Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145356.roa
File: AS145356.roa (raw, json)
Hash identifier: vsMjStVh1MOWF59pNZ2fMhka/JLgjfcLugxTxslZPa4=
Subject key identifier: BF:D0:68:54:B8:EA:23:63:D0:F2:CF:20:6D:0C:71:86:18:DF:AB:B4
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0B8B707492FB72D4982350ABD7C349CEFEC4DD3A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145356.roa
Signing time: Fri 22 May 2026 06:27:45 +0000
ROA not before: Fri 22 May 2026 06:22:45 +0000
ROA not after: Fri 21 May 2027 06:27:45 +0000
asID: 145356
IP address blocks: 240a:aa92::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:8b:70:74:92:fb:72:d4:98:23:50:ab:d7:c3:49:ce:fe:c4:dd:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:22:45 2026 GMT
Not After : May 21 06:27:45 2027 GMT
Subject: CN=BFD06854B8EA2363D0F2CF206D0C718618DFABB4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:3e:61:3d:09:b1:7e:02:20:ab:fe:14:cc:a1:
46:55:d7:99:2e:0e:fb:68:55:86:5a:aa:97:f0:16:
9f:44:a4:ff:84:11:b7:83:4b:c7:ca:f6:d4:13:5a:
aa:b8:74:95:89:88:e2:7c:9a:5e:2d:9d:05:8c:31:
d7:d7:77:c4:23:75:62:db:e9:88:8c:5f:a4:ef:8e:
4c:78:b3:3b:eb:93:69:5f:c6:41:88:1f:15:d9:7e:
d7:c5:47:c5:46:3d:cb:0a:9e:66:bb:6b:36:52:3c:
a1:18:0d:fe:09:70:09:cf:4d:18:26:02:0b:f9:d6:
f8:b4:a6:0d:1e:e2:95:25:b9:27:d8:5d:90:42:42:
c1:91:78:27:26:59:db:da:4b:ce:8d:77:af:bb:17:
40:e2:2b:92:39:4e:b9:5f:42:25:de:d5:e6:e0:22:
7d:69:df:d7:7c:11:03:71:9a:fb:1e:9f:55:e6:26:
da:83:2c:55:d6:00:ef:06:eb:73:14:c1:65:43:82:
e7:27:cc:46:89:2f:bc:5b:a0:d6:81:1d:2e:c1:ce:
cd:3c:51:09:75:bb:f3:25:80:c2:5f:11:81:4d:6f:
ac:5b:d9:2c:5b:2b:be:90:c1:67:11:e0:39:62:67:
97:01:a6:8b:51:b1:e1:01:15:a1:f6:7b:07:31:19:
5e:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:D0:68:54:B8:EA:23:63:D0:F2:CF:20:6D:0C:71:86:18:DF:AB:B4
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145356.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa92::/32
Signature Algorithm: sha256WithRSAEncryption
1b:05:0e:45:fb:7e:e2:bd:d2:13:7f:90:dd:31:e4:f4:af:cf:
b6:58:5d:49:f2:ef:50:45:75:5d:ea:8b:c7:b3:38:06:ae:34:
a4:8a:4f:31:ce:9a:ce:14:46:9a:8d:bc:67:c9:1e:49:47:c3:
5c:25:42:45:46:f5:b1:dc:4d:c7:b7:64:ab:ed:93:f6:f9:85:
8e:0a:14:87:a6:b1:30:bd:ac:1d:04:e3:de:20:7a:5d:b4:d6:
69:f6:f4:8a:43:97:1f:21:34:63:17:01:98:75:f4:21:0b:c9:
0b:0c:e2:f5:d5:8d:d0:ce:58:67:fa:6e:78:68:87:4a:2a:4f:
08:2d:8b:b5:71:82:77:87:ff:5f:18:29:e1:f2:8a:f5:03:13:
e8:8a:27:71:1d:0f:3b:f6:f3:29:ce:1f:0c:cc:ea:18:e2:42:
d2:8a:a1:70:a1:4d:81:fb:0b:96:0d:c7:10:c0:c2:58:78:be:
ef:44:37:74:dc:14:91:cf:97:15:3b:49:b4:21:94:c9:fc:68:
0f:36:12:6b:7f:b7:f1:80:cc:3d:3c:0a:7f:2b:83:89:28:e1:
c0:16:4a:4a:82:f7:9e:56:87:72:60:6d:b5:77:b3:fd:af:2e:
9a:c1:25:93:52:a5:f9:4f:ae:85:e3:fd:1c:d9:53:e4:50:1a:
14:63:26:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:47 2026 by rpki-client