Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145340.roa
File: AS145340.roa (raw, json)
Hash identifier: amvLR3Ck4KeYGd4MNgtYEb9T34XYyJdsVhaYsrsDFD4=
Subject key identifier: 25:6D:3B:2F:01:61:26:0A:B4:9D:6B:21:20:34:BE:F6:2D:2B:F0:72
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5A6CD424F55334A6253FED8CCD3B188C3A27FAC3
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145340.roa
Signing time: Mon 25 May 2026 03:19:09 +0000
ROA not before: Mon 25 May 2026 03:14:09 +0000
ROA not after: Mon 24 May 2027 03:19:09 +0000
asID: 145340
IP address blocks: 240a:aa82::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:6c:d4:24:f5:53:34:a6:25:3f:ed:8c:cd:3b:18:8c:3a:27:fa:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:09 2026 GMT
Not After : May 24 03:19:09 2027 GMT
Subject: CN=256D3B2F0161260AB49D6B212034BEF62D2BF072
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:4d:23:22:59:6c:83:07:19:6d:c8:c7:24:a7:
10:19:26:94:4a:5b:9c:0c:b6:ce:c0:20:b9:e5:d1:
14:90:cf:13:94:f0:0f:e3:16:1a:9e:46:ce:c9:48:
cf:8f:7b:84:9c:75:b3:7a:73:b7:2c:99:e8:17:4d:
88:7e:e5:e2:56:57:e2:4f:30:c4:b7:f0:b1:78:3f:
ff:4e:d7:b3:0b:50:70:dd:10:74:7f:aa:e6:5a:01:
cc:90:0f:fa:5d:b7:9d:48:18:37:09:56:06:5d:57:
52:a1:e0:4a:d4:ec:16:c6:e2:3d:43:c1:ee:5a:d0:
c3:33:12:21:92:75:fa:a0:b3:ae:cc:4b:ad:7b:37:
10:66:20:34:27:fa:5c:8e:2e:e8:f0:cb:93:69:b5:
72:b5:04:28:a1:f7:c3:b8:53:af:ee:ab:3a:f9:37:
59:09:86:19:fb:91:28:fa:6f:98:f6:52:4b:15:4f:
d0:33:08:e5:24:f9:33:67:28:f0:d0:3e:e3:78:7f:
39:ba:7a:9f:13:c8:af:e0:40:d6:d1:a5:33:55:a9:
9f:ca:9a:d7:72:58:f0:66:a8:b6:58:85:b9:cc:5a:
d5:05:87:5b:e3:16:4d:8d:a8:43:a6:4d:40:ae:40:
07:a1:ee:62:c5:bc:77:c4:43:40:5b:e0:91:25:4b:
a9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:6D:3B:2F:01:61:26:0A:B4:9D:6B:21:20:34:BE:F6:2D:2B:F0:72
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145340.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa82::/32
Signature Algorithm: sha256WithRSAEncryption
5a:04:ad:a3:26:3b:43:68:ac:7b:41:0c:5b:a3:dd:3e:e8:b6:
7f:8f:0f:37:0f:07:a1:d5:bb:72:a3:74:67:39:c1:a8:7b:bd:
4b:ef:d7:37:c5:d6:9c:fe:17:1d:da:a0:ea:02:00:63:fb:5d:
04:2a:70:dd:e0:a8:c1:b9:64:e2:70:b6:dc:c1:f4:49:de:07:
df:7f:7a:26:f8:48:61:bd:fa:65:3c:c2:1d:2b:ef:97:5a:2f:
64:7a:11:2d:21:a3:f0:f2:a1:67:d1:6c:53:29:c1:b7:00:ec:
f0:65:5c:ef:36:93:05:26:89:a1:af:96:fc:4e:d6:2d:d8:f1:
00:72:18:c2:21:f3:70:3d:89:a8:b8:5a:4f:ef:39:47:fc:84:
6d:21:a7:70:67:12:05:12:ff:12:3b:8e:bd:24:9c:21:46:ba:
ea:5d:e1:e7:37:26:43:ba:fe:55:48:99:39:41:50:18:c9:b2:
04:13:bb:e9:44:4c:d6:2c:a8:f7:7e:e6:9a:d7:6e:0d:15:58:
50:1e:16:ea:97:8a:45:bf:d8:34:1f:8c:84:46:c4:91:87:71:
7a:e5:d0:6c:8e:42:7b:fa:37:54:f2:5f:4c:00:28:60:5d:92:
85:94:de:96:e7:81:0e:2c:38:22:30:35:a3:48:38:77:48:81:
6a:84:31:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:51 2026 by rpki-client