Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145342.roa
File: AS145342.roa (raw, json)
Hash identifier: W/KJ4bZK3RM3/J81kigsexly88WDYyoT1vAdqmh7ZTU=
Subject key identifier: 09:B5:54:EA:AF:1E:62:D2:CD:21:C2:A5:FF:AA:78:FD:99:60:65:16
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7E561F9F4E24D7A18A9CB74D15315ED6D0E7B0DC
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145342.roa
Signing time: Mon 25 May 2026 06:48:48 +0000
ROA not before: Mon 25 May 2026 06:43:48 +0000
ROA not after: Mon 24 May 2027 06:48:48 +0000
asID: 145342
IP address blocks: 240a:aa84::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:56:1f:9f:4e:24:d7:a1:8a:9c:b7:4d:15:31:5e:d6:d0:e7:b0:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:43:48 2026 GMT
Not After : May 24 06:48:48 2027 GMT
Subject: CN=09B554EAAF1E62D2CD21C2A5FFAA78FD99606516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:65:7d:e2:88:e6:f8:53:8f:28:a7:a6:49:bd:
db:95:a3:b9:aa:80:cb:38:15:96:b0:1b:d6:03:4e:
67:bf:c2:96:e6:b0:88:58:f0:fd:b5:49:d9:be:57:
b9:3f:0f:a7:28:f2:ff:2e:92:65:8f:d6:c0:b2:37:
4f:38:11:57:51:a9:e9:f4:23:15:6a:42:b5:fb:a1:
9c:e6:6f:c1:2d:7e:c2:02:6c:88:9b:48:98:7b:ba:
7b:0e:3e:42:4d:6b:db:01:32:e5:2d:70:9e:27:e4:
28:28:03:c4:68:9f:77:71:63:e6:7f:ba:2f:15:c2:
00:00:4c:c8:cb:34:a9:ce:6b:aa:e8:51:5b:5a:f7:
f6:de:fc:ef:4e:b4:fe:6f:7f:44:ec:0b:d5:fc:7c:
dc:82:a1:6a:ad:99:b5:e9:0f:bb:80:ea:bb:27:d8:
71:d9:3d:16:55:ea:b7:33:1a:a6:5f:a1:94:f3:33:
d4:2e:79:49:44:e4:aa:96:4d:ea:d7:c2:5a:4a:ce:
9d:ed:34:bc:99:79:e3:80:bf:e5:ee:4e:c9:e1:36:
de:57:98:af:ec:55:39:66:00:93:c1:22:80:42:f4:
84:89:22:46:a2:5b:91:78:77:a6:96:f6:a3:b6:5f:
f2:24:e9:0b:04:3e:e5:f8:d0:13:d7:25:08:0d:76:
81:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:B5:54:EA:AF:1E:62:D2:CD:21:C2:A5:FF:AA:78:FD:99:60:65:16
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145342.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa84::/32
Signature Algorithm: sha256WithRSAEncryption
00:15:df:c8:cd:a4:b7:7f:ee:bb:32:72:db:25:c3:61:8a:be:
61:0e:62:f0:ae:1e:2b:04:6a:4b:5b:14:bf:96:83:aa:2b:42:
f8:ae:65:df:47:05:4e:fc:36:3c:36:39:eb:b9:11:a6:80:66:
e3:56:c6:c5:b6:da:f4:de:fa:32:ae:09:17:50:b5:43:d4:64:
88:93:52:2f:89:aa:19:ac:29:60:d8:a5:fd:40:34:42:b1:29:
81:f1:0c:a6:cb:f7:34:f4:83:21:d6:12:30:bb:93:a7:96:64:
92:a4:5c:fc:94:4c:12:60:bb:1b:e7:5c:c4:30:98:e6:9b:44:
21:a5:0d:3b:b2:5d:20:dd:61:c0:6e:bd:c9:06:7b:fc:20:91:
1d:7e:ea:ff:1f:99:9f:0a:03:75:4e:f3:a3:a5:35:e3:75:8f:
e3:d1:b4:e2:8a:bb:18:88:05:de:df:28:31:c3:8a:8d:98:6f:
f3:66:e5:59:cb:6c:63:d8:64:a4:3e:a2:91:d1:1f:7c:de:d0:
d8:ef:3d:0a:4f:f4:27:ac:d1:ab:7b:31:38:7c:5f:3f:f5:f5:
21:ae:4c:e1:98:26:0e:c3:29:30:1c:27:53:bd:c7:c5:3d:fa:
8e:b9:04:1a:bd:ea:be:fa:8d:e3:7e:43:78:da:24:00:98:5e:
d1:b8:21:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:46 2026 by rpki-client