Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145367.roa
File: AS145367.roa (raw, json)
Hash identifier: 2oYaKqmIagxz3htEh/6muojkkMZFcPBy3Ng4Szwg8IY=
Subject key identifier: C0:9B:10:29:CE:1B:32:3A:18:3B:3D:79:C7:7A:8C:E9:5D:33:63:6F
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 32CBF345E3220F595776633DC7B76ABF38BE37B5
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145367.roa
Signing time: Fri 22 May 2026 06:27:42 +0000
ROA not before: Fri 22 May 2026 06:22:42 +0000
ROA not after: Fri 21 May 2027 06:27:42 +0000
asID: 145367
IP address blocks: 240a:aa9d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:cb:f3:45:e3:22:0f:59:57:76:63:3d:c7:b7:6a:bf:38:be:37:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:22:42 2026 GMT
Not After : May 21 06:27:42 2027 GMT
Subject: CN=C09B1029CE1B323A183B3D79C77A8CE95D33636F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:1a:6f:f5:3a:90:47:e8:58:c5:aa:a7:4e:ce:
d8:99:76:fc:40:71:ce:b3:b0:86:4f:2c:3d:7a:b6:
ad:4d:77:fb:4d:d7:af:12:05:e1:d0:9b:02:7d:05:
13:23:7a:0b:60:37:37:5f:16:f3:7f:6d:d3:c2:3e:
db:52:fc:bd:47:4a:47:b6:bf:7b:71:97:45:16:47:
0a:48:a9:1a:85:53:dd:a2:c8:d0:c2:e8:a5:76:f1:
6a:a4:d9:f3:13:d2:ea:b3:60:24:cc:d5:99:06:62:
73:fc:1c:7f:11:6e:6a:d1:e2:78:43:3f:df:ec:08:
7f:f4:d7:6d:3a:53:9c:fe:44:ac:84:73:f6:1c:22:
c8:43:81:fb:74:03:52:f4:24:fe:de:d3:a9:8d:15:
c8:94:a0:f9:78:80:56:ea:8b:94:d5:9e:33:6d:2c:
fa:bc:1f:8d:04:1a:fd:99:ed:01:6a:71:b9:eb:e1:
33:05:37:32:68:ff:1e:cf:89:b6:25:42:4c:6a:85:
dc:8c:c6:d4:9a:66:bd:40:37:13:75:fb:c7:91:b5:
72:66:37:c7:5d:0e:b6:71:32:a7:b8:7b:db:30:02:
a0:75:fd:9c:91:87:98:7a:3a:58:0a:29:01:ea:ac:
24:4b:3b:fb:7c:d6:36:ff:06:d7:ff:dc:46:fb:20:
d0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:9B:10:29:CE:1B:32:3A:18:3B:3D:79:C7:7A:8C:E9:5D:33:63:6F
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145367.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa9d::/32
Signature Algorithm: sha256WithRSAEncryption
25:7e:4a:f2:a1:a4:82:f7:73:88:19:ab:b3:7b:d8:99:61:2d:
5d:00:eb:fa:c4:d8:94:42:c2:2e:11:cb:e7:df:8d:f7:b1:1a:
17:fd:21:ae:87:cb:ab:4b:a1:04:a3:8a:ea:7f:74:8e:39:eb:
b1:a3:00:76:bf:c3:f9:24:c3:63:5c:7a:af:da:7e:00:47:23:
ae:08:95:f3:ba:6f:3b:f1:f1:db:a2:fc:c7:2f:8e:03:ea:d3:
1a:74:45:64:be:96:35:ca:7c:2d:01:84:ad:78:d0:25:3f:8e:
30:3d:ec:27:7c:ff:1d:3e:a5:9f:66:41:29:8b:c6:7b:d2:53:
0a:4b:24:d7:ed:67:3d:a5:53:57:23:85:0b:d8:55:01:5a:17:
04:81:8e:02:dc:13:53:02:60:d1:f4:4c:a9:56:70:83:e1:d9:
6a:0d:d3:43:6b:38:54:81:46:6a:70:0b:4d:6e:cc:1d:82:b1:
2f:5c:93:61:3b:81:eb:58:4e:e0:92:29:14:bc:e0:d8:ad:7e:
c3:94:04:47:cc:e5:26:80:69:62:d9:34:63:8a:5f:d2:1e:64:
af:5a:f4:3f:6c:39:c1:7b:18:dc:37:5d:d0:9e:33:f8:f1:00:
18:d5:4c:09:88:d5:41:5a:31:e3:72:80:c4:36:76:c3:90:51:
a6:1a:4b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:59 2026 by rpki-client