Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145289.roa
File: AS145289.roa (raw, json)
Hash identifier: A6J4d3PccEp5ymvyd6JmKPMPSmac8uwx4fMRQ3ROk+E=
Subject key identifier: 44:17:38:3F:7E:88:F5:1A:50:0E:27:EF:35:B8:B1:E7:F0:1F:B4:49
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 30B86456A4326725364244E2859A283B3BEAA3DC
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145289.roa
Signing time: Fri 22 May 2026 06:58:23 +0000
ROA not before: Fri 22 May 2026 06:53:23 +0000
ROA not after: Fri 21 May 2027 06:58:23 +0000
asID: 145289
IP address blocks: 240a:aa4f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:b8:64:56:a4:32:67:25:36:42:44:e2:85:9a:28:3b:3b:ea:a3:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:23 2026 GMT
Not After : May 21 06:58:23 2027 GMT
Subject: CN=4417383F7E88F51A500E27EF35B8B1E7F01FB449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e0:a1:d6:2b:be:8b:d5:ea:59:b9:a4:13:dc:
bf:6c:b0:60:e4:d6:78:77:d7:63:b3:8a:9a:0a:8d:
b9:45:e6:ef:a6:a6:87:de:de:06:4b:7d:b8:0a:5a:
59:2f:64:76:8c:70:7c:9b:fc:97:c4:eb:6c:aa:93:
37:8a:31:63:91:ec:6d:4c:6a:84:e7:3e:62:ce:92:
83:d3:3c:7b:cb:6d:7f:03:2d:2b:99:af:04:89:23:
b4:aa:aa:41:18:a1:ad:30:72:76:70:29:9f:df:ee:
de:4a:c3:8d:3d:17:ee:8c:a9:8a:5b:df:4f:66:48:
ea:80:f9:38:d4:47:d9:9b:d3:b9:87:a2:5a:01:98:
54:52:55:25:cd:c2:97:1f:68:5c:d6:2e:b2:21:91:
36:76:eb:07:dc:bf:76:42:76:52:97:7a:7a:3f:6f:
2d:ca:1d:04:b2:f9:ee:70:33:d1:4e:90:9d:0b:a8:
1a:2e:04:0d:a2:0b:9f:2a:48:84:d7:80:09:ac:64:
03:ff:9b:95:50:90:2f:50:32:a1:45:93:46:38:11:
d5:8b:cb:b9:62:68:d5:9a:42:7f:67:43:4d:41:c5:
00:09:88:97:bc:d5:36:f1:81:f6:a8:36:d2:c7:9b:
a7:96:98:fd:23:1d:db:e0:9a:34:a7:0d:94:b2:f6:
c8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:17:38:3F:7E:88:F5:1A:50:0E:27:EF:35:B8:B1:E7:F0:1F:B4:49
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145289.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa4f::/32
Signature Algorithm: sha256WithRSAEncryption
5f:66:5a:cf:ee:0e:70:a8:3c:e0:56:4b:3c:dd:15:21:e7:31:
13:e1:9b:18:f3:1b:49:3f:fb:10:f0:43:0b:97:70:59:1a:fc:
a9:3f:6a:5c:41:67:48:1b:cf:aa:4d:cf:f9:e9:f4:cd:ef:e9:
08:fd:d0:c7:f1:f0:b5:d9:f4:1a:42:ae:40:2f:07:0f:40:67:
6d:7f:bf:94:2c:e2:e3:8c:2f:d1:50:f1:88:66:fc:92:51:74:
30:23:f5:95:90:9d:02:4c:78:c8:55:62:2d:df:30:30:85:1a:
11:18:be:40:34:d4:f6:75:79:c0:ad:06:7e:70:2b:17:d4:ce:
30:34:cf:b4:96:fa:66:f8:78:f7:64:47:84:9c:f1:55:a2:83:
0f:39:7c:dd:63:fe:9a:fd:2b:1b:38:2e:75:79:02:78:a4:b1:
56:6e:53:5a:73:d2:7d:8b:ae:ac:d3:6a:28:7f:79:c8:c2:12:
75:bf:ef:cd:8c:f3:4c:7a:9b:56:01:29:bb:be:98:31:8a:a0:
1f:b1:6f:17:15:5f:34:4e:94:8f:f5:79:f8:01:5b:12:db:ed:
6c:bb:36:43:59:0d:e9:8c:b4:eb:03:3e:28:8c:6e:5b:13:79:
5f:14:04:e3:f5:10:f4:ba:98:d3:9d:66:9e:8d:40:cb:68:8c:
4e:8e:2e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:27 2026 by rpki-client