Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145298.roa
File: AS145298.roa (raw, json)
Hash identifier: FwoJNZA2X92oKoAcMO5HhftbKTCxlEne0NT4hZZjUzw=
Subject key identifier: 9A:3F:23:2D:A1:54:5C:4F:06:E7:EB:9C:E3:79:9A:23:0F:D8:70:28
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4D50B2E62189482A3A47359E7B76C5875BA9EB7C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145298.roa
Signing time: Fri 22 May 2026 04:27:08 +0000
ROA not before: Fri 22 May 2026 04:22:08 +0000
ROA not after: Fri 21 May 2027 04:27:08 +0000
asID: 145298
IP address blocks: 240a:aa58::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:50:b2:e6:21:89:48:2a:3a:47:35:9e:7b:76:c5:87:5b:a9:eb:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:22:08 2026 GMT
Not After : May 21 04:27:08 2027 GMT
Subject: CN=9A3F232DA1545C4F06E7EB9CE3799A230FD87028
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:32:db:f6:c6:31:a6:fa:48:c9:35:78:3d:da:
a9:52:80:3d:a0:e8:ab:b7:07:08:d4:ac:cd:ce:bc:
57:64:bf:a8:2a:e0:bc:71:12:bf:d7:4a:96:5d:eb:
16:77:90:84:ad:24:c6:df:8c:d8:d0:c0:a3:b4:03:
0b:c1:cf:4e:4e:e5:9d:4b:bd:00:07:cb:56:c7:c2:
6d:8f:ac:00:da:7c:24:02:6c:86:ed:7b:27:b2:5f:
a5:0d:6d:59:e9:ce:bf:c4:75:e0:6c:24:b6:c6:5b:
0e:ae:ec:22:9b:09:16:a9:82:e7:35:05:6e:ae:89:
dd:65:a9:59:59:14:5b:02:8e:a2:b4:c5:50:9b:06:
33:58:56:2d:af:a6:a4:01:b6:1d:8e:cb:18:80:d0:
f2:1e:5b:4b:42:fd:f9:0d:7b:b2:8c:be:f1:6c:14:
d5:36:1a:7e:ca:1b:94:10:fc:b0:b2:70:a1:78:64:
d1:7e:33:94:a3:36:0f:60:98:40:0d:9d:ae:0f:e7:
79:ea:58:02:91:55:f3:3a:74:37:86:db:d8:27:fb:
08:8e:ad:65:dc:ea:27:78:7c:06:9f:a0:14:cd:e8:
7c:2e:f6:ad:01:f5:c5:24:e3:89:f2:86:e2:f2:a0:
68:0c:a7:76:81:a4:a7:59:87:39:ac:67:74:81:50:
cd:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:3F:23:2D:A1:54:5C:4F:06:E7:EB:9C:E3:79:9A:23:0F:D8:70:28
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145298.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa58::/32
Signature Algorithm: sha256WithRSAEncryption
82:b1:0f:7c:a9:74:4f:b9:33:11:1c:8b:12:a0:bd:88:6e:1e:
39:cc:b1:9f:52:ac:54:ce:ff:03:57:6f:c0:a5:62:1e:82:f5:
62:a3:22:05:e9:e7:50:eb:b0:a1:c0:f6:b2:2e:d7:07:52:53:
f2:94:02:40:25:1d:0e:a5:03:63:b1:0f:b0:60:95:c7:67:6c:
5d:38:6f:30:f5:16:a8:4a:58:78:93:2b:c6:33:b4:24:bc:b8:
19:8a:ad:64:04:3d:5c:3c:81:e7:79:1e:b8:37:5b:02:74:a2:
65:a3:3b:f9:e6:99:3c:3d:90:f5:05:76:c6:a4:f4:ca:18:26:
2c:9a:ea:be:bb:53:d9:1c:01:e4:ec:fc:cc:c2:b8:a2:33:a6:
d5:93:24:22:9d:d7:05:c8:75:1d:2a:f8:19:4d:a4:55:d0:f3:
68:ae:f2:ae:f4:1b:70:65:f6:68:7d:83:43:67:36:00:8f:42:
c2:e8:94:f6:e0:18:ca:a5:10:22:db:3a:1b:6b:c0:57:cb:1f:
10:d9:50:6f:49:b7:cf:4a:54:83:37:e4:7b:69:7c:2f:e9:8a:
92:f6:d0:f5:2c:eb:4f:b9:47:57:a9:27:38:90:98:df:57:9b:
80:04:36:17:b8:7d:6d:67:fa:4f:1f:53:aa:77:7c:69:7c:6c:
ff:c9:6e:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:26 2026 by rpki-client