Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145359.roa
File: AS145359.roa (raw, json)
Hash identifier: D5vRj0AtvNOL80mfYikoZaOWDZ+r3vKxQ85aWnIH4/I=
Subject key identifier: BF:77:87:18:39:7C:B5:D8:20:46:D4:F2:05:60:3A:BF:62:53:B6:B6
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 52FB17087CD91D6E44E59BF27CD1D386C71D93D3
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145359.roa
Signing time: Tue 26 May 2026 03:16:41 +0000
ROA not before: Tue 26 May 2026 03:11:41 +0000
ROA not after: Tue 25 May 2027 03:16:41 +0000
asID: 145359
IP address blocks: 240a:aa95::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:fb:17:08:7c:d9:1d:6e:44:e5:9b:f2:7c:d1:d3:86:c7:1d:93:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:11:41 2026 GMT
Not After : May 25 03:16:41 2027 GMT
Subject: CN=BF778718397CB5D82046D4F205603ABF6253B6B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ec:4b:68:49:26:f8:90:f0:28:3f:b7:21:ad:
f1:a8:50:20:bb:da:fd:29:b2:1f:9f:2e:58:e5:fd:
43:1c:53:19:ba:be:3f:63:23:55:6f:94:31:98:2c:
56:36:7e:3e:e0:19:18:4c:e5:14:21:b8:d5:80:70:
16:26:67:7d:bb:d4:a3:67:14:93:51:61:13:48:73:
4c:b9:6a:94:c4:e5:8c:06:6b:67:46:8c:51:d1:d3:
13:a7:ac:69:15:28:3d:2f:fe:f1:5f:4a:e9:fe:24:
8d:2d:b8:76:a3:c6:57:e5:07:81:59:48:56:c3:d2:
67:4f:53:a2:c7:1d:35:11:65:5c:ee:29:81:0d:1d:
1c:dc:d7:ce:62:ef:dd:fe:92:1a:ea:d6:3e:78:bf:
bb:ad:1d:82:19:d9:0e:1c:8f:a2:19:49:7c:c4:ff:
f0:74:d9:91:42:13:41:95:2e:38:e6:5e:bd:eb:93:
59:7a:41:13:2e:81:d5:d1:21:0d:0d:1a:60:3a:f9:
2d:98:d9:cd:87:e3:e5:7c:ec:17:50:13:2e:67:b1:
92:bf:a8:71:10:df:fd:a5:af:c8:36:20:11:56:25:
fe:50:07:e5:c8:5c:e0:b9:8b:c9:f0:43:e7:65:00:
1b:3c:95:5d:3f:da:6d:ef:0a:b5:8f:69:7b:b2:89:
c5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:77:87:18:39:7C:B5:D8:20:46:D4:F2:05:60:3A:BF:62:53:B6:B6
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145359.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa95::/32
Signature Algorithm: sha256WithRSAEncryption
85:23:a5:68:45:77:83:5f:f5:26:f9:96:33:3d:22:c6:db:b4:
c2:c2:19:3c:11:0f:41:1b:ca:66:eb:fa:60:ca:a0:07:9f:a5:
66:d7:03:d1:fb:8e:9f:e8:55:1c:a1:b6:0e:59:60:d8:52:e7:
0d:8b:67:8c:6a:20:4c:d2:f9:98:6a:c8:51:a7:f3:08:b8:1f:
35:23:f6:bc:8c:40:f8:b3:02:10:47:44:9d:1c:5c:aa:57:5f:
a7:ae:ca:8e:3a:2d:99:d0:f4:04:8c:17:47:2c:6d:d9:63:4c:
d0:4f:9b:e6:1f:8e:41:78:5f:54:11:e7:79:93:f6:7b:34:0b:
00:88:5f:b6:a7:a0:a2:27:3b:3c:e4:97:96:3e:1c:0d:2a:a8:
be:ed:94:cf:0f:2f:5d:1f:1d:37:fb:24:ae:aa:ed:2a:63:51:
d3:01:a0:de:b2:73:cc:1e:3a:5c:78:d3:ec:23:81:90:90:aa:
d2:1e:de:ad:43:33:b2:dc:bf:fa:48:48:23:f1:74:40:47:c3:
89:7c:f7:d4:2b:ff:40:75:da:ac:b3:da:7d:55:29:c2:bb:13:
15:4c:50:92:ef:8c:65:57:f5:68:70:e5:a9:05:7d:b4:d6:91:
d6:5f:f5:68:5e:32:5e:eb:9b:d1:3f:8b:1b:32:77:fb:b2:7d:
d7:9d:83:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:44 2026 by rpki-client