Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145302.roa
File: AS145302.roa (raw, json)
Hash identifier: 5yp6HSHPT9k7uXa6FHSsZ7SNA2a+Z2xMN8PHIcw+7/w=
Subject key identifier: 4F:8E:FC:D5:9F:FD:AE:AF:12:35:0E:2B:6E:C2:49:9F:44:7B:FD:25
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3C2879676918ECA549A10406C971B106529B0C5F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145302.roa
Signing time: Tue 26 May 2026 06:30:39 +0000
ROA not before: Tue 26 May 2026 06:25:39 +0000
ROA not after: Tue 25 May 2027 06:30:39 +0000
asID: 145302
IP address blocks: 240a:aa5c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:28:79:67:69:18:ec:a5:49:a1:04:06:c9:71:b1:06:52:9b:0c:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:25:39 2026 GMT
Not After : May 25 06:30:39 2027 GMT
Subject: CN=4F8EFCD59FFDAEAF12350E2B6EC2499F447BFD25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e4:38:f3:f9:23:28:f5:b0:0d:e3:22:08:97:
ee:3c:ae:e6:86:34:a4:87:da:d5:f3:5e:29:e4:29:
3f:5d:06:2a:98:d7:79:9a:50:59:ca:26:43:0f:a9:
31:75:1b:06:55:33:ce:3b:be:ed:1b:3d:9b:05:0c:
d0:67:02:fd:c3:f5:80:a8:5c:9f:ea:ab:7a:89:1b:
d6:a6:fe:29:41:0c:15:e2:27:46:3d:48:73:a5:b3:
14:83:74:2e:a8:de:1a:52:94:21:72:c5:c4:b6:77:
1f:9c:99:a5:fe:5f:c1:17:13:c8:79:63:bd:e5:52:
9b:d0:a9:81:17:98:34:81:81:df:8a:42:4c:c1:db:
f9:0b:29:4d:6d:b6:d6:70:37:ca:e9:6b:9c:00:e1:
f8:33:7d:c2:95:a3:7c:b3:95:8c:d9:83:9c:ea:95:
61:d3:fb:3c:1a:68:66:0b:38:09:1d:7d:5d:5a:3a:
7b:1a:b1:c2:3d:0a:6e:eb:f4:93:c1:ac:36:77:6d:
49:a4:4d:9e:24:5d:25:ea:29:4d:90:c0:6a:8b:24:
72:62:e9:ff:49:4d:20:95:ec:17:0a:0f:ab:08:7e:
07:ff:97:09:01:c7:70:d8:84:60:06:04:d1:a1:16:
89:ff:41:c2:2c:59:34:37:3a:3a:ec:e7:1b:2e:24:
19:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:8E:FC:D5:9F:FD:AE:AF:12:35:0E:2B:6E:C2:49:9F:44:7B:FD:25
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145302.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa5c::/32
Signature Algorithm: sha256WithRSAEncryption
32:a3:aa:b0:ff:fd:3f:a2:1d:4f:73:a4:84:b0:fc:3a:1c:34:
a8:60:ba:14:a3:0c:d2:5a:f6:21:60:43:ec:85:73:3a:d3:6e:
dd:14:96:3b:ac:bc:8f:f0:b8:9c:1a:fe:83:36:d6:0b:ec:e9:
8b:3a:21:a6:b4:ea:27:eb:9b:0e:4a:9a:4a:9f:1f:10:93:d4:
44:2c:33:8f:5a:d8:bb:35:82:63:ef:85:74:b3:be:72:2e:37:
19:dc:12:c8:70:f6:6a:ba:e3:72:1b:89:5d:8b:13:8b:01:70:
47:e8:04:12:99:99:1a:7d:59:3f:af:24:bf:72:4e:7e:93:73:
20:0d:9e:2f:0c:79:8a:30:46:b9:42:01:f4:07:03:e1:b4:43:
5c:23:5d:67:13:d6:3c:37:a5:17:5b:6e:5e:9c:1d:8a:f7:e2:
61:65:9e:dd:05:e7:15:40:95:bc:27:23:57:5d:76:5c:75:82:
f7:c4:62:ca:cf:84:59:28:20:e0:b6:66:32:71:68:a0:5e:24:
10:9e:1a:b7:fe:1e:43:03:04:ab:ce:a8:ba:48:bd:b2:3c:90:
7f:c4:11:1f:f4:24:85:85:d0:e0:5f:84:63:f4:e7:be:d4:19:
13:e8:cd:7f:4d:54:e5:37:d9:23:8c:4b:e7:da:f4:a4:16:86:
0d:35:67:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:18 2026 by rpki-client