Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145376.roa
File: AS145376.roa (raw, json)
Hash identifier: QIt/tGzn07NTW25s6/LIn80LsvPPqJW9EzDhMbRtNGs=
Subject key identifier: 88:6B:9E:92:3A:65:96:69:78:08:33:BB:DF:A3:69:F2:B8:63:08:82
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 30188B2EF55C459109BD587495E7B48AC88C1D01
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145376.roa
Signing time: Fri 22 May 2026 06:58:29 +0000
ROA not before: Fri 22 May 2026 06:53:29 +0000
ROA not after: Fri 21 May 2027 06:58:29 +0000
asID: 145376
IP address blocks: 240a:aaa6::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:18:8b:2e:f5:5c:45:91:09:bd:58:74:95:e7:b4:8a:c8:8c:1d:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:29 2026 GMT
Not After : May 21 06:58:29 2027 GMT
Subject: CN=886B9E923A659669780833BBDFA369F2B8630882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:7b:32:2a:6c:5d:f9:a5:fd:97:21:63:38:84:
9f:28:aa:c2:0e:39:a0:09:9c:ff:cd:5c:d0:0e:0e:
37:97:68:74:76:42:68:9d:2c:5b:68:2e:93:b6:f3:
e5:f0:7f:9d:c6:30:c0:64:39:a2:6f:ef:8b:1d:dc:
c9:a1:e6:8a:4e:18:56:e2:eb:5c:a1:4e:80:b3:4d:
6d:8b:0d:07:ec:71:53:e0:4c:98:fe:a4:be:13:22:
fd:b8:17:87:3d:2b:37:06:6d:3f:23:d4:46:e9:cb:
4d:03:bb:db:1b:99:f5:24:8a:68:00:a6:49:66:9e:
15:e7:05:a5:03:01:2a:dd:8a:5c:44:ac:c1:23:89:
fa:7e:a1:0b:55:ed:6d:2b:2c:cc:3b:aa:1a:ae:7e:
7b:5d:16:5f:b2:c7:8a:f0:b0:04:c0:a3:61:3d:6d:
cf:77:00:23:5d:55:44:d0:47:c5:e9:25:6e:53:fa:
4a:0b:10:c1:20:4c:be:8c:40:d8:05:66:53:de:eb:
74:72:24:db:40:f2:f3:2d:6e:5e:be:57:f4:82:9b:
7f:cf:4d:94:e2:48:36:10:6f:e0:dc:56:26:17:ae:
28:13:9f:7b:c7:d5:33:b7:3b:47:46:1e:8e:4d:90:
f7:14:b5:2e:6b:fb:7c:9d:0c:aa:cc:0b:f8:c9:3d:
8d:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:6B:9E:92:3A:65:96:69:78:08:33:BB:DF:A3:69:F2:B8:63:08:82
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145376.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aaa6::/32
Signature Algorithm: sha256WithRSAEncryption
b1:d4:fe:b3:97:7f:59:bf:1b:81:ba:e3:57:dc:01:90:ac:a5:
ae:a3:12:1e:5f:ca:f2:19:83:db:aa:42:f8:b8:4f:12:0d:1b:
53:0e:04:80:df:c0:19:23:d1:b2:8b:19:ae:6c:42:e9:33:c9:
b5:d3:75:7c:4e:1e:39:c0:df:6d:ee:b2:03:b9:ce:77:41:f4:
7e:0e:6c:de:37:3d:ac:3d:3a:d1:09:f8:98:6c:87:7d:0f:79:
f5:b2:42:d9:38:5b:39:d1:42:71:a7:7a:a9:4e:9a:e3:d4:f7:
a8:72:83:64:78:c8:14:31:e5:c1:e0:85:80:1a:27:db:1b:14:
e8:aa:51:7c:1a:e5:c5:9e:ce:c4:70:e8:fe:42:75:15:80:f4:
0e:b0:9a:c8:fa:5c:ed:2d:58:97:af:9c:86:dd:4f:18:26:e1:
2a:5a:31:ea:b4:cb:da:cc:cb:f1:4b:43:76:3c:b7:3d:30:9a:
4b:aa:4b:ea:06:15:c4:06:45:f4:4f:a9:3b:ac:c7:32:61:65:
49:94:2e:00:4c:a3:3f:50:5b:b7:f8:99:d7:2e:b4:20:f4:04:
f0:2b:9f:5a:b3:ff:3d:67:c1:0f:e1:ea:2b:24:8b:9f:27:d7:
8f:d7:c4:c3:54:8f:9c:4f:68:2d:aa:84:b8:42:e8:0f:92:8f:
7e:0c:e0:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:51 2026 by rpki-client