Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145283.roa
File: AS145283.roa (raw, json)
Hash identifier: yYtVhzcSFr4c5ibHj1xIxeUjj5DWAKAhea+32aeJnyw=
Subject key identifier: 9E:98:9C:39:29:C6:5C:01:AD:52:62:0D:C8:08:B9:AF:B8:1E:02:27
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 180DCCE3F66D7F1D231F75FD127CA5FA694ECBC5
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145283.roa
Signing time: Fri 22 May 2026 07:09:15 +0000
ROA not before: Fri 22 May 2026 07:04:15 +0000
ROA not after: Fri 21 May 2027 07:09:15 +0000
asID: 145283
IP address blocks: 240a:aa49::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:0d:cc:e3:f6:6d:7f:1d:23:1f:75:fd:12:7c:a5:fa:69:4e:cb:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:04:15 2026 GMT
Not After : May 21 07:09:15 2027 GMT
Subject: CN=9E989C3929C65C01AD52620DC808B9AFB81E0227
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:71:02:90:6f:7c:34:d7:83:57:ec:a8:98:16:
3b:8c:cd:24:e5:26:1c:fa:c1:41:b8:6c:03:35:3d:
8f:44:d1:aa:dd:0d:b2:cb:c5:a2:11:06:d3:8a:16:
1f:7d:a7:5d:50:f2:d9:eb:39:be:6b:65:82:38:7a:
4a:ae:68:3f:ff:ca:a0:0a:db:e8:56:b1:67:2e:3d:
06:7e:aa:eb:14:8d:5d:67:e2:01:bb:c2:69:47:81:
a5:81:38:13:16:a4:10:dc:0b:f3:54:de:a8:6a:0a:
7b:ce:4e:de:57:46:cb:a8:19:d9:5c:b8:60:f2:9e:
15:1a:0e:ea:3a:3b:93:21:77:18:0a:23:39:67:87:
d3:ff:33:92:d9:49:58:da:25:60:a2:75:11:4a:2d:
4f:4b:e2:fb:83:9a:eb:63:d5:aa:56:fb:4a:c6:e3:
92:99:47:1f:78:ce:20:c7:a5:ec:96:8a:0f:ee:a5:
9b:1c:17:15:4e:47:cc:a3:b9:1e:e6:e8:16:1c:f0:
dc:29:73:41:e5:b0:c1:ae:8a:69:06:79:36:f6:7c:
f6:a5:2e:f0:f3:c1:e2:57:32:6e:b9:06:7a:95:e8:
cf:76:02:5c:3a:e8:70:60:62:05:6e:0b:47:5a:22:
d9:b9:f2:67:e2:12:d6:54:3e:88:2b:a5:f8:fd:9e:
95:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:98:9C:39:29:C6:5C:01:AD:52:62:0D:C8:08:B9:AF:B8:1E:02:27
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145283.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa49::/32
Signature Algorithm: sha256WithRSAEncryption
0b:52:5b:e2:06:77:5a:3c:f7:f4:43:b7:0a:1a:b4:0c:0c:56:
68:10:af:54:f0:52:d2:ea:21:87:4b:f9:e3:d1:ab:95:f0:c6:
41:77:a8:9f:95:5a:f4:4c:84:7a:58:38:92:b0:6a:d9:ad:a1:
2c:73:6c:a7:7e:b0:a0:f2:02:5a:2c:35:48:f7:82:e4:73:75:
81:69:49:ac:96:ac:f3:6c:7c:8a:20:a2:04:0b:16:85:7f:be:
46:ff:ad:ed:19:b4:4e:8a:7d:70:f9:7a:2b:d8:dc:cb:73:2e:
9d:0d:32:de:14:91:35:be:18:ba:4e:a1:8f:c8:64:61:ee:49:
1f:f5:fd:d2:9a:0f:a5:56:f2:ed:f2:5f:d1:5f:95:ed:0b:40:
98:b1:44:79:5f:ac:3a:c9:fe:a8:75:cf:61:ba:e5:f1:c0:3c:
5a:d7:05:41:a1:72:5a:42:68:09:6f:5f:d5:52:15:ec:39:75:
9d:d0:da:c0:da:bb:36:ad:4c:6a:64:03:ca:ec:56:2b:85:2f:
ef:df:03:2d:b6:68:ea:71:32:d8:c9:ba:48:7c:62:32:97:e7:
cb:f2:04:67:11:a7:2d:4d:ad:1b:f5:32:6e:62:99:1f:c9:eb:
55:de:b1:32:8e:6b:17:ca:16:e9:69:66:93:20:39:01:ad:b2:
89:ea:ae:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:38 2026 by rpki-client