Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145344.roa
File: AS145344.roa (raw, json)
Hash identifier: alIcZq7Zl/zz9iV52S7JBMO+z82e0CqzeiB1TSfsC2g=
Subject key identifier: 0D:27:22:97:1B:BA:2F:E5:D0:2B:4E:08:D6:81:04:A0:3B:F6:3C:AC
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 477B46FC17F90F1C2A236E79A82C388B19668D19
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145344.roa
Signing time: Fri 22 May 2026 06:05:14 +0000
ROA not before: Fri 22 May 2026 06:00:14 +0000
ROA not after: Fri 21 May 2027 06:05:14 +0000
asID: 145344
IP address blocks: 240a:aa86::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:7b:46:fc:17:f9:0f:1c:2a:23:6e:79:a8:2c:38:8b:19:66:8d:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:14 2026 GMT
Not After : May 21 06:05:14 2027 GMT
Subject: CN=0D2722971BBA2FE5D02B4E08D68104A03BF63CAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:78:ef:f2:b1:6d:95:82:7d:b1:c4:89:22:81:
37:29:eb:ca:f4:2a:34:8a:b9:6b:e5:25:0f:28:96:
9f:20:b8:3f:60:64:e2:3f:3f:31:46:9a:30:b4:b7:
64:6f:2c:11:e4:88:a8:06:ca:2a:93:5d:35:94:8a:
ab:cc:f4:92:f6:4a:3b:f7:db:c7:71:cf:a2:67:45:
13:19:c6:66:9c:c1:c7:ca:f0:45:3e:5a:33:5a:80:
d7:50:55:4d:2d:07:7e:78:59:3f:cd:f9:77:92:ba:
ff:d1:bf:16:0b:72:9b:a7:4e:0c:a6:bc:c5:62:bf:
0f:7c:97:59:52:22:e4:e2:bb:6d:b4:34:da:01:b3:
bc:9d:e3:9c:7c:27:71:7b:ea:50:a4:e1:c9:7e:db:
70:77:f7:69:31:13:02:ea:77:00:91:36:d8:97:33:
0d:f7:b2:20:17:3f:ea:cf:15:a2:ae:74:69:2e:04:
ac:c9:62:1c:ee:5d:87:c4:b0:e7:ba:c9:10:7b:4d:
f8:73:d1:9e:56:2f:35:95:34:d4:ea:32:90:bc:50:
eb:44:2e:2f:80:1a:94:4a:a1:85:e6:a3:a9:82:65:
0c:fa:e1:97:e5:0d:b7:c9:69:ed:a0:b2:01:30:9f:
fd:20:e8:c8:58:31:3c:a2:95:16:d9:9f:c1:63:9f:
7d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:27:22:97:1B:BA:2F:E5:D0:2B:4E:08:D6:81:04:A0:3B:F6:3C:AC
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145344.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa86::/32
Signature Algorithm: sha256WithRSAEncryption
4a:7b:0a:2c:c9:80:4f:96:43:55:18:a1:62:bd:26:78:03:8b:
ba:81:57:15:13:f0:cf:54:96:16:48:d8:e6:6c:ea:6c:c3:2c:
b3:f0:55:f1:5e:04:8e:ca:36:59:15:8e:b7:d1:c3:5b:bd:bb:
d0:5c:4f:70:7b:65:8b:e1:cf:8f:fa:97:0d:b6:14:d3:4c:c4:
b4:72:cd:35:cc:9f:eb:af:38:1f:63:be:75:29:92:a2:30:9b:
4b:d0:2f:37:3d:40:72:13:34:f3:89:20:52:c2:30:e8:2b:59:
0c:a5:f2:15:d3:b4:fe:b9:1a:b6:54:72:3b:b3:4f:8a:66:5f:
ca:dc:2e:90:b9:1e:83:d0:9b:06:f4:cc:67:f5:a0:bf:7c:3d:
76:51:02:d9:8d:92:12:ae:b3:c4:ca:51:a7:2d:a0:30:8e:10:
59:d5:b7:f9:01:c7:39:f7:39:2b:4c:02:02:23:b9:94:83:57:
e4:83:3a:18:0f:b6:22:6a:23:b6:e4:b1:41:e7:15:df:c5:e3:
e9:a4:f9:d9:fd:7a:f2:d8:b6:b9:1c:b9:cd:d3:92:f5:c6:52:
85:1c:9b:9e:07:1c:05:a0:55:cf:8d:1d:49:82:58:20:57:3f:
f3:0e:75:53:0f:11:36:3a:47:9e:1e:8d:84:4b:3d:36:2e:e6:
c7:00:65:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:24 2026 by rpki-client