Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145316.roa
File: AS145316.roa (raw, json)
Hash identifier: lgAWWV7kLM0S/4l7U39qIn+NaKcGgWvIfe0uvFEOWCg=
Subject key identifier: E8:27:14:25:C6:3D:A4:DD:F4:34:59:04:BC:7F:C6:78:84:81:E8:57
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3D7829B5FA804AF93E1B068D05D82237DE241963
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145316.roa
Signing time: Mon 25 May 2026 06:48:42 +0000
ROA not before: Mon 25 May 2026 06:43:42 +0000
ROA not after: Mon 24 May 2027 06:48:42 +0000
asID: 145316
IP address blocks: 240a:aa6a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:78:29:b5:fa:80:4a:f9:3e:1b:06:8d:05:d8:22:37:de:24:19:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:43:42 2026 GMT
Not After : May 24 06:48:42 2027 GMT
Subject: CN=E8271425C63DA4DDF4345904BC7FC6788481E857
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:1b:47:28:0c:2c:83:d8:11:cf:14:c5:51:e4:
db:d7:42:a4:ba:bd:aa:c3:88:39:e1:06:40:73:e5:
7a:07:f9:ec:31:65:b3:2f:12:49:74:29:a6:2c:7e:
eb:28:1f:24:2f:4b:b6:66:b2:93:cf:55:bd:45:ab:
82:e9:65:4d:03:c7:4a:ca:b9:20:2c:bb:b7:8c:19:
ec:06:93:ac:7d:8d:64:92:fd:c5:53:9f:ad:98:fd:
63:af:66:46:6e:e0:d7:f5:eb:44:64:38:f9:56:04:
50:38:28:a2:86:c1:8f:19:39:3e:89:73:8e:c8:cf:
eb:b7:a5:4e:9e:88:97:c1:1a:77:56:41:df:1e:dc:
48:21:3e:5c:16:a6:b4:5b:db:4c:fa:c6:ce:f9:ab:
d3:56:56:37:d3:7f:02:12:0a:5b:4c:9f:bf:a7:af:
ea:33:48:85:4b:6c:48:c1:29:10:10:0f:cf:5e:ce:
f5:f2:54:ac:a6:93:91:1c:f6:35:b1:05:a0:34:56:
a5:2d:2b:54:3c:a9:69:cc:34:32:53:c7:cd:80:8c:
39:c4:2c:e8:4f:3d:55:2c:3b:29:ca:78:fa:f7:a9:
d4:50:a3:e3:c5:ea:e4:0b:02:b2:1d:18:58:b4:16:
ab:35:62:34:73:5a:1f:fd:10:e4:e5:18:83:df:f7:
b6:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:27:14:25:C6:3D:A4:DD:F4:34:59:04:BC:7F:C6:78:84:81:E8:57
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145316.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa6a::/32
Signature Algorithm: sha256WithRSAEncryption
7d:75:2f:01:7f:63:86:2f:c5:a9:af:20:f5:cc:d9:0d:1d:bd:
d2:60:14:cd:45:55:00:92:ad:02:90:b7:f3:78:01:b4:51:51:
68:bd:e2:f1:b6:f6:f2:58:fd:0b:c8:7b:96:d7:67:db:6c:5e:
1d:0e:4f:38:fd:c2:7d:c5:32:0f:63:80:1c:1b:be:e1:9e:ba:
84:d1:0c:b9:7e:47:a2:1c:e5:b9:d8:5e:1f:5a:7a:08:09:eb:
52:d6:1a:96:7e:d1:65:5f:47:d1:7b:d8:ab:d0:4d:18:f4:1f:
bf:11:a4:7d:99:a9:70:73:34:90:25:05:92:22:8f:13:44:90:
18:44:57:09:a8:4f:d0:3e:da:c1:cd:d4:6d:68:cb:b9:38:60:
fd:39:b2:5b:f6:3e:d8:b1:b5:67:ad:93:7e:3f:be:69:31:13:
90:f4:77:17:57:60:fa:41:49:0b:51:69:40:e6:ae:25:e3:fd:
c1:72:ef:24:40:22:13:e9:d1:3d:e7:02:d8:d6:dc:52:1c:44:
da:3f:13:74:2c:c4:0e:32:10:aa:89:85:ed:93:7a:3d:e2:4d:
e4:4e:03:49:41:79:5d:a4:f3:97:54:1e:ef:34:78:c0:bf:b3:
9a:d4:12:98:79:47:e8:95:9b:81:e6:06:8d:a0:4b:f3:b2:da:
68:de:43:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:58 2026 by rpki-client