Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145333.roa
File: AS145333.roa (raw, json)
Hash identifier: 1xGtyw4l5hF/Unhwzn0xL77rXEtmUZ07vNoy4HbKvOM=
Subject key identifier: 28:49:69:D1:81:62:E4:F5:88:20:1B:65:EE:5B:1A:8A:7D:7C:48:A1
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2C7F45CB6F0C8C020867ABBA66C4600181B76DD2
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145333.roa
Signing time: Tue 26 May 2026 02:35:22 +0000
ROA not before: Tue 26 May 2026 02:30:22 +0000
ROA not after: Tue 25 May 2027 02:35:22 +0000
asID: 145333
IP address blocks: 240a:aa7b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:7f:45:cb:6f:0c:8c:02:08:67:ab:ba:66:c4:60:01:81:b7:6d:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:30:22 2026 GMT
Not After : May 25 02:35:22 2027 GMT
Subject: CN=284969D18162E4F588201B65EE5B1A8A7D7C48A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:eb:83:f3:ab:7a:2e:3a:45:21:d8:28:92:03:
a9:60:db:7b:6b:3a:7b:29:aa:6c:25:d6:60:da:93:
3e:4e:27:cb:b6:ee:7c:30:f7:62:ab:81:c8:f1:b0:
db:58:56:4f:27:8a:4f:28:59:75:eb:3e:99:25:90:
a5:a2:6b:92:70:67:7c:75:4c:50:fd:8d:60:26:03:
ea:ab:e7:09:ae:32:68:42:57:6d:60:93:9f:eb:d7:
66:13:bb:8e:68:78:52:96:02:06:bf:cb:15:55:0a:
a1:eb:50:29:27:3b:b6:15:1b:ee:21:37:4c:21:bb:
fc:92:79:dc:48:37:71:1e:85:83:87:9f:4a:67:ff:
28:ce:42:7d:d0:5b:52:4c:ed:59:42:1a:7d:5b:6f:
27:81:88:f2:d2:8f:1c:eb:fa:80:a2:3a:35:ff:cf:
00:05:6c:a6:d8:aa:4b:8f:af:12:37:14:d7:44:6e:
3e:c4:c9:08:e8:d5:12:26:60:78:2e:65:26:92:b6:
d1:a0:49:07:6a:db:81:5a:b2:af:7a:86:28:6c:5b:
74:82:4c:9b:15:cd:b6:7b:f6:7d:bb:c4:a6:1e:3b:
97:fd:57:a6:84:6d:9e:d9:c5:47:82:44:b4:30:9f:
8d:65:cc:9e:70:70:68:8e:48:27:2f:24:29:47:d6:
b3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:49:69:D1:81:62:E4:F5:88:20:1B:65:EE:5B:1A:8A:7D:7C:48:A1
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145333.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa7b::/32
Signature Algorithm: sha256WithRSAEncryption
ac:a8:d4:dd:9f:d5:fd:08:43:5b:73:05:6f:0f:ff:2b:44:43:
c3:d4:b0:a1:08:2e:2a:9d:e2:85:f1:8c:b5:ad:b6:c8:0b:91:
6a:42:99:fa:21:f2:16:2d:66:b9:b2:5a:88:06:67:11:c8:b0:
5f:34:ab:55:87:5e:06:3f:14:11:5a:56:f1:1d:7b:11:43:c1:
99:74:e5:91:09:23:6a:b0:24:d8:2d:45:c0:41:56:77:e8:d4:
5a:e0:bb:18:20:40:b1:eb:66:f6:d7:36:6b:ac:c5:87:0c:7f:
2b:1d:12:cc:d0:03:60:d7:f1:f5:6a:c1:82:f6:8f:0d:e5:3e:
92:a2:29:95:0f:c1:f1:59:59:ce:2b:52:d6:4c:3d:a2:12:89:
ac:5c:eb:ba:19:af:33:92:0c:eb:9e:02:5a:fa:25:56:82:cc:
86:99:2b:4d:62:cf:21:4f:0c:f9:95:d3:f2:a6:03:2a:6a:ed:
69:07:71:a0:80:50:1f:85:11:36:92:70:6a:91:86:98:b5:74:
c5:83:be:e6:7d:46:1a:1b:4b:a9:e9:eb:76:35:96:c1:a6:9e:
b7:57:f0:f7:0e:67:72:c0:5b:90:a0:42:8a:29:71:f3:57:56:
2f:0f:8b:54:86:35:ae:cc:37:97:97:89:91:1a:a7:bd:4a:ff:
75:33:10:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:23 2026 by rpki-client