Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145331.roa
File: AS145331.roa (raw, json)
Hash identifier: foHEeqAOo6EetLn9Ryjx2mSkGjBtnWvNTaxQY1VzQPo=
Subject key identifier: 97:17:8D:8C:C0:0D:72:5C:AF:FE:C9:42:8D:ED:59:8C:26:68:24:C5
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1D4886F4814A1909B8395007FE5018F57AA5617C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145331.roa
Signing time: Mon 25 May 2026 01:20:05 +0000
ROA not before: Mon 25 May 2026 01:15:05 +0000
ROA not after: Mon 24 May 2027 01:20:05 +0000
asID: 145331
IP address blocks: 240a:aa79::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:48:86:f4:81:4a:19:09:b8:39:50:07:fe:50:18:f5:7a:a5:61:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:15:05 2026 GMT
Not After : May 24 01:20:05 2027 GMT
Subject: CN=97178D8CC00D725CAFFEC9428DED598C266824C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:0e:6e:eb:48:fe:ac:5f:13:66:be:72:01:dc:
f1:08:5a:4f:40:54:28:52:89:b2:89:86:74:a0:5a:
ec:8d:7e:e9:cd:d5:7b:93:a7:f2:49:a7:66:16:d0:
87:a3:9a:18:27:cf:b1:76:16:0a:64:7d:c1:d2:7b:
29:0a:3c:b8:55:a1:40:d5:c8:fa:60:a9:ac:01:37:
36:6a:31:46:5e:b0:61:5a:c1:a3:fa:ad:f4:fe:36:
a8:07:64:17:da:4d:86:2c:af:6d:37:39:38:2f:2c:
19:24:e0:54:98:81:9c:fb:2e:d7:92:26:af:b3:00:
72:12:6b:29:21:f4:59:90:b9:6e:82:03:a0:b0:c5:
c0:51:ad:99:d3:de:34:79:5d:f8:8b:35:11:a0:c0:
c6:37:8c:7e:4d:64:77:67:4e:e2:4b:b3:27:f0:e5:
d5:2e:cc:b2:6b:ba:44:a4:84:5d:78:74:4a:d6:83:
a0:a4:c4:ca:b9:db:ae:ed:22:eb:20:e0:5d:12:b7:
3b:c8:fd:09:ef:d0:f6:cc:88:a1:f3:1c:76:cb:d9:
17:30:b2:6d:f5:b1:40:8e:a6:a1:86:20:56:20:d9:
1c:f9:96:46:7f:7f:b1:32:d0:d4:47:7f:e7:64:8a:
59:ca:de:31:dd:89:2c:6e:8c:ed:ad:d8:72:cf:3b:
37:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:17:8D:8C:C0:0D:72:5C:AF:FE:C9:42:8D:ED:59:8C:26:68:24:C5
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa79::/32
Signature Algorithm: sha256WithRSAEncryption
14:42:7a:70:fd:39:23:f2:49:99:5f:0d:5b:b5:4d:8a:c7:97:
28:1d:59:0a:a4:28:d8:b5:bc:1b:e6:0d:cb:78:24:ff:76:7b:
f1:6f:e5:69:14:16:b7:67:95:39:4c:79:b8:95:fe:a0:1d:aa:
f8:3d:84:7d:06:29:e0:95:e7:95:a2:6f:62:d2:06:d6:b2:0f:
44:fa:50:9f:1b:92:ac:93:5b:ca:40:af:6d:52:87:e2:53:0b:
bf:65:b2:d9:0b:d7:ad:aa:f0:41:42:32:7e:f1:94:e5:6b:1d:
78:ea:43:f0:ea:88:da:a3:85:b2:9f:a3:4f:75:79:ac:ad:ec:
1a:4d:58:f5:24:b0:d7:55:25:54:6e:5e:42:c7:58:54:42:e6:
45:49:51:b7:56:3d:0f:c8:a0:a0:89:01:ba:fa:c8:56:3e:30:
7c:c7:31:00:ae:3b:9a:bf:68:6a:d8:f2:09:9d:72:f8:f1:3c:
27:d2:75:1c:78:97:79:f1:41:62:f6:34:60:33:ba:47:64:40:
4d:10:7e:3c:a0:a6:95:82:56:c0:ef:76:57:cc:5c:42:e6:28:
76:47:f2:fc:13:c4:33:84:52:0c:9a:77:7a:98:6d:80:75:db:
44:76:b8:dd:aa:df:ae:f9:04:a1:58:12:7c:01:cb:ea:83:d1:
48:01:11:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:01 2026 by rpki-client