Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145281.roa
File: AS145281.roa (raw, json)
Hash identifier: Jg9eF3uVO+2yMRUZ6hGwlt6a0AN0lpD07H44VF9cd8U=
Subject key identifier: 56:6A:AF:A5:94:E4:1D:82:24:97:AF:BA:70:98:7F:2B:BE:8E:1B:E3
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6D535F0D4E72F3D82E473FC800C9CBDC2680568D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145281.roa
Signing time: Fri 22 May 2026 07:41:15 +0000
ROA not before: Fri 22 May 2026 07:36:15 +0000
ROA not after: Fri 21 May 2027 07:41:15 +0000
asID: 145281
IP address blocks: 240a:aa47::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:53:5f:0d:4e:72:f3:d8:2e:47:3f:c8:00:c9:cb:dc:26:80:56:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:36:15 2026 GMT
Not After : May 21 07:41:15 2027 GMT
Subject: CN=566AAFA594E41D822497AFBA70987F2BBE8E1BE3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ce:fb:99:4d:2c:7c:83:19:9f:41:9a:71:0b:
92:6f:1a:76:ec:d1:5b:aa:e2:74:49:19:35:e8:fa:
b3:5e:25:e0:0b:df:32:54:42:f9:a2:33:61:ab:4c:
08:99:b5:1f:fc:f8:e9:75:c3:d8:ec:3e:6b:4e:81:
53:e1:7c:d7:42:ab:b3:a3:07:3f:3b:3d:ed:6c:35:
5b:cc:8f:3d:25:7e:a4:08:fb:3a:ed:7b:db:ae:e1:
8c:b4:fc:1b:32:af:d8:60:8e:7c:8f:92:e9:d6:ff:
c4:32:0f:16:b0:b5:a7:3a:ee:5c:c8:f3:f3:f4:12:
69:64:2e:ac:87:05:1e:b6:2f:a3:d7:fd:b3:1e:84:
12:8f:d2:e3:4a:f7:eb:43:b6:56:a4:3e:d9:54:3f:
36:74:af:39:5b:e2:f0:66:8a:9d:fa:f8:fb:55:c9:
c1:29:a3:b6:1a:27:51:97:ba:16:78:a0:1c:96:fb:
69:a5:b0:96:ab:12:89:2c:6a:d4:24:bd:ab:37:57:
10:68:e1:f5:c0:9b:05:fe:01:68:3f:4f:3b:08:af:
8e:e1:0d:01:5f:fa:ea:ff:be:a9:a5:40:19:67:20:
bd:70:33:92:6a:71:44:9f:35:dd:ba:2f:cd:6e:23:
08:65:22:1a:c9:6e:24:e0:5b:67:ba:25:a9:26:19:
fa:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:6A:AF:A5:94:E4:1D:82:24:97:AF:BA:70:98:7F:2B:BE:8E:1B:E3
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145281.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa47::/32
Signature Algorithm: sha256WithRSAEncryption
7b:4c:da:eb:5f:b6:99:08:1c:22:80:a0:1b:cd:99:3b:76:fa:
16:f9:12:0f:a9:e9:b9:1e:15:ae:a0:f2:44:7b:5a:7d:d4:78:
c3:bf:32:43:d7:1c:20:54:c8:95:ce:a9:5c:40:04:b3:bd:51:
ef:17:2a:9b:cd:cb:44:c5:76:e2:db:b9:13:2f:a3:51:b7:42:
67:61:1a:46:0c:53:6f:40:0c:4b:01:d9:88:8b:2d:f7:d5:2c:
3f:0a:ad:96:cd:e2:c9:ba:10:b9:cd:1c:60:31:4b:5c:75:e2:
e3:5b:34:ac:8f:49:dc:32:8f:0b:9d:56:69:28:70:c2:4c:35:
7c:4f:13:4d:72:fc:20:a6:05:ff:84:1e:03:90:b8:43:be:80:
f4:5a:64:4a:a6:32:e3:ba:ea:1c:66:e5:fc:9e:96:22:62:f0:
de:09:32:2b:98:9c:4c:ee:03:24:ae:94:0e:3e:80:2d:e1:8b:
3a:e3:91:46:f6:78:00:18:58:3b:9e:c4:1f:03:9e:f5:a2:47:
5d:31:21:e6:80:e8:1c:0b:f6:88:7b:27:e5:b3:05:c0:94:05:
c5:d7:4a:c7:49:4f:dd:e4:63:62:50:5c:1b:e3:40:c6:fc:0e:
24:46:af:0d:c8:10:ba:cd:f4:25:4c:46:3e:4b:87:91:b1:f0:
e2:23:92:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:18 2026 by rpki-client