58:6a:19:f3:15:ec:43:f4:e1:a0:
d1:32:79:e3:45:6e:23:4d:42:2a:9e:66:32:e7:53:
0e:f6:1a:ff:06:a2:3f:3c:e9:d7:55:b0:e8:22:1b:
49:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:A8:9E:52:B5:9F:2D:2D:61:7D:49:DC:90:1E:51:DA:3E:AC:11:98
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145268.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa3a::/32
Signature Algorithm: sha256WithRSAEncryption
0f:f5:cf:7e:69:1c:df:88:b2:c3:49:e2:f1:5a:ab:63:28:d0:
6d:1b:bb:6f:cd:07:bd:0c:f1:78:07:52:b1:6b:8d:47:59:e9:
ed:0d:e2:7e:b4:f7:8e:14:0d:ec:a5:33:00:95:ae:16:e1:e7:
3d:df:fc:e9:c4:2e:c7:84:9a:d7:31:81:58:02:c6:4d:ad:2e:
49:bc:9a:c9:8f:84:89:bc:37:13:f7:66:4a:7d:01:39:ce:ac:
aa:02:e0:fc:00:69:ec:ab:ce:3f:71:fb:29:a8:b3:01:f4:cb:
dc:1d:16:0c:9a:42:0c:2e:c1:88:59:b6:9c:71:39:79:04:92:
c2:a9:11:39:13:c5:ec:d9:0d:98:f6:45:3d:20:80:f9:d1:33:
0d:e7:cc:9c:96:a8:ef:23:79:dd:77:4f:56:c9:53:0c:b0:08:
cd:f1:a8:2b:8e:ff:cd:66:41:2f:73:e1:74:80:a2:91:fd:12:
c8:21:49:42:34:d5:a5:aa:a4:db:01:35:91:fe:88:20:04:8e:
ee:f2:3f:e2:e9:67:80:e7:b8:5e:c7:f9:9b:ff:ab:b2:8e:2a:
a9:e1:b5:a5:16:91:18:c5:5d:f6:67:83:e1:a0:ed:6e:f0:ba:
09:16:0a:32:e9:af:43:5c:d8:a7:b5:ad:55:12:2d:a9:0b:f2:
42:8c:48:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:00 2026 by rpki-client