Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145277.roa
File: AS145277.roa (raw, json)
Hash identifier: A+dbXZ2QX2al24JbSJ67RJUsBET4BXH2L2jHntH8Unk=
Subject key identifier: 3B:A9:2F:68:54:53:AC:0F:C9:B4:D7:B1:80:3D:E8:AE:6A:78:69:39
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6B7A7B6C8F69948BD696B54772B84FA8B5964C39
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145277.roa
Signing time: Mon 25 May 2026 01:38:16 +0000
ROA not before: Mon 25 May 2026 01:33:16 +0000
ROA not after: Mon 24 May 2027 01:38:16 +0000
asID: 145277
IP address blocks: 240a:aa43::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:7a:7b:6c:8f:69:94:8b:d6:96:b5:47:72:b8:4f:a8:b5:96:4c:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:16 2026 GMT
Not After : May 24 01:38:16 2027 GMT
Subject: CN=3BA92F685453AC0FC9B4D7B1803DE8AE6A786939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e8:f8:6e:ff:73:c4:46:ba:f9:31:3a:84:87:
ff:1b:4d:d8:00:11:c7:9b:1f:a4:93:ac:a6:2c:46:
a3:a8:f4:d5:47:41:f5:82:bf:a8:d4:79:6b:15:34:
aa:47:cd:06:48:92:89:fb:6a:67:93:d7:b1:34:92:
28:d6:2a:6a:d8:7c:16:6e:92:99:c1:62:73:73:90:
cf:d8:15:12:19:e3:92:cc:98:dc:c2:45:73:3f:d9:
b7:0e:d7:d1:8d:e2:8f:43:27:38:a2:04:55:a3:ba:
ca:bb:f7:38:b3:03:c3:34:ea:26:25:1a:0f:5f:f7:
03:0d:b1:e5:b9:79:51:58:97:7f:67:52:c3:5a:7c:
ee:c3:6f:4c:8c:26:1d:4a:e1:a6:14:49:d7:66:9a:
c4:56:fd:2c:76:16:a2:de:d9:6c:21:d9:08:17:cd:
4b:c4:73:ab:fb:96:76:85:45:95:0f:d5:2a:e1:9d:
0c:f5:51:41:8c:cb:f3:0d:ca:15:96:7f:85:2f:eb:
4e:04:c5:f6:ac:a0:4b:06:0d:d0:8d:9d:1e:a6:8c:
a3:67:fa:b6:a7:51:d7:18:56:da:b8:17:df:48:d0:
44:e4:6e:62:59:89:b6:a4:18:8a:f3:07:65:c2:fd:
e3:8a:72:f5:cd:12:28:f6:d1:aa:48:00:41:9d:c3:
10:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A9:2F:68:54:53:AC:0F:C9:B4:D7:B1:80:3D:E8:AE:6A:78:69:39
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145277.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa43::/32
Signature Algorithm: sha256WithRSAEncryption
42:93:5d:95:ee:81:ef:9d:0b:a2:9f:a7:05:76:5d:b0:32:fb:
54:5d:ea:71:35:c8:66:c5:95:72:33:9f:23:ff:38:89:cc:fd:
22:86:5d:21:e2:58:7b:e4:fe:32:6b:66:40:93:27:d5:f7:d6:
5f:f5:28:ee:ff:76:f0:ab:c5:f5:69:18:c1:1e:08:2c:aa:ed:
85:df:c1:55:45:a9:e7:18:32:d7:fb:5b:ab:81:a5:4f:b5:9e:
56:4d:11:15:c7:e2:f6:d7:f1:e2:f7:c0:af:21:91:13:8d:f9:
b1:3d:91:d4:24:7d:7c:d2:6f:b3:2e:76:8e:9f:8a:6c:b1:b0:
a2:9f:b7:f1:af:a5:2f:3b:ec:39:6a:b6:dd:4f:98:cf:ac:07:
f2:a3:3d:39:9b:5f:0f:f6:b1:48:36:f8:be:bd:f6:05:5e:df:
98:e3:81:9d:86:aa:05:58:f1:2a:e1:c3:6f:2c:f6:0e:67:67:
54:dd:e2:11:2f:28:80:78:39:29:d9:fa:d2:f6:17:8d:f0:41:
f5:7f:c2:41:3b:4d:a9:2c:1a:16:c0:eb:e6:de:44:97:fe:06:
fe:c3:f3:51:13:09:be:cd:6a:78:49:59:07:f1:68:81:d9:19:
6e:be:f2:01:19:71:ce:d7:e1:73:10:5d:f3:1f:53:dc:08:54:
37:dd:78:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:42 2026 by rpki-client