Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145305.roa
File: AS145305.roa (raw, json)
Hash identifier: 1wbjrjHg3bNEsOa7fy7VHwDrKDDY9PtVrzABBmUdZ+A=
Subject key identifier: C1:9A:18:11:F3:C2:2F:30:5C:C8:DD:4F:5F:30:DA:4D:D5:DA:71:1B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7775E3C6D8CC9A8878DEA4ACC78FFC8555EE3FB1
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145305.roa
Signing time: Mon 25 May 2026 01:20:00 +0000
ROA not before: Mon 25 May 2026 01:15:00 +0000
ROA not after: Mon 24 May 2027 01:20:00 +0000
asID: 145305
IP address blocks: 240a:aa5f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:75:e3:c6:d8:cc:9a:88:78:de:a4:ac:c7:8f:fc:85:55:ee:3f:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:15:00 2026 GMT
Not After : May 24 01:20:00 2027 GMT
Subject: CN=C19A1811F3C22F305CC8DD4F5F30DA4DD5DA711B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ba:c7:fc:aa:e3:25:2d:cb:12:8f:f1:3b:a7:
76:73:e8:5f:1e:64:1e:29:42:2b:9f:ae:b1:9a:12:
61:4f:35:fa:f3:e7:bd:6d:24:c0:f6:65:4a:7b:bb:
2d:39:b3:64:56:a5:68:d5:d1:7d:19:47:7a:27:35:
62:2d:c8:fa:14:83:12:1c:50:f0:62:a8:b2:14:35:
20:dd:9e:4a:ea:04:2a:87:25:12:37:79:71:82:1d:
33:51:67:17:89:15:0b:5b:81:68:eb:81:fe:03:5b:
0f:eb:cd:22:58:a2:48:2a:c6:6b:21:5e:f0:4f:12:
ce:be:9d:d1:20:fb:3a:db:51:26:b8:2a:97:9c:dc:
7d:ca:ca:a4:2d:1b:6c:17:e4:0b:3b:5f:3e:5d:bb:
b5:37:6d:a9:88:ba:42:d4:4b:1f:7a:36:09:b6:e2:
c9:37:ec:08:61:fb:e1:f4:f2:a6:0f:9f:5f:9e:a7:
96:a8:f6:22:fc:0f:76:87:c1:69:a4:8e:06:1a:7a:
c3:34:05:19:6e:f0:b6:13:88:32:3d:12:a1:de:26:
d6:59:7a:f2:96:81:24:9a:b9:12:bc:c9:87:8a:ae:
11:c7:27:88:7c:cd:4a:94:7a:83:df:bd:ba:b2:47:
86:f8:cc:5d:c0:05:d2:50:13:9d:6f:f3:12:58:b0:
53:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:9A:18:11:F3:C2:2F:30:5C:C8:DD:4F:5F:30:DA:4D:D5:DA:71:1B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145305.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa5f::/32
Signature Algorithm: sha256WithRSAEncryption
92:f4:79:0d:39:33:0f:a4:70:3e:35:8f:21:3f:9e:b9:ce:5c:
b8:f6:68:19:30:a3:fe:10:82:e7:be:d6:0c:0d:da:0a:05:3a:
24:4a:54:83:8d:90:20:a4:36:5d:79:ce:06:ba:7f:c5:5e:cd:
6e:b7:4d:86:2a:0c:77:9f:8a:6a:e1:e2:7c:d7:e6:1c:8d:81:
70:49:09:1b:be:11:8b:92:48:9c:03:4b:ef:59:bc:d2:d1:25:
08:f4:e7:98:7e:40:9d:7c:78:cb:91:c2:47:e5:e7:9d:5a:92:
7a:c1:40:6b:ea:8e:99:62:d8:3a:e9:97:99:c1:00:21:75:fb:
d6:10:64:3d:b5:11:cf:f5:6b:f9:00:c4:05:7b:53:32:b5:62:
33:e9:fb:be:12:40:cf:f6:7a:56:27:5f:4b:bb:61:73:4f:87:
3f:7d:4d:2c:a4:78:b9:7b:35:f2:d3:7d:18:70:2d:87:bd:60:
b3:a4:dc:e8:4b:38:79:b5:a3:b4:db:0d:4d:f5:d8:10:64:30:
92:cf:e9:e1:38:6f:20:b4:d3:4e:30:68:a7:41:fc:cb:63:a4:
d9:cd:b1:cf:67:ac:09:0f:83:bd:be:ab:38:26:1f:65:c4:47:
c3:4e:76:14:2f:81:b0:83:11:62:71:d6:65:23:e0:ce:26:9b:
aa:5d:9b:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:53 2026 by rpki-client