Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145380.roa
File: AS145380.roa (raw, json)
Hash identifier: JwvUoDGiYpYrC7rgjWOgjaqxjR+CmqwNsYOvXVpwkfw=
Subject key identifier: 63:09:94:02:2F:75:35:CA:AB:C7:DC:76:E7:45:3D:43:EB:36:AE:22
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 43A8ECA63791B86A35293B0718A3C88E82FF3D33
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145380.roa
Signing time: Mon 25 May 2026 01:51:31 +0000
ROA not before: Mon 25 May 2026 01:46:31 +0000
ROA not after: Mon 24 May 2027 01:51:31 +0000
asID: 145380
IP address blocks: 240a:aaaa::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:a8:ec:a6:37:91:b8:6a:35:29:3b:07:18:a3:c8:8e:82:ff:3d:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:46:31 2026 GMT
Not After : May 24 01:51:31 2027 GMT
Subject: CN=630994022F7535CAABC7DC76E7453D43EB36AE22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:5b:c6:77:f1:3f:7e:d4:3c:98:74:f0:a2:d6:
c1:13:f6:52:9a:37:f5:ae:af:4d:af:dd:ad:e0:00:
b5:67:67:69:c0:cc:ed:aa:69:02:95:27:7b:97:bd:
60:74:5c:10:de:a3:f9:97:b3:11:96:49:02:54:14:
f9:dd:a2:67:83:57:e2:27:de:2d:27:32:f7:bb:83:
3e:8a:94:b1:da:f4:b4:0e:d2:4d:22:0d:1e:98:98:
b3:45:ec:db:4e:bd:22:cd:65:4e:97:1a:e9:fd:3a:
36:0e:8b:98:d7:0a:0c:bc:da:51:d8:4a:35:28:8a:
44:82:c5:b1:08:bb:5f:0f:04:d7:71:57:d2:1c:30:
db:60:b3:47:8a:42:22:84:d7:fc:67:fb:b9:56:20:
d0:45:61:86:f7:76:1c:fa:83:b2:31:4e:97:b2:4c:
c0:bf:ab:0c:6e:84:5c:dc:6a:18:60:3f:d6:1d:a0:
9d:3f:1a:c0:6b:48:99:df:76:d5:69:2b:f9:6c:a5:
43:be:76:fb:54:78:7e:eb:28:c6:13:3f:ad:5d:41:
54:c6:29:05:24:15:e1:47:5d:70:d8:6d:c0:f8:29:
d6:47:66:66:e2:34:c4:57:2c:88:b3:85:e1:08:f7:
ba:a7:52:62:8a:89:f4:34:8e:52:40:a0:cd:8b:e2:
f5:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:09:94:02:2F:75:35:CA:AB:C7:DC:76:E7:45:3D:43:EB:36:AE:22
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145380.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aaaa::/32
Signature Algorithm: sha256WithRSAEncryption
4e:80:ea:ed:93:37:97:41:2a:82:c6:6f:20:40:4f:4e:38:29:
32:6b:2a:69:e0:42:73:0b:5a:e6:70:08:c2:f5:84:15:ce:99:
97:2a:ed:63:b9:3e:9a:17:c6:85:a5:63:f6:83:63:03:6e:fe:
81:70:9d:2b:3d:33:86:2b:7c:81:aa:a8:0c:46:a4:f0:86:6e:
99:bc:f8:18:5a:d2:fe:ef:31:f4:67:a1:d1:7a:20:69:ba:2f:
89:e0:72:21:0d:3c:76:70:0e:7d:3d:d3:fb:bb:e0:d0:38:76:
18:bb:38:92:a9:f9:0b:36:6e:03:32:0a:42:c9:79:e0:08:36:
24:52:9b:88:9c:29:25:9d:9d:a5:2c:1f:0a:2b:c5:8d:b4:a1:
bd:26:da:28:02:54:a6:20:e8:7c:d9:bd:f1:d8:64:7d:e1:43:
63:07:28:21:81:6e:00:26:28:db:fd:8c:45:d0:58:42:94:26:
40:75:d4:98:90:e6:38:53:7e:1b:43:5b:7a:32:5e:6d:ef:d2:
98:08:e7:a3:6f:29:dc:bf:40:a4:f1:7c:ba:4f:00:19:93:68:
c5:ef:f5:58:52:5d:a7:6d:f9:fe:25:6b:a6:82:41:93:7e:8a:
27:cf:9c:49:ea:a9:a5:d6:46:7d:c4:f0:2d:1a:6d:9b:34:42:
88:ab:f1:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:44 2026 by rpki-client