Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145326.roa
File: AS145326.roa (raw, json)
Hash identifier: JQCUFP7Ok9xEzBG+RAUw+o/vzCIM55ta6b1apj0vnUk=
Subject key identifier: FD:89:CF:81:2C:46:59:AD:03:BC:6D:C3:FE:19:0D:F3:EC:D9:F1:57
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4084D36212DBAB4E79DA035E7E03E0EE91D92378
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145326.roa
Signing time: Tue 26 May 2026 01:13:27 +0000
ROA not before: Tue 26 May 2026 01:08:27 +0000
ROA not after: Tue 25 May 2027 01:13:27 +0000
asID: 145326
IP address blocks: 240a:aa74::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:84:d3:62:12:db:ab:4e:79:da:03:5e:7e:03:e0:ee:91:d9:23:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:08:27 2026 GMT
Not After : May 25 01:13:27 2027 GMT
Subject: CN=FD89CF812C4659AD03BC6DC3FE190DF3ECD9F157
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:d4:b4:29:d2:df:0a:48:8e:71:39:73:39:31:
1f:b3:49:ad:87:aa:b1:8b:a9:31:d8:4e:2d:0b:47:
a0:96:b3:cd:31:52:fc:f1:56:f5:2e:45:65:99:a8:
38:e5:17:3a:50:5e:4a:67:ac:4b:7f:c1:43:26:56:
23:71:b8:90:07:49:ec:10:a4:84:7f:6f:ec:37:6a:
49:ba:06:c6:ef:17:aa:f3:f4:22:ce:9a:01:93:bb:
5d:24:c1:21:b4:92:74:fb:fd:40:f0:e7:de:88:29:
45:88:16:d7:f2:2c:e9:6f:08:0f:6e:5b:93:89:7f:
66:6b:d9:df:cf:89:d4:5f:f2:4a:5c:06:97:4a:81:
b9:ba:a8:62:e5:7b:91:2f:c3:3d:3d:60:64:33:3c:
8a:70:fc:8f:3a:da:45:6d:bc:19:b6:7e:17:56:64:
f1:b1:a5:73:66:cc:a6:7c:41:c8:2f:39:c1:ed:3f:
7f:c9:ce:dc:79:74:dd:84:b2:7c:01:9f:d1:d3:30:
ad:e8:46:90:b9:7a:82:5d:24:69:4c:90:2c:ed:62:
cb:ca:37:8d:bc:ac:aa:b0:7d:6e:b7:68:44:00:eb:
a9:99:0f:63:65:14:8a:26:25:21:81:b7:62:92:56:
07:3f:9d:f5:6c:32:b6:ed:57:8f:e4:29:a1:d9:05:
6a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:89:CF:81:2C:46:59:AD:03:BC:6D:C3:FE:19:0D:F3:EC:D9:F1:57
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145326.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa74::/32
Signature Algorithm: sha256WithRSAEncryption
aa:5f:f0:52:b4:29:cd:84:ad:e4:9b:45:08:81:83:92:48:40:
5e:ea:dd:a8:68:a5:02:a6:81:b3:1e:71:90:cf:b8:b5:fa:27:
fb:6a:23:50:4a:b9:62:3e:8a:4f:56:a0:8d:62:15:84:cd:1c:
c5:ad:f9:82:80:27:4e:3c:18:a0:d2:c0:f4:30:d7:5b:87:b4:
08:85:87:10:69:e9:12:72:60:09:a5:d3:5d:f7:5c:f2:b1:a9:
c4:6b:7e:f5:30:cf:ac:c5:a2:d2:b7:69:94:46:fd:b6:15:da:
21:a3:0e:c8:42:dd:a0:30:5f:30:53:f9:f4:5b:21:3d:f8:cd:
2a:22:29:17:a3:20:46:36:15:ca:a2:3d:6e:64:3e:ce:df:1a:
d7:54:81:26:ca:0b:eb:80:9f:ca:c4:8d:51:37:36:8a:a5:f2:
42:02:dc:24:89:b7:32:0d:9c:9a:de:38:6d:37:00:a6:21:b5:
65:b9:0b:64:9f:34:54:67:5d:c9:be:28:c1:54:c7:a5:18:88:
34:1c:46:19:45:96:0a:84:2a:7a:dc:05:6b:ad:05:d2:62:a2:
4a:71:71:78:94:69:98:69:54:68:8d:64:e2:47:6a:9e:c8:61:
79:17:a8:02:e7:82:95:71:7f:d6:44:33:ee:41:4b:aa:2e:b8:
3e:27:57:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:46 2026 by rpki-client