Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145315.roa
File: AS145315.roa (raw, json)
Hash identifier: mX14cbM4Vr5dh3pCVsXZQnf7BZs4/gOcRwl7vipr9B8=
Subject key identifier: 13:DF:20:C1:03:48:AD:5D:A1:D5:E1:26:0A:9D:2A:9E:9B:23:8A:4A
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 37AFE4F187AB81784FE6C0AC11CE59B5FF07CC44
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145315.roa
Signing time: Mon 25 May 2026 06:48:49 +0000
ROA not before: Mon 25 May 2026 06:43:49 +0000
ROA not after: Mon 24 May 2027 06:48:49 +0000
asID: 145315
IP address blocks: 240a:aa69::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:af:e4:f1:87:ab:81:78:4f:e6:c0:ac:11:ce:59:b5:ff:07:cc:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:43:49 2026 GMT
Not After : May 24 06:48:49 2027 GMT
Subject: CN=13DF20C10348AD5DA1D5E1260A9D2A9E9B238A4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:86:7e:20:52:a9:d3:12:df:60:5f:33:ea:d0:
2a:39:c5:55:2d:74:31:74:9e:1d:fd:d8:66:1f:95:
04:6c:7d:18:ad:a2:d2:7a:db:07:d7:f3:8d:4b:ee:
fc:0c:cd:96:62:15:71:70:e2:b7:90:07:db:a0:c1:
62:c2:79:ea:28:9c:10:de:a7:01:c2:8d:ca:73:56:
a1:65:00:2d:75:83:99:be:95:73:e4:a6:ec:41:f4:
9b:e3:9d:f5:91:9c:36:e9:e3:73:74:91:f0:ca:85:
ef:41:db:59:1a:af:51:1a:2e:bd:ed:6d:c9:e2:eb:
2a:59:09:54:c9:c3:62:36:0e:4b:24:05:04:04:ad:
33:17:a7:63:ef:16:24:36:8e:e9:92:4e:19:97:c5:
27:89:74:9a:2c:83:bd:1a:b7:13:0a:8d:69:fb:c4:
96:3b:90:2f:a0:62:93:d8:cb:46:f0:a8:2a:2a:f0:
bc:62:8d:64:e5:18:39:65:2d:9a:59:db:67:f1:ce:
9e:e0:f1:e9:34:97:37:24:ca:8a:b3:7e:02:ed:e8:
78:7b:74:2d:8f:20:b1:d9:6e:3c:04:91:b5:a0:52:
ec:3f:2f:a5:cd:47:34:27:af:ba:a0:4e:d7:e2:5f:
90:61:b9:56:c9:fd:cd:de:db:b3:95:0d:c4:a9:8d:
f8:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:DF:20:C1:03:48:AD:5D:A1:D5:E1:26:0A:9D:2A:9E:9B:23:8A:4A
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145315.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa69::/32
Signature Algorithm: sha256WithRSAEncryption
22:2f:d2:8d:cd:5d:98:6d:ed:e6:81:21:b5:77:6e:ec:d8:32:
ce:95:de:93:6d:6f:5d:a2:58:71:1d:c9:10:1e:ab:ff:41:43:
4a:63:e6:49:2a:42:aa:d4:53:28:92:b4:52:8e:eb:63:be:a2:
14:a9:c0:b0:e8:cb:1d:0f:fd:5d:e3:87:f7:aa:1c:37:ef:f6:
8e:d2:7a:4c:56:8f:85:13:34:04:97:de:7c:50:db:ca:c4:77:
53:76:1d:f2:83:ae:61:da:05:c1:ab:8a:9d:c3:a5:ea:37:89:
6e:8d:7f:f8:2d:3d:ba:b1:69:71:c5:92:46:39:4b:54:be:4b:
54:55:74:cc:be:31:54:7b:e7:0f:72:cf:e9:2a:ad:e8:9f:e4:
76:46:3d:95:0d:f6:09:af:ea:a8:b5:8a:fa:a4:00:32:04:83:
06:d9:f6:e4:5b:9e:62:c2:f6:cc:f8:2a:0f:2c:f3:57:1a:f5:
7b:3f:3a:66:d7:0a:cf:8c:c6:63:a9:94:de:f3:8c:a9:49:68:
19:0f:1f:66:ae:b1:c4:f8:df:2b:2b:c1:1d:13:d9:0d:68:57:
98:c2:0b:a3:33:70:1b:ec:22:b5:22:7f:6e:8b:92:1b:63:87:
ab:64:81:70:0d:a4:93:98:12:e1:d2:11:9f:8f:59:82:b2:22:
1b:3a:d9:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:56 2026 by rpki-client