Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145338.roa
File: AS145338.roa (raw, json)
Hash identifier: Xi8G0avUanqfB1CLiJowxS4pX4Roz7wJpOmWXkUCDoY=
Subject key identifier: 6D:5E:69:47:A8:61:67:50:FA:86:39:8C:68:FE:4B:C1:97:31:A7:D7
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 709D36C0E095923D3EA6194E4074C8A7D4476665
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145338.roa
Signing time: Tue 26 May 2026 06:31:04 +0000
ROA not before: Tue 26 May 2026 06:26:04 +0000
ROA not after: Tue 25 May 2027 06:31:04 +0000
asID: 145338
IP address blocks: 240a:aa80::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:9d:36:c0:e0:95:92:3d:3e:a6:19:4e:40:74:c8:a7:d4:47:66:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:26:04 2026 GMT
Not After : May 25 06:31:04 2027 GMT
Subject: CN=6D5E6947A8616750FA86398C68FE4BC19731A7D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4d:2a:86:6d:e2:90:38:0b:3e:17:c2:98:c0:
25:f6:7e:b4:04:ce:a4:65:89:80:18:3c:c7:bd:dc:
e7:08:94:4d:0a:f8:4b:39:9f:7e:85:57:d9:5a:2e:
fe:5d:a2:67:6b:d4:e8:c9:2f:cb:84:7e:17:4c:be:
6b:87:51:72:73:22:b2:e6:48:3e:d9:a9:2f:28:b9:
e6:7c:42:2e:c5:c5:d5:1a:6a:2d:1a:f7:d7:93:54:
b7:e8:3f:67:c0:8c:5c:3e:da:b8:11:cb:11:f1:13:
5c:f3:39:38:40:f6:59:9b:9f:82:c8:5f:46:7e:52:
6b:42:aa:7f:be:58:ab:9f:f1:9b:90:7d:55:1a:e3:
2e:5f:d7:b2:ab:6d:94:c4:c3:db:21:99:e0:f0:54:
e7:ea:69:6e:90:e4:c3:0f:0b:d4:68:60:fb:b0:83:
ad:0f:d4:89:4c:7a:54:ca:b1:9a:2e:9d:36:0a:80:
6a:3b:67:41:38:82:a3:04:28:fe:c1:93:58:b7:6d:
87:9f:93:2d:a8:04:2e:47:bc:42:6b:00:20:91:54:
7d:7b:0e:05:62:56:2a:55:88:04:8a:86:26:5f:83:
7b:be:dc:32:f3:58:a8:23:b5:52:a7:88:d2:4d:ba:
03:d7:ad:88:dd:d7:45:08:83:d7:aa:75:17:fa:63:
e4:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:5E:69:47:A8:61:67:50:FA:86:39:8C:68:FE:4B:C1:97:31:A7:D7
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa80::/32
Signature Algorithm: sha256WithRSAEncryption
82:ca:d4:79:fb:0d:9d:b3:63:8f:78:f2:39:51:5a:26:2c:78:
92:4d:30:76:64:4b:1f:1d:68:ac:2c:8c:99:de:f3:1b:ad:20:
b5:68:6d:3f:89:02:8d:fa:0d:7d:03:ea:ab:e8:fe:42:29:2e:
ca:5f:c5:84:40:29:7f:61:fc:a7:24:b9:3c:f4:ae:53:a6:1d:
05:18:3e:07:72:75:18:f6:df:85:fb:d2:47:43:e3:59:a6:eb:
16:0e:e5:cd:e6:ff:e0:94:4e:35:f1:1c:04:21:64:be:b3:c2:
5a:22:b3:9b:90:dc:5d:22:e8:d9:ab:72:a3:2c:3f:f4:d1:e6:
39:a6:fe:41:53:ba:f6:40:de:d9:03:91:93:cc:2d:12:d0:b6:
2e:e8:f8:7e:15:62:1b:ec:94:7e:9e:34:0a:96:23:55:59:a6:
21:14:a1:24:ad:e8:43:7b:63:9b:f3:a5:c7:37:e5:88:3e:00:
c8:24:6c:ae:64:8c:f3:2a:d5:ba:a2:f8:4d:c6:74:7a:e5:b5:
62:c4:43:ad:86:91:f8:54:80:7d:bd:dd:6d:b5:6e:84:00:79:
72:23:80:08:df:70:10:97:d2:84:25:55:8d:e7:30:42:38:d5:
80:21:d5:41:c9:07:a7:33:62:be:13:68:f4:c3:ad:6e:46:e5:
cd:4b:43:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:33 2026 by rpki-client