Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145276.roa
File: AS145276.roa (raw, json)
Hash identifier: P5wtTkEZ9mHAG1njqX02AiaPBxgx99LqAcVUbN1wyOU=
Subject key identifier: E4:EE:5A:97:39:89:04:33:D2:86:F1:64:24:47:F8:CA:FC:EB:38:57
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 206F2ED08EDCDED1E8B6598A88F0878EA631AA4D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145276.roa
Signing time: Fri 22 May 2026 06:46:18 +0000
ROA not before: Fri 22 May 2026 06:41:18 +0000
ROA not after: Fri 21 May 2027 06:46:18 +0000
asID: 145276
IP address blocks: 240a:aa42::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:6f:2e:d0:8e:dc:de:d1:e8:b6:59:8a:88:f0:87:8e:a6:31:aa:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:41:18 2026 GMT
Not After : May 21 06:46:18 2027 GMT
Subject: CN=E4EE5A9739890433D286F1642447F8CAFCEB3857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:77:ad:79:45:5a:69:22:79:21:1b:6f:71:71:
45:e5:0f:64:28:2c:2d:ae:01:aa:41:ef:ac:20:4d:
f5:7e:7e:45:61:f6:11:0b:d2:54:41:8f:bc:68:59:
8d:d5:83:65:18:58:cc:33:04:56:ee:5f:b9:2f:e6:
f3:e3:b3:5f:e0:f9:d9:09:62:8e:b5:a3:33:f2:e7:
15:d2:e3:39:c5:4d:f4:36:18:c2:79:f9:e6:77:a2:
9a:42:51:a0:f1:70:32:97:61:4b:df:73:bb:88:fe:
73:e4:01:11:c6:7b:df:5c:4c:26:0e:fa:8d:b5:69:
b9:4b:9b:56:7e:f4:e5:cf:10:c8:3d:29:e4:cf:78:
6f:97:69:0d:89:f8:26:03:a1:8b:d0:ec:a6:9c:a2:
8d:7c:df:af:03:54:ff:30:0e:64:e5:54:80:fb:33:
f9:29:39:c2:cc:84:02:76:af:46:6b:88:3f:7e:56:
4f:d5:1f:e9:29:4c:17:44:46:72:bf:bc:f6:8d:ef:
11:c7:c2:5c:58:17:e7:e9:58:83:4e:5a:b4:2e:26:
26:37:07:aa:4e:f7:af:94:8b:fb:9a:56:72:8b:dd:
42:82:80:b1:33:e6:72:43:2b:9e:e1:91:af:9c:dc:
d7:b6:a2:ec:ca:df:45:71:5b:4d:fc:e7:39:40:e3:
d8:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:EE:5A:97:39:89:04:33:D2:86:F1:64:24:47:F8:CA:FC:EB:38:57
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145276.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa42::/32
Signature Algorithm: sha256WithRSAEncryption
9a:a6:86:d3:ec:de:f5:80:c5:94:ee:4a:5b:6a:a3:30:90:f0:
6b:5a:93:d1:9c:45:b8:9a:a9:f5:9a:19:46:34:66:bb:cc:2c:
bb:c1:12:78:89:d1:b4:ef:eb:e7:92:00:79:3d:af:44:79:ff:
6a:51:b0:eb:5a:5a:fd:23:1d:10:c7:6f:cc:c1:bc:90:f0:41:
c0:45:1b:5f:6e:3b:8d:09:33:2f:c8:a0:6d:b8:c7:e4:b6:1d:
29:98:67:dc:28:2c:79:c7:4d:72:1a:60:db:65:75:9f:3a:a0:
dd:95:c4:74:67:c0:f7:e6:19:00:a9:d5:ee:73:f3:4b:6a:45:
bb:c5:8f:42:83:89:41:ac:c9:58:48:e2:e1:0d:41:98:17:8a:
80:41:79:74:a0:bc:a0:c0:6f:61:27:a8:76:23:5d:87:95:e9:
70:4e:16:4a:9f:d6:fd:4b:3b:27:80:19:9f:49:35:78:f3:73:
22:14:b8:4f:32:12:7b:30:e9:1c:dd:8a:16:ff:03:6c:85:ee:
ec:b6:65:67:90:e9:44:3c:a2:f6:48:3b:72:0e:28:4a:d9:29:
aa:29:e1:de:35:5a:24:ec:bd:6b:0c:e6:fb:9d:ee:09:1e:b1:
44:02:d4:c4:dd:6a:5e:f1:5c:f5:da:ab:aa:05:f9:74:4c:3c:
9a:0a:9e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:41 2026 by rpki-client