Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145271.roa
File: AS145271.roa (raw, json)
Hash identifier: pj7wS+Viq5apO6F2OF7Mml11+8I388ndNeW8tnu0TJA=
Subject key identifier: FC:A5:81:06:25:B6:86:FB:DE:F8:FA:2E:63:37:0E:B3:78:B8:8E:73
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 47530EB6092D57B1EE576AB585BB58E28BDF9044
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145271.roa
Signing time: Fri 22 May 2026 07:32:09 +0000
ROA not before: Fri 22 May 2026 07:27:09 +0000
ROA not after: Fri 21 May 2027 07:32:09 +0000
asID: 145271
IP address blocks: 240a:aa3d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:53:0e:b6:09:2d:57:b1:ee:57:6a:b5:85:bb:58:e2:8b:df:90:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:27:09 2026 GMT
Not After : May 21 07:32:09 2027 GMT
Subject: CN=FCA5810625B686FBDEF8FA2E63370EB378B88E73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:62:d6:8d:ea:a4:a7:39:4a:1f:38:9d:26:11:
6f:22:2e:ba:2c:25:31:64:05:78:73:c1:30:23:ad:
5a:fb:bd:11:22:4a:71:e0:3e:3f:54:03:99:f7:62:
17:22:24:76:7c:05:31:8e:f0:1b:e0:4e:19:47:1f:
a9:cd:9e:28:a0:69:46:f1:51:16:6e:18:ac:d3:bc:
41:b7:80:33:63:69:07:ec:57:56:f9:2a:29:4c:df:
87:74:d7:b7:d7:c8:0c:52:19:93:de:1f:80:07:83:
48:2b:0d:d6:81:15:83:b0:1a:d8:e8:5f:eb:5c:ce:
d7:27:36:6e:5b:dc:c9:e5:a1:12:0f:de:f1:40:c1:
71:2c:12:19:95:e2:32:e2:45:b0:08:9f:89:34:68:
c6:b0:7f:37:ea:94:6c:2a:dc:4d:6b:23:7c:01:e4:
40:61:b8:73:6e:c3:5c:55:2c:b3:d3:7c:b0:15:14:
a8:b4:99:ea:4d:a3:a9:d8:54:33:65:29:df:6e:ea:
57:43:a5:08:40:e6:c5:13:ee:f4:21:0f:18:68:cf:
df:a7:9c:cf:09:d9:99:da:d2:f8:23:5c:b3:49:d2:
84:d3:5d:b3:e7:54:40:74:71:21:3a:11:5b:a2:14:
5b:d5:2d:f6:41:58:c6:c8:4e:27:e4:9d:6a:30:47:
5a:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A5:81:06:25:B6:86:FB:DE:F8:FA:2E:63:37:0E:B3:78:B8:8E:73
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145271.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa3d::/32
Signature Algorithm: sha256WithRSAEncryption
37:61:cc:e7:93:8a:b2:50:86:51:1b:b9:c7:49:26:8f:83:f3:
4c:86:3f:7d:7c:ce:99:27:e0:90:82:61:12:60:30:72:02:90:
12:1e:c9:c5:b8:3b:a4:3c:92:24:a5:b7:17:4d:12:2e:b4:6f:
e1:a3:b0:bd:fc:19:ef:b5:6d:d3:80:ad:59:1a:6f:62:da:c8:
39:f4:8b:1d:c5:e6:3c:a0:28:e3:7b:d1:3b:3e:26:88:8f:39:
14:9c:9b:27:8d:07:e1:47:e8:fd:ba:a9:1c:c5:25:89:ae:6c:
a0:ee:55:2c:aa:f5:cb:d9:b6:9e:66:5b:60:18:b6:af:e8:da:
91:6c:bf:c1:0e:01:35:cb:22:a6:fc:b0:49:78:cf:2e:e9:dc:
4e:7a:e9:23:2b:d8:50:55:6a:73:3c:c0:41:b1:95:a5:c5:7f:
7f:58:1e:42:1e:94:d9:55:c5:fc:57:29:9a:64:1f:f7:b8:73:
c6:c5:a8:22:8a:61:e4:99:b4:dc:2f:98:72:c2:a4:55:41:4e:
27:b3:6c:de:1f:d8:d1:12:2a:01:fa:94:e7:f4:11:0b:a1:ff:
b9:c4:94:5b:0a:e2:88:f4:d7:c2:02:b7:e4:c5:7b:7c:b2:1a:
04:b3:3c:15:9e:5c:7e:95:54:57:d5:bc:62:2c:e8:b6:b4:8f:
d8:ea:82:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:53 2026 by rpki-client