Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145327.roa
File: AS145327.roa (raw, json)
Hash identifier: sW0en+4Z2iiRphO3YjXnmqsQhPBFfaONzHQLWFTgDhs=
Subject key identifier: 7E:40:F1:2C:8C:63:B7:FA:7D:26:9E:14:FD:E7:F1:6E:44:02:61:EA
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 328D72D0C6DADBE00F0ED9F48C049DDFB70010A4
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145327.roa
Signing time: Fri 22 May 2026 02:47:30 +0000
ROA not before: Fri 22 May 2026 02:42:30 +0000
ROA not after: Fri 21 May 2027 02:47:30 +0000
asID: 145327
IP address blocks: 240a:aa75::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:8d:72:d0:c6:da:db:e0:0f:0e:d9:f4:8c:04:9d:df:b7:00:10:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:42:30 2026 GMT
Not After : May 21 02:47:30 2027 GMT
Subject: CN=7E40F12C8C63B7FA7D269E14FDE7F16E440261EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d0:a5:a6:4a:3d:40:d2:05:09:f0:a9:e3:72:
af:b1:37:fd:1b:d3:b9:5f:08:83:4a:71:06:da:b6:
ce:32:63:78:5c:61:d3:5c:86:cb:c7:a0:81:a1:70:
a4:fc:ab:a2:48:cd:6f:49:cb:7d:f0:cd:8d:64:4d:
e1:c6:e0:a9:95:2f:17:01:b6:c1:ba:02:98:75:7b:
37:57:b8:ff:3c:e2:4b:2b:b6:e7:5a:9a:09:9e:6e:
e3:bb:91:a8:4b:50:e8:12:a2:e4:50:20:e8:33:25:
49:47:4f:66:7c:d4:a7:bc:b5:d1:d7:90:6b:f6:49:
b6:cc:75:e9:ce:d2:94:f0:bb:b8:4b:02:1d:a8:70:
3f:7a:a7:0b:ea:f8:c0:a4:37:3d:c0:49:f5:3c:25:
7e:99:3f:4e:b4:76:86:20:99:87:98:97:5d:26:85:
40:41:da:bd:f7:f2:37:05:f8:6a:d4:9c:a8:32:4b:
41:2e:b1:98:73:9b:59:bf:e2:5b:f9:1c:bd:ef:43:
7d:7d:a2:28:ac:3b:1c:cf:44:15:93:0b:92:8e:17:
e6:f5:bc:33:95:15:41:22:6b:7a:10:6f:6a:01:ac:
67:65:85:3b:be:ae:c5:c8:0d:e0:6d:b6:dd:86:9d:
35:1d:eb:82:27:59:f3:b9:21:91:31:04:4a:24:c8:
09:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:40:F1:2C:8C:63:B7:FA:7D:26:9E:14:FD:E7:F1:6E:44:02:61:EA
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145327.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa75::/32
Signature Algorithm: sha256WithRSAEncryption
0d:7b:78:f2:c6:ee:19:da:7e:bc:30:12:c5:99:bf:74:c0:30:
16:f5:73:45:a3:93:a8:e9:8a:7a:11:d0:81:87:d7:60:0a:a1:
02:97:40:c7:33:5b:e9:81:61:cd:d7:96:a1:27:46:c2:fc:ee:
fb:a2:30:6b:ae:10:ea:21:ca:f3:a5:8a:cc:90:92:fe:3e:59:
ba:4b:6c:8d:6d:cb:79:3c:c2:c7:54:97:81:b9:09:c9:db:48:
11:2b:0d:32:98:a8:be:db:14:f8:1f:6a:31:c5:52:9b:57:ff:
20:7e:69:ea:76:6f:5e:db:9c:50:f4:c1:e2:72:c2:8e:4a:ac:
e0:2b:8f:90:8d:6c:28:4a:ab:59:19:4f:cb:22:6a:e0:a3:6a:
95:95:b5:54:37:63:b7:78:9a:f9:56:6c:08:a5:e8:40:cb:04:
0f:81:3f:e7:8a:9c:ba:3c:fa:73:56:c0:95:06:2b:09:36:a7:
77:e4:a6:14:61:a7:04:05:e8:25:8e:f3:45:8f:08:c5:8f:fc:
26:05:1b:eb:2a:f2:84:79:2c:74:4b:36:22:53:8b:b5:1a:8f:
26:a0:be:73:9d:ab:fa:0a:4f:84:e1:86:5b:22:49:92:f1:47:
8b:6f:5f:ba:eb:64:0e:b7:1d:68:10:dc:f5:b7:15:21:57:50:
9b:36:8c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:32 2026 by rpki-client