Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145290.roa
File: AS145290.roa (raw, json)
Hash identifier: 39P6mhmgSuC3IA0Hlj+Bi3UzO0oFtGxlunFEPThKBHk=
Subject key identifier: 52:76:0E:CE:81:53:5B:C5:7F:1C:7F:61:E1:4C:8F:EA:85:E4:BD:39
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1CDB7D73A19158FA4DFFC1579ED905134F3A3C6D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145290.roa
Signing time: Fri 22 May 2026 06:58:34 +0000
ROA not before: Fri 22 May 2026 06:53:34 +0000
ROA not after: Fri 21 May 2027 06:58:34 +0000
asID: 145290
IP address blocks: 240a:aa50::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:db:7d:73:a1:91:58:fa:4d:ff:c1:57:9e:d9:05:13:4f:3a:3c:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:34 2026 GMT
Not After : May 21 06:58:34 2027 GMT
Subject: CN=52760ECE81535BC57F1C7F61E14C8FEA85E4BD39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:6c:83:0a:4c:49:f7:8d:2b:8a:30:a3:1d:0f:
56:75:03:65:62:70:57:bd:0f:be:ca:0a:cc:b8:1e:
a0:9a:e2:b5:97:ee:47:f4:6d:ef:b0:d2:a1:51:90:
eb:07:6e:3d:b7:f9:2a:55:10:57:1f:0c:66:7f:d1:
4a:48:c8:74:ac:7a:34:5a:f0:c2:a2:97:50:67:db:
32:14:df:33:a1:e2:cb:54:35:2f:ec:2e:8e:9b:d7:
c8:67:ec:0f:2a:69:6e:f1:10:53:cd:08:a7:81:5c:
1b:e8:0c:64:85:a5:e2:ab:81:f9:c7:73:5b:07:25:
13:41:43:7c:94:74:bf:20:3b:5a:4c:34:ea:ed:93:
c8:95:b5:b7:fe:b0:64:5f:42:b4:d1:3e:33:db:9c:
d1:4e:a4:a4:33:4b:b7:18:47:82:7d:22:a3:df:03:
0d:b4:23:e3:31:ec:10:10:36:10:b1:ee:69:62:e8:
79:c2:93:a7:51:19:0c:0a:7d:59:3b:b7:dd:bc:1f:
6b:2d:cc:18:f2:46:c0:10:db:27:6d:fe:b4:2e:1a:
b6:be:d7:7a:4d:e8:52:66:54:a7:11:89:b4:04:bf:
f6:06:62:9e:da:e5:79:84:77:ef:0b:8f:33:6e:af:
3c:38:90:d3:36:e2:a4:57:07:a0:4a:2d:98:48:9f:
c9:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:76:0E:CE:81:53:5B:C5:7F:1C:7F:61:E1:4C:8F:EA:85:E4:BD:39
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145290.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa50::/32
Signature Algorithm: sha256WithRSAEncryption
90:d2:c4:e9:14:5b:38:c9:11:64:8f:ae:2f:72:77:92:30:9f:
c0:fb:10:6d:0c:e2:7c:65:83:2a:7b:97:0c:83:84:23:89:39:
d1:11:4f:40:6e:e7:4a:f1:ca:24:59:1d:94:76:d4:00:e9:98:
2e:60:09:24:ff:81:de:12:bd:9c:77:c7:b6:45:16:f6:48:9b:
46:14:34:4f:13:d4:dc:e6:5f:f7:c7:05:8c:34:d1:04:93:65:
cb:f2:d5:c2:6d:97:f6:b9:37:c1:09:e8:2f:94:b5:3a:94:1f:
94:fb:6f:a9:f2:e9:29:78:e9:57:89:44:42:a5:e9:8f:6d:98:
89:f7:db:7a:9b:db:2f:3c:7e:ef:5b:49:a2:40:d9:0c:93:16:
55:f6:ea:ad:09:4d:b6:f9:5c:9e:7a:4e:a4:e3:85:6d:9b:ca:
8a:20:bb:f8:e7:a9:0c:80:4f:8f:55:cd:9f:c3:a8:c2:c6:14:
0b:97:e1:c0:20:5f:7e:82:4c:d7:05:43:23:2d:35:fd:79:78:
19:2d:bd:f0:23:e5:be:21:33:02:18:e3:1f:bd:dd:f8:22:ff:
6c:12:1e:ed:5f:16:a9:ae:fe:36:dd:77:71:ec:6e:c5:2c:5d:
56:11:8c:a7:1b:b9:32:07:6d:f9:95:19:70:42:78:4c:7e:10:
a3:6f:e8:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:42 2026 by rpki-client