Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145306.roa
File: AS145306.roa (raw, json)
Hash identifier: gIZbGxaJHknLCDkM0gltoSMj60nkjqAUC0PVFtyWrDM=
Subject key identifier: C8:66:4B:59:88:89:6D:2C:54:18:1F:96:7D:73:E5:21:63:CB:43:68
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 250A392A546344A190688E943BB1D5AE24C909A2
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145306.roa
Signing time: Fri 22 May 2026 07:32:31 +0000
ROA not before: Fri 22 May 2026 07:27:31 +0000
ROA not after: Fri 21 May 2027 07:32:31 +0000
asID: 145306
IP address blocks: 240a:aa60::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:0a:39:2a:54:63:44:a1:90:68:8e:94:3b:b1:d5:ae:24:c9:09:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:27:31 2026 GMT
Not After : May 21 07:32:31 2027 GMT
Subject: CN=C8664B5988896D2C54181F967D73E52163CB4368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:91:ef:95:b0:31:eb:ce:cf:f9:ed:3b:16:c8:
f5:92:38:65:c4:7b:c0:89:20:a1:ac:21:6f:96:7a:
cc:29:88:57:54:76:65:45:a4:31:93:6a:9c:37:cc:
a5:4c:9c:9b:45:10:6c:cf:3d:d3:9b:6d:2f:2c:06:
6f:d8:93:18:d9:9b:17:ad:b9:84:53:cd:4e:ff:82:
5d:e8:85:1b:87:10:75:57:51:99:67:09:ef:a7:7c:
8b:97:d2:35:18:01:0a:5a:9b:7f:ea:2b:57:a2:36:
02:3f:e5:e3:58:26:40:8a:b7:b4:be:f9:71:92:e0:
3d:85:3f:73:08:58:04:ce:70:59:e4:ff:21:d1:dd:
1e:e0:c0:de:5b:dc:b9:dc:25:aa:9d:ed:f7:6d:83:
5a:75:c9:0d:41:e8:09:1e:4d:bc:80:40:0f:66:f9:
c4:51:7a:03:93:29:55:ca:2c:1d:f1:10:af:8d:92:
62:a8:4b:dd:ac:f2:db:fa:85:3e:a3:90:2a:1b:12:
6e:bf:b3:7c:8c:7d:f8:a0:2d:85:b8:7f:f8:f8:af:
d4:be:a9:9b:c1:ff:dd:7e:51:9a:97:2e:a6:48:b4:
a9:e0:62:4d:54:e6:c7:60:f6:5e:aa:69:4f:ae:92:
b0:5b:cc:72:c1:bc:25:c3:87:bc:c9:ce:68:42:89:
1a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:66:4B:59:88:89:6D:2C:54:18:1F:96:7D:73:E5:21:63:CB:43:68
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145306.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa60::/32
Signature Algorithm: sha256WithRSAEncryption
ba:4d:df:bd:5f:7f:fc:63:53:e4:b4:d0:60:d5:39:58:15:ef:
85:e4:ac:52:62:af:38:95:e8:de:f5:70:36:20:9a:55:0b:89:
a2:23:94:c0:69:f0:ce:da:54:11:e9:f5:11:ac:e0:6d:4b:92:
ff:8c:7a:47:63:db:bb:a8:d4:34:c4:fc:1a:a1:32:8e:b0:38:
8f:a4:0f:a4:6b:bb:03:f8:1f:c6:56:d7:3a:e7:3d:e3:fd:da:
49:b9:e4:32:8b:40:93:ef:b9:a4:4d:39:f5:37:d1:ed:33:29:
2e:86:d9:a5:b8:b0:3d:0b:e9:6b:90:4d:55:2d:be:72:5a:4a:
dc:d6:de:2f:71:8a:4a:d5:be:0c:cd:eb:79:c2:db:33:f7:3f:
46:f8:6b:93:ac:be:0b:bb:e4:a2:c3:e4:46:27:73:87:ac:77:
6f:26:f2:cb:9e:8b:85:2e:98:26:8e:a5:b7:40:80:d8:13:fa:
dc:01:65:a2:5a:10:e7:0a:23:c5:7d:76:55:97:e6:c2:7e:50:
35:85:0f:df:3e:36:41:a5:12:b0:89:df:6c:57:5a:29:8c:1b:
8c:d4:b0:30:b0:4b:5b:59:c3:35:2e:2c:ae:83:94:c2:e5:8f:
51:fb:d3:7d:f6:f2:12:3c:d3:8b:54:a1:bb:3b:14:0d:28:00:
f7:8a:6f:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:51 2026 by rpki-client