Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145309.roa
File: AS145309.roa (raw, json)
Hash identifier: LoESpngUHvaR5ScC0t/0kquxt83HxlhMaa2xbp1hnAc=
Subject key identifier: 85:16:09:05:E0:3D:A8:E4:86:F7:F1:34:6E:1C:C8:31:78:B1:B3:7F
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 58EB27E39DA738B0C6DD9570E6D9D944DDF472A7
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145309.roa
Signing time: Mon 25 May 2026 02:22:31 +0000
ROA not before: Mon 25 May 2026 02:17:31 +0000
ROA not after: Mon 24 May 2027 02:22:31 +0000
asID: 145309
IP address blocks: 240a:aa63::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:eb:27:e3:9d:a7:38:b0:c6:dd:95:70:e6:d9:d9:44:dd:f4:72:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:31 2026 GMT
Not After : May 24 02:22:31 2027 GMT
Subject: CN=85160905E03DA8E486F7F1346E1CC83178B1B37F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:5e:b1:ac:ed:1c:90:d1:66:d8:32:64:30:a9:
88:cc:30:0a:1f:69:cc:4f:8f:b9:2e:f3:c1:9c:06:
e9:75:7f:5b:da:ac:fb:d9:9d:4d:2f:c8:2f:5b:ed:
13:b7:bd:c7:65:c9:e1:7c:26:70:19:f9:cc:e9:b9:
fc:e5:8b:52:0a:be:80:20:89:a8:cc:f1:fd:3c:c6:
79:f8:22:2d:ff:61:14:19:9c:d5:49:5e:45:a2:84:
d4:bb:45:80:33:71:63:63:21:e3:1a:8c:70:cb:db:
2a:c6:75:63:44:4c:49:53:20:0a:9b:ce:71:c9:39:
64:12:8e:7d:87:e3:af:76:19:57:f5:21:38:68:44:
3f:89:69:c6:98:44:d2:91:ee:14:a4:fa:77:a3:a6:
da:5e:0f:fa:ff:99:0e:d4:2e:2e:c3:d5:a0:be:02:
d8:65:74:0a:9e:80:07:cd:01:6f:fe:15:c3:e9:85:
b4:95:db:5a:4d:4f:d4:7b:4d:0c:32:9e:06:b6:99:
da:1f:7d:b9:64:c4:1e:29:e6:80:87:05:a0:3e:83:
95:86:b2:50:fc:a4:a5:64:6d:6c:fa:47:5a:39:a3:
fc:18:73:42:af:4f:05:89:2c:da:07:f0:e4:f6:b4:
45:48:5a:1a:77:18:e7:b6:5d:f8:6a:14:f6:93:d9:
07:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:16:09:05:E0:3D:A8:E4:86:F7:F1:34:6E:1C:C8:31:78:B1:B3:7F
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145309.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa63::/32
Signature Algorithm: sha256WithRSAEncryption
31:17:86:a1:81:2f:f1:a0:8d:f5:63:b9:8d:4f:0b:71:55:57:
0c:a5:3a:48:bf:5d:f5:da:fd:93:cd:87:8e:6c:10:70:82:5b:
6d:5e:2e:44:7f:1e:d9:38:55:88:c1:65:50:3b:2a:7e:7d:ca:
a8:80:9d:92:a5:77:c0:73:2a:c9:cc:eb:d4:1d:f8:c3:95:65:
24:5f:58:02:87:1c:78:9b:e8:d8:cb:5a:5f:fd:3d:03:d6:d8:
0a:42:db:51:56:62:a9:77:88:c2:d6:e2:54:07:5d:26:28:f6:
57:d6:47:8a:09:e5:93:5d:b3:88:3f:f3:47:83:6e:b0:ad:c4:
b3:3d:0b:4e:c2:26:4e:84:e6:4e:4f:3c:60:5d:66:bd:e2:f6:
e7:97:0e:1d:bb:d8:60:b5:b9:24:aa:9d:07:55:fe:3a:df:28:
82:35:2d:ca:20:d1:9c:17:ef:a5:b3:2f:5e:95:05:9a:1c:57:
a8:37:b1:6b:de:0d:ef:34:80:2d:62:e3:f2:21:8c:fd:d9:be:
cc:4f:33:d4:93:d4:04:3d:ad:d1:f8:5b:07:aa:a8:ec:1c:02:
f0:c6:5f:54:a5:bf:f7:12:c4:17:d7:a9:ab:6d:bb:99:dc:f0:
0f:92:99:ab:87:01:ff:27:bf:79:37:06:14:fe:82:1e:d5:38:
05:4a:9d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:12 2026 by rpki-client