Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145317.roa
File: AS145317.roa (raw, json)
Hash identifier: +dJmE0cEbCcJbgGRqUf8Os4BG1Xsohu/u9mjlyf3PBk=
Subject key identifier: D8:BF:1D:3E:D1:4E:22:B2:D4:61:F4:69:DF:A4:7A:AC:3F:22:12:23
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 68985364121D6D2A8DCA487650E97690AFFBE38E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145317.roa
Signing time: Fri 22 May 2026 06:46:13 +0000
ROA not before: Fri 22 May 2026 06:41:13 +0000
ROA not after: Fri 21 May 2027 06:46:13 +0000
asID: 145317
IP address blocks: 240a:aa6b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:98:53:64:12:1d:6d:2a:8d:ca:48:76:50:e9:76:90:af:fb:e3:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:41:13 2026 GMT
Not After : May 21 06:46:13 2027 GMT
Subject: CN=D8BF1D3ED14E22B2D461F469DFA47AAC3F221223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f8:91:bb:20:90:e2:5c:d4:81:d5:b3:48:0e:
c5:cf:b6:e2:6d:77:d1:ec:a5:07:a4:7f:24:31:7b:
d1:93:f3:0c:a2:cb:1e:69:b5:19:b5:d9:d0:8c:ef:
c5:a6:22:2e:5b:0d:bf:74:d8:c8:c7:66:77:f3:82:
d3:61:64:eb:de:ed:e6:25:31:35:3b:a6:8f:eb:69:
cf:e6:5c:e6:ef:5a:d0:4a:50:62:a5:25:be:fe:ab:
47:b9:73:d6:80:22:83:db:52:65:de:9e:ca:51:45:
a2:2e:d8:3d:e3:98:20:e7:a4:ea:e6:d3:d5:03:45:
5b:f0:41:08:be:cc:76:9f:78:52:08:ad:ab:90:56:
70:7a:30:d5:dd:2b:9c:7b:c4:9a:0f:eb:b4:53:e5:
1e:a1:c4:f1:2f:4b:c5:ae:76:4f:fb:a4:c8:63:21:
b2:c2:cb:f6:83:1f:84:e5:19:f7:26:78:38:d8:73:
6c:63:c4:bb:09:87:ac:bd:bb:03:75:28:83:a9:f9:
b3:eb:eb:84:85:3e:e3:ff:52:93:9e:24:77:37:fa:
3a:c2:88:1a:8d:b4:c3:d8:5d:f8:3d:20:81:3c:a8:
65:bd:b8:a4:7a:59:f5:4b:bd:e6:0a:2b:ab:03:8e:
eb:cb:b7:ba:31:2b:b8:a5:59:0d:28:f3:e0:b7:0d:
f7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:BF:1D:3E:D1:4E:22:B2:D4:61:F4:69:DF:A4:7A:AC:3F:22:12:23
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145317.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa6b::/32
Signature Algorithm: sha256WithRSAEncryption
8c:cd:04:d8:e3:de:d3:04:67:be:bb:3a:b5:c7:27:7f:9d:87:
27:9b:95:47:ad:44:70:b6:e1:17:14:aa:77:5a:04:4b:e8:8e:
76:b4:27:92:dc:8b:fb:59:69:a1:d4:c1:9b:3e:89:89:84:f4:
83:a4:75:2e:b4:4d:e6:24:c0:c9:d7:cc:75:45:a8:78:68:79:
16:26:2f:8f:2c:2c:87:01:96:eb:68:94:a1:04:aa:7c:7b:c2:
39:65:c6:49:21:55:cd:d1:20:05:8d:9e:7a:62:70:ba:2a:ce:
2c:09:5f:bf:e8:2f:f6:4a:18:6a:de:db:75:01:f9:25:66:f9:
9a:10:59:e7:19:82:75:f3:99:6a:77:a5:53:56:1e:44:34:d9:
ad:ca:0d:ea:a3:7a:d4:f8:74:a3:3d:07:23:35:8b:f7:f5:12:
61:34:e3:ae:04:69:1e:2e:0c:15:75:92:1e:f4:5f:ee:84:6b:
27:a4:85:16:d2:0f:ed:b3:32:b7:1a:c2:ef:48:bc:42:ec:1d:
43:04:82:a8:87:d4:4f:58:76:43:cf:01:43:2f:d9:cf:05:df:
d5:e1:c6:43:b1:83:1c:af:8a:3d:31:c5:14:77:00:60:7a:69:
c9:63:bd:ac:1f:03:fe:b0:ae:2f:d1:ae:db:84:68:ac:a4:9d:
80:27:1c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:31 2026 by rpki-client