Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145373.roa
File: AS145373.roa (raw, json)
Hash identifier: 859v9XLGAr2pKYhi5v0n16nRnXTIe9ooDmb31ndNHlQ=
Subject key identifier: 72:ED:AA:10:53:4C:DC:73:30:93:F6:E6:BD:4C:83:B2:57:C2:0E:24
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2D52BB164B667EBA8FE0719EDF757F17584B81A5
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145373.roa
Signing time: Tue 26 May 2026 06:12:26 +0000
ROA not before: Tue 26 May 2026 06:07:26 +0000
ROA not after: Tue 25 May 2027 06:12:26 +0000
asID: 145373
IP address blocks: 240a:aaa3::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:52:bb:16:4b:66:7e:ba:8f:e0:71:9e:df:75:7f:17:58:4b:81:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:07:26 2026 GMT
Not After : May 25 06:12:26 2027 GMT
Subject: CN=72EDAA10534CDC733093F6E6BD4C83B257C20E24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4a:4f:b5:0b:25:63:f3:34:ab:9c:d9:67:c0:
30:3e:55:69:6f:90:5e:c4:89:32:0f:7e:a2:03:78:
bf:0f:9d:2e:25:b5:b0:70:a7:b8:f1:f5:7f:59:4a:
43:4d:34:1c:99:78:0c:04:9d:53:fc:85:45:34:34:
f6:7d:ea:5b:96:a4:42:09:1a:34:dc:95:c0:4f:c6:
3c:76:b4:84:25:a1:ed:64:3f:10:98:46:0b:50:bb:
61:9f:2a:18:1e:d1:eb:71:12:e9:1c:e7:70:1c:50:
fa:5f:39:07:a5:62:21:45:a4:fd:d6:b9:9e:13:a5:
ba:99:ff:84:e1:6b:15:bd:1c:3d:d7:cd:8a:6c:0b:
a2:30:c7:d0:fc:71:4f:32:a1:5d:c3:12:23:84:25:
4c:5e:ba:3e:59:ff:24:ab:23:84:70:95:a3:d8:f5:
5d:cf:6a:8b:92:42:26:0c:db:f9:22:0a:fb:30:cc:
07:16:b0:8d:d1:c2:aa:25:fb:5b:cd:bb:e3:d2:1f:
3e:b8:fd:d6:c2:6e:21:08:d3:bd:08:64:ab:5d:7b:
d7:4d:91:c7:5a:fa:7f:fd:b8:98:5f:2e:b5:ff:7b:
0d:8b:f8:74:f2:e9:a2:03:96:a5:a4:a9:5a:87:c3:
09:21:27:9c:ef:8b:71:96:24:80:d6:5f:40:83:1c:
76:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:ED:AA:10:53:4C:DC:73:30:93:F6:E6:BD:4C:83:B2:57:C2:0E:24
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145373.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aaa3::/32
Signature Algorithm: sha256WithRSAEncryption
0a:82:2e:8e:10:ad:f5:5c:89:17:ba:1a:58:a9:68:91:af:ac:
d2:b8:f6:64:46:30:1a:fd:0a:28:99:dd:b7:f4:29:cc:da:0d:
9d:21:7c:75:27:5a:00:fd:fe:b7:b4:0b:a1:03:6d:20:19:50:
7e:5c:13:24:da:23:b9:5d:ce:09:a1:12:c4:6a:ab:75:2b:28:
8a:c8:0c:bd:70:2a:b7:fb:23:60:1a:d8:2f:27:fe:e7:b5:70:
80:da:7d:c2:0c:da:70:4b:18:1d:3c:0a:3e:64:e8:3a:fe:b1:
74:92:0f:69:07:d0:19:e3:8e:8f:8d:9d:2e:ce:72:fa:1e:34:
77:b1:2d:5a:0b:93:1d:81:ed:6f:b8:46:93:90:bb:5c:ab:d1:
e9:76:5d:e1:6f:30:60:93:ec:7e:69:65:03:dc:8e:6a:80:b1:
a9:97:6f:7c:77:d4:1c:83:d0:48:94:dc:7e:8a:83:2f:c0:02:
30:4c:89:48:06:eb:05:75:e6:68:e0:d6:f7:28:43:c3:19:84:
db:92:9c:82:af:02:c5:c5:5f:b0:23:97:45:69:5f:5a:77:17:
7f:69:9e:0b:21:a7:2d:cb:3f:9a:8c:7f:93:db:a9:9d:99:c2:
8c:d6:02:16:6d:fc:9c:3a:bc:6e:5b:c9:a7:8e:f5:e3:7a:6a:
c1:96:74:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:19 2026 by rpki-client