Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145375.roa
File: AS145375.roa (raw, json)
Hash identifier: rNV9D9BWYX9GNFUK4f0yIVL6zMHSRKYibeu2l5TjCTM=
Subject key identifier: FC:E9:C6:48:84:5D:6F:CA:3F:FB:99:14:18:B8:E3:C7:D7:EC:7C:3F
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4E1FB62384CB7187C1E2BCC4BF5E0BD3A89A014D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145375.roa
Signing time: Tue 26 May 2026 08:52:43 +0000
ROA not before: Tue 26 May 2026 08:47:43 +0000
ROA not after: Tue 25 May 2027 08:52:43 +0000
asID: 145375
IP address blocks: 240a:aaa5::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:1f:b6:23:84:cb:71:87:c1:e2:bc:c4:bf:5e:0b:d3:a8:9a:01:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 08:47:43 2026 GMT
Not After : May 25 08:52:43 2027 GMT
Subject: CN=FCE9C648845D6FCA3FFB991418B8E3C7D7EC7C3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6a:98:e0:44:51:32:f7:2e:84:17:b3:fa:ab:
ed:a8:00:f5:44:7f:f3:b9:bb:6c:65:98:4f:7d:46:
e6:4f:47:3e:f9:07:e3:77:31:e1:5e:d5:ad:ab:c4:
19:f2:df:09:06:3b:d2:9a:62:45:21:e0:e6:6c:14:
0d:ac:56:67:80:2e:f6:7b:50:0f:25:49:86:71:e8:
00:c7:06:a0:4a:0f:c5:9a:a3:66:38:ea:ad:fd:59:
7d:a9:1f:7c:68:18:48:30:a7:f7:33:05:a5:76:c0:
5d:0d:69:e9:dc:6a:9a:67:d4:e9:8f:20:e0:65:1f:
de:09:91:2c:15:38:af:44:66:52:5c:59:b7:5f:35:
a7:e1:71:61:6e:78:6b:01:24:66:e3:aa:f3:1a:8d:
02:54:57:30:10:87:b2:82:ac:d5:c6:51:ff:69:fd:
d2:89:ef:65:bf:f0:3a:97:1e:20:2c:3f:35:16:ba:
f3:ac:d6:1a:17:25:18:06:05:55:08:69:91:f6:bb:
79:f1:57:ca:5e:8d:00:d8:20:1b:ea:7f:2e:fd:fd:
3e:17:6f:22:50:ed:5c:fc:8e:e3:1c:e5:61:77:da:
89:ef:a5:74:d0:ca:c1:1b:34:18:89:bd:71:ee:e3:
42:2a:3b:be:8a:e5:7f:5a:ec:d4:7f:b5:99:a1:d9:
e9:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:E9:C6:48:84:5D:6F:CA:3F:FB:99:14:18:B8:E3:C7:D7:EC:7C:3F
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145375.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aaa5::/32
Signature Algorithm: sha256WithRSAEncryption
04:e4:5e:42:ee:dc:90:99:ab:b0:82:46:4a:34:c6:2f:15:06:
87:80:aa:3d:f1:26:49:8f:18:39:e4:b2:07:f4:8d:24:6f:f7:
8d:0e:91:0c:06:f1:b0:43:d4:e2:a7:e4:fa:36:8d:9d:de:35:
b8:71:09:76:e2:be:80:f0:ac:4a:c7:71:e9:ac:97:1f:52:ef:
4a:ad:a8:ca:c5:4c:28:66:4c:6c:8a:5e:69:f4:f1:dd:22:72:
47:7e:5e:34:c8:ec:08:f1:24:c7:62:c7:58:f4:f4:ce:81:58:
82:2c:28:8e:56:b0:a1:bc:66:00:29:e7:b6:c4:f8:f1:ca:82:
c6:ca:7f:01:20:29:cc:d2:4b:d7:b3:36:0c:c7:39:6f:ef:cf:
4a:16:9a:2b:6d:63:b2:8d:db:cb:cf:d5:00:74:95:7c:f5:ba:
ea:ba:15:b8:8e:2f:a4:1b:4d:59:57:a1:22:6f:5a:aa:22:eb:
c6:be:94:f4:03:90:43:33:c3:53:83:0d:85:33:4b:6b:32:f7:
0a:d5:4d:4e:7b:36:75:5c:0f:07:8b:47:08:e5:d4:37:87:ff:
2c:bd:a2:52:1c:ad:9b:0f:9a:9c:64:b8:d9:98:d4:20:e9:22:
d7:61:77:97:20:0f:a3:4b:93:10:96:62:f0:b0:11:29:7e:73:
d1:98:ea:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:47 2026 by rpki-client