Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145357.roa
File: AS145357.roa (raw, json)
Hash identifier: 78tql9O9/CvZgdeYMJ1V3S7Bg2qdA+bcYjc0N9JIUqI=
Subject key identifier: 4F:E5:A3:7B:A5:0E:AA:57:5A:CB:71:9D:68:D2:D3:4B:0E:AB:76:94
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2F0B482ADF7A8CAA7F235C826F2EE7F9EE48D97B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145357.roa
Signing time: Fri 22 May 2026 01:50:35 +0000
ROA not before: Fri 22 May 2026 01:45:35 +0000
ROA not after: Fri 21 May 2027 01:50:35 +0000
asID: 145357
IP address blocks: 240a:aa93::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:0b:48:2a:df:7a:8c:aa:7f:23:5c:82:6f:2e:e7:f9:ee:48:d9:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:35 2026 GMT
Not After : May 21 01:50:35 2027 GMT
Subject: CN=4FE5A37BA50EAA575ACB719D68D2D34B0EAB7694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:a6:da:91:a1:6c:15:37:d8:be:ba:46:f6:b2:
ca:5b:fc:84:32:f0:6c:ff:45:0e:b8:9d:ce:c9:d9:
52:15:9f:d6:ef:38:b9:24:08:fb:78:a2:a1:60:07:
a9:eb:6f:fa:c4:8f:ac:eb:b0:6b:26:f4:5d:19:4f:
0a:75:b1:80:bf:3a:30:03:9d:45:f1:f8:37:05:c8:
01:3c:db:1a:e6:d2:bb:ab:1e:c2:62:2e:80:f1:da:
07:be:f7:eb:54:42:be:ec:59:a9:23:4c:3c:12:05:
94:95:3e:07:5c:c9:c5:2c:22:53:e8:5d:7b:97:ea:
7f:49:9a:87:6c:01:c9:d9:18:0f:42:d6:54:7c:6b:
89:de:b0:a7:f9:a2:2f:12:9b:f2:a0:86:73:29:c6:
2b:de:61:18:c0:af:5e:dd:10:32:26:4e:07:7c:03:
7d:b3:80:37:7b:d6:25:2a:83:87:06:0c:4d:2b:b4:
0b:ae:06:5a:e0:9b:c0:b8:f0:37:8f:97:da:2c:44:
89:57:01:f7:92:90:fe:7f:26:44:d5:ed:68:57:2f:
cf:a5:dd:3f:49:aa:45:35:f1:f3:1c:e8:e1:25:6a:
2a:07:98:c5:ac:b8:a1:ba:45:76:3c:48:37:17:e0:
e6:fa:69:44:7f:e9:62:da:bb:c3:e1:3c:d5:d0:0a:
38:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:E5:A3:7B:A5:0E:AA:57:5A:CB:71:9D:68:D2:D3:4B:0E:AB:76:94
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145357.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa93::/32
Signature Algorithm: sha256WithRSAEncryption
82:49:a3:32:66:4d:3a:cc:52:62:d2:c5:9d:93:45:67:dd:31:
bf:de:ac:3b:ae:53:dd:88:13:15:8a:97:f7:89:2e:1b:45:fa:
69:ec:17:a6:2d:e7:06:03:80:79:22:bc:ce:74:39:6b:27:d4:
f7:6e:8a:a1:e8:e1:f9:73:5c:e7:9a:6a:b6:98:7a:c4:41:32:
cd:f8:06:19:7e:55:b8:3a:f3:be:4c:8b:85:0d:9f:b8:81:46:
7d:3a:49:fc:71:c7:5a:4d:4c:3a:34:cb:14:42:6f:b4:cf:a3:
e3:c6:d6:17:8b:7a:ef:30:9e:26:d5:8e:c8:09:8b:9a:73:57:
1d:df:51:59:4f:3d:fd:41:7f:22:59:07:68:ba:50:2a:13:e8:
bf:96:fa:71:f2:0b:ba:23:28:3a:27:e6:81:67:03:77:12:68:
08:ca:12:f1:be:b8:f6:e2:84:3f:f4:c0:16:1a:7b:da:3a:5f:
72:ed:d6:55:9b:00:c7:00:c3:6e:b8:c2:d0:1b:9a:4d:ea:5a:
e9:90:ca:64:61:71:b1:25:a2:ae:fe:e8:a7:d6:73:7c:3d:9b:
31:05:33:a9:d7:72:b2:4f:6a:ad:6d:35:71:2e:74:5a:55:b3:
79:8d:ed:42:be:52:f9:c1:4c:d1:7d:59:80:74:1d:a5:ca:ba:
5e:6b:a9:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:11 2026 by rpki-client