Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145282.roa
File: AS145282.roa (raw, json)
Hash identifier: cwPbxQK1YadRvdER5u7CvTyd8xhVVTmIv5fsklOZZIs=
Subject key identifier: 2A:CA:E1:A7:8A:7D:61:7F:B1:CA:D3:FA:EC:0D:9F:1E:A8:2E:D9:7D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 53A67F428ED9962E0B813136AD5D51968C59887E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145282.roa
Signing time: Mon 25 May 2026 01:38:32 +0000
ROA not before: Mon 25 May 2026 01:33:32 +0000
ROA not after: Mon 24 May 2027 01:38:32 +0000
asID: 145282
IP address blocks: 240a:aa48::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:a6:7f:42:8e:d9:96:2e:0b:81:31:36:ad:5d:51:96:8c:59:88:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:32 2026 GMT
Not After : May 24 01:38:32 2027 GMT
Subject: CN=2ACAE1A78A7D617FB1CAD3FAEC0D9F1EA82ED97D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4c:ae:81:04:db:5e:e8:c4:fb:59:b2:c8:93:
9b:94:57:40:bb:05:76:94:1c:a4:e2:9a:55:f1:f6:
0e:7c:5c:8d:32:b7:d5:cc:78:29:33:93:25:1b:4a:
9d:8e:87:5b:d7:dd:0e:7e:aa:6b:a5:2a:ec:9e:ad:
83:4f:fa:df:c6:6a:e7:be:5f:e5:1c:20:f8:23:d4:
e8:5e:52:c0:2b:98:66:bc:61:a2:8d:f6:cd:aa:c4:
15:ec:fe:1c:bb:a8:41:d1:d3:c0:75:17:1f:aa:df:
35:54:79:fb:73:65:40:b6:42:cd:56:34:2a:03:04:
5e:72:bb:90:80:14:30:47:1a:f5:e2:68:42:7e:9f:
e1:14:a7:17:95:79:89:d2:ab:e7:d1:61:66:05:b9:
e2:d8:4b:99:77:5d:b7:71:87:bd:fc:73:35:67:5e:
40:de:6d:41:2c:90:c1:e5:e7:59:63:39:4e:09:34:
b1:d2:cc:00:21:80:f4:5e:af:c9:ea:07:08:fb:c5:
ca:a2:d7:fe:30:e2:02:fe:7b:6c:d0:0c:f5:bd:7f:
9f:5d:cf:b3:67:cb:a2:b0:a9:11:55:02:67:7b:03:
b5:d9:ee:82:1f:50:25:09:6d:56:22:e0:25:1d:a9:
10:32:45:84:68:e2:12:5d:8c:e8:d7:21:6d:d4:3b:
5f:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:CA:E1:A7:8A:7D:61:7F:B1:CA:D3:FA:EC:0D:9F:1E:A8:2E:D9:7D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145282.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa48::/32
Signature Algorithm: sha256WithRSAEncryption
2d:ea:27:d9:c1:4c:5c:57:ba:d3:cd:43:de:2e:d3:43:67:a5:
7b:b1:57:29:59:9e:b6:f8:d6:04:cf:52:ed:57:d8:df:e8:fc:
ee:4e:ae:c9:e3:74:7c:c7:01:ac:37:fd:90:49:2f:09:95:4e:
93:f7:e0:2c:10:0b:fc:1f:e0:7c:06:91:99:b2:b8:96:b9:af:
70:1b:49:cd:5e:74:d4:5a:49:75:44:3c:da:d8:49:c9:5e:70:
b6:ed:20:5f:4d:de:bf:78:08:62:dd:47:92:fc:4e:07:2f:11:
d5:8d:09:3d:28:32:8b:2e:83:5b:19:70:85:04:94:ea:84:86:
9a:2b:88:24:e5:0d:7a:61:70:f6:7e:98:ca:b0:02:74:60:50:
ac:70:87:b3:b7:30:45:c0:bf:20:30:6c:f7:72:39:29:4c:43:
ea:81:60:29:06:b5:12:a0:20:f7:8e:b2:53:7d:3a:10:07:15:
95:5f:b7:af:e3:2c:f7:7d:3f:77:5f:c9:d8:8c:6a:c3:5a:08:
0d:b1:0b:1a:5f:99:e8:1b:ca:c7:65:9e:27:57:fb:b6:ab:9d:
a9:5d:b9:b5:1f:18:52:51:9b:ea:68:df:10:07:3d:3e:1d:e1:
67:84:ac:8f:bd:74:00:27:82:15:f7:35:b6:00:17:35:7b:c4:
5a:42:13:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:20 2026 by rpki-client