Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145372.roa
File: AS145372.roa (raw, json)
Hash identifier: /xAMXoHxuP05BJI9YS+VosqTzEanpw+x85VvLXaiUs0=
Subject key identifier: E0:1B:E4:EC:F3:19:A1:4A:84:EF:03:4C:67:41:01:82:A1:90:6B:58
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3B611E4AACA0FD64EE1935A0E8418A6F28938448
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145372.roa
Signing time: Tue 26 May 2026 03:16:41 +0000
ROA not before: Tue 26 May 2026 03:11:41 +0000
ROA not after: Tue 25 May 2027 03:16:41 +0000
asID: 145372
IP address blocks: 240a:aaa2::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:61:1e:4a:ac:a0:fd:64:ee:19:35:a0:e8:41:8a:6f:28:93:84:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:11:41 2026 GMT
Not After : May 25 03:16:41 2027 GMT
Subject: CN=E01BE4ECF319A14A84EF034C67410182A1906B58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:46:64:64:15:5a:2f:37:65:60:cf:dc:80:42:
64:66:5a:b1:bc:9f:48:95:f7:a6:a1:fa:05:bb:b2:
8f:13:11:30:19:72:d3:22:d7:01:27:e9:16:9f:15:
69:7b:2a:77:5d:aa:41:39:ff:c6:d1:bd:7d:68:d8:
28:60:d8:c6:94:e9:16:0f:0d:2c:b4:8b:31:d4:9c:
aa:69:23:25:30:ff:68:1a:a1:5f:4b:c9:65:28:d2:
2a:6d:7f:58:54:a3:cc:41:e2:51:db:2c:e6:f2:86:
32:7b:83:91:70:83:34:18:b9:d6:7a:af:00:5c:1b:
18:28:d8:c3:6c:61:57:d7:9d:2f:ec:e3:4f:5d:4a:
29:f5:8f:37:f4:00:29:bf:94:72:a0:5b:df:ff:c8:
70:4a:03:ca:62:ed:f6:16:d9:b9:f8:31:57:d1:00:
80:5f:ca:e6:b1:d5:4b:a3:bc:ab:f9:d6:f2:17:d3:
3e:f6:5f:e4:5b:20:2b:2b:be:85:8c:ef:f3:6e:c2:
12:13:8a:55:4c:d4:1f:a8:c0:5e:a7:d7:7b:aa:2b:
20:45:78:d8:27:75:86:ba:0c:c3:f3:6f:56:49:0a:
53:d1:ab:0d:65:27:be:ca:b3:25:26:5e:74:dd:b2:
f8:1a:ef:2e:8e:ca:ac:07:4b:b7:a4:59:29:ad:bd:
88:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:1B:E4:EC:F3:19:A1:4A:84:EF:03:4C:67:41:01:82:A1:90:6B:58
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145372.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aaa2::/32
Signature Algorithm: sha256WithRSAEncryption
58:1a:ca:d7:7e:0d:31:1a:d4:e0:c7:b4:31:f9:d2:ed:04:28:
94:b9:7e:5d:32:96:18:43:3c:58:24:17:2f:4b:53:21:0f:a2:
76:f5:88:ee:16:61:02:d6:4f:61:5a:4b:91:ef:06:91:26:5d:
78:d9:03:e3:3f:e7:75:56:b2:bc:f2:57:1a:8b:40:c0:fb:b6:
33:6d:60:89:64:02:9c:e0:48:1f:cc:2c:6d:3d:3f:2d:4d:59:
c7:28:54:f5:9a:a9:57:8f:63:2c:19:b2:9d:b1:df:78:88:ad:
23:2b:ac:b5:7f:51:fe:07:c6:e3:c0:7d:74:b6:01:b9:04:51:
16:fb:0d:73:ec:7a:ff:79:b6:ab:14:07:c7:64:f3:cb:08:de:
a9:5e:ff:d5:b6:a8:ba:9f:f1:a4:ef:8c:14:82:8b:b3:77:6f:
24:3f:3c:4a:f9:63:0d:36:fa:85:38:c4:3d:5a:ad:0c:55:da:
82:79:8e:43:f2:0a:fe:60:9d:20:c8:3c:db:a5:91:d0:9f:dc:
8f:55:0e:0e:81:e3:03:a5:a8:01:4c:60:05:eb:37:94:74:35:
bd:01:f2:1b:f5:d1:c9:2f:6a:88:04:00:a9:a0:61:ce:57:05:
b4:df:63:03:78:4c:dd:30:64:51:a6:7f:dc:66:14:4e:d8:aa:
71:fe:34:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:51 2026 by rpki-client