Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145330.roa
File: AS145330.roa (raw, json)
Hash identifier: aHSbWDRbsMJMzx3BPBdJxYvPkttzYYpZFY2XSfn4TqY=
Subject key identifier: 64:DF:EA:44:D6:B2:59:B6:F2:AC:2A:49:8D:7A:EB:BF:4E:44:8C:8B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 43EEAB867E6916CFF4DCD9CAFB2895348BA17E6D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145330.roa
Signing time: Fri 22 May 2026 07:09:06 +0000
ROA not before: Fri 22 May 2026 07:04:06 +0000
ROA not after: Fri 21 May 2027 07:09:06 +0000
asID: 145330
IP address blocks: 240a:aa78::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:ee:ab:86:7e:69:16:cf:f4:dc:d9:ca:fb:28:95:34:8b:a1:7e:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:04:06 2026 GMT
Not After : May 21 07:09:06 2027 GMT
Subject: CN=64DFEA44D6B259B6F2AC2A498D7AEBBF4E448C8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a7:e0:14:58:d8:da:33:7b:7f:14:9e:3a:af:
c1:5a:08:50:fe:ef:ef:21:80:c5:eb:c7:a5:db:92:
05:8b:de:ca:72:7c:0e:c9:2c:b7:ef:7b:d1:3e:38:
05:a5:60:3f:40:b2:62:06:46:61:8c:bc:ef:0e:e7:
c1:ee:b5:73:c8:b1:06:b9:2e:eb:1e:bb:58:0e:34:
30:48:0d:6d:82:10:45:67:bf:7d:36:c0:30:00:75:
7f:70:dd:e5:83:87:66:65:49:f1:78:f2:e2:fa:b4:
6c:a8:b2:7e:58:1a:c2:4f:51:41:03:f8:df:86:2d:
09:29:04:98:cd:92:ff:69:4a:5d:31:77:9b:12:5c:
1a:b1:bf:99:1a:10:3e:85:75:75:b0:9d:7a:3e:ec:
4d:9b:29:56:4f:ec:27:10:d8:c6:55:fa:63:6c:74:
a8:b1:bb:11:c0:d7:23:5a:6f:f9:a1:a6:c4:33:10:
e3:c0:d4:c2:6c:10:44:63:5c:88:21:59:6c:4f:f9:
88:1b:45:d3:f3:ba:94:0b:f3:0e:86:29:2c:b4:6f:
1d:f4:ac:56:b6:1b:9f:f7:66:e6:dc:c5:0c:b7:6b:
10:64:51:bb:a5:67:05:6b:66:e9:ac:ea:be:e2:0d:
aa:c8:ed:20:7b:b8:bc:23:86:cb:44:af:99:c7:70:
24:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:DF:EA:44:D6:B2:59:B6:F2:AC:2A:49:8D:7A:EB:BF:4E:44:8C:8B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145330.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa78::/32
Signature Algorithm: sha256WithRSAEncryption
39:ea:e4:09:84:5f:e8:7a:91:51:63:c0:18:43:fa:0e:79:7c:
cf:54:1a:e3:4e:dc:b8:33:86:2e:02:2a:26:39:0a:e3:28:3d:
f7:9e:1d:33:63:3c:ab:e8:e8:aa:07:10:3a:91:cf:2a:07:68:
37:89:6d:95:07:30:44:33:59:50:5b:16:dc:f1:53:d0:17:2c:
30:19:9c:2a:77:60:6b:90:a5:7e:b8:02:f0:1d:81:c7:bd:1e:
3f:e5:ac:aa:16:ed:36:b0:4b:f0:2f:22:90:11:44:df:63:f0:
cd:4c:60:de:cf:fc:78:02:0a:44:41:d5:99:04:ec:62:1d:70:
5e:d2:da:ca:c6:67:59:6f:bc:4e:3d:ae:f7:69:ff:20:96:fc:
ff:ca:42:d9:e7:35:4e:5b:01:b0:6a:7e:6c:22:3c:a0:bb:1a:
cf:14:c4:a9:69:66:2b:fb:c7:d1:21:f3:71:82:20:d6:a5:ad:
ba:7f:5d:bf:a9:4c:01:0d:5a:2a:20:61:ae:8f:49:41:af:87:
7e:65:26:1e:da:70:fd:e9:68:9d:69:2a:fd:f6:6d:a4:87:7e:
ed:09:36:45:f7:88:d4:50:b8:30:0a:12:1f:45:6a:f5:bc:dd:
69:d3:25:19:6e:54:8a:b4:9b:64:e0:bd:c8:3f:d5:e9:be:6c:
aa:b9:4a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:01 2026 by rpki-client