Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145362.roa
File: AS145362.roa (raw, json)
Hash identifier: tHyv21C0+GY4h4/sD3vXZdXZ1ydlCX6QVlzP2IO7Iqg=
Subject key identifier: D0:CD:D4:41:6F:69:0B:8A:30:78:0E:2C:FE:4A:4D:E6:EB:42:D9:8D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 55F642DA92C6C11D91FEF56D110AC30FB0A44F16
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145362.roa
Signing time: Tue 26 May 2026 02:34:58 +0000
ROA not before: Tue 26 May 2026 02:29:58 +0000
ROA not after: Tue 25 May 2027 02:34:58 +0000
asID: 145362
IP address blocks: 240a:aa98::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:f6:42:da:92:c6:c1:1d:91:fe:f5:6d:11:0a:c3:0f:b0:a4:4f:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:29:58 2026 GMT
Not After : May 25 02:34:58 2027 GMT
Subject: CN=D0CDD4416F690B8A30780E2CFE4A4DE6EB42D98D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fe:ab:55:97:81:a5:55:76:0a:c8:72:cc:3c:db:
42:7e:ea:7a:0d:ee:18:69:f0:79:b6:a4:0c:90:73:
c6:d7:b5:75:0a:7c:08:f1:ee:a7:74:98:17:09:75:
90:ce:e3:0c:1b:bc:52:77:4e:f1:06:6a:77:de:36:
56:14:08:cb:96:4d:8e:39:1d:c0:80:c5:1e:17:3a:
71:1a:e6:ef:8f:ce:db:b6:58:4f:2a:ff:df:1b:04:
76:bb:e8:c8:6b:64:bd:80:75:7b:06:3e:fe:37:e7:
63:92:0f:ef:d9:7f:ce:68:6b:a8:6b:2b:b0:d6:59:
67:7d:98:de:d6:54:94:68:b3:ff:f2:b0:55:43:8b:
9e:f0:42:65:52:bd:51:e2:0e:a6:65:1b:b3:44:e4:
40:4e:71:8b:da:af:c7:c1:36:e8:c8:0e:39:64:b3:
6d:6a:9d:30:93:66:4f:cb:92:6c:b8:9f:b6:f1:63:
33:a0:39:94:13:a2:e4:15:7b:23:9c:05:57:a8:be:
cf:26:6d:35:ee:3f:1c:c7:29:07:8d:7b:c1:15:ca:
b2:09:c0:09:31:ea:45:a9:cb:7b:03:97:48:2e:91:
2f:b4:36:9a:63:8f:f4:32:3c:be:c4:36:4e:ef:3b:
17:4b:be:a9:1e:b0:5b:f7:45:a9:8d:8d:d0:24:a5:
8c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:CD:D4:41:6F:69:0B:8A:30:78:0E:2C:FE:4A:4D:E6:EB:42:D9:8D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145362.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa98::/32
Signature Algorithm: sha256WithRSAEncryption
a9:07:b8:cc:30:fc:8e:70:ba:e3:6d:9d:0f:a6:8e:a7:79:54:
fd:ad:a0:7e:0e:8c:aa:71:cf:02:3f:89:89:75:c7:ac:5e:69:
c7:b3:78:01:41:56:ac:3c:aa:bd:4c:5c:22:4a:49:e8:a7:60:
0c:69:5c:a5:0c:d9:10:72:b0:15:63:a7:97:02:ce:b4:23:4e:
bc:9b:ba:7b:51:31:d8:e1:d8:c1:71:3b:0d:fc:06:55:0e:a6:
2c:c0:e9:7b:b4:a3:ea:82:11:4e:2f:30:62:68:ca:d1:c3:41:
93:54:4e:fa:df:33:d9:78:97:5b:30:f8:b8:10:6b:71:8a:89:
c9:fa:c5:88:c4:87:79:73:1e:be:84:37:4c:ac:4b:3e:48:4e:
9e:6e:8f:60:4b:89:ce:42:92:28:76:61:0f:cd:8f:0c:70:f1:
fd:1e:fe:d8:01:3b:22:cb:f7:ad:84:2d:5d:08:34:a3:cf:58:
27:bf:dc:e1:5b:d0:44:9b:2f:0c:85:99:d0:e7:9c:ce:95:9a:
20:f0:06:65:e8:25:ae:75:4d:2f:f1:e5:af:c9:c4:c2:c3:cc:
cb:06:98:20:33:dc:7e:f7:27:7f:56:3f:73:31:17:b0:01:f1:
ea:9e:2e:89:00:37:cf:b4:ef:ca:b6:d6:49:24:62:78:ee:2e:
a0:4e:be:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:52 2026 by rpki-client