Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145386.roa
File: AS145386.roa (raw, json)
Hash identifier: yvi5iNFmWkf2z/pi4OSryqW9VMNDs2Bn3ePjXI7euxU=
Subject key identifier: 7C:75:5B:BA:6C:07:5F:9A:1B:FE:AE:68:E4:B0:68:64:9E:5B:8A:5E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3C740F711E4948CD0E1269E07B761BCB4C8F429C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145386.roa
Signing time: Fri 22 May 2026 07:24:53 +0000
ROA not before: Fri 22 May 2026 07:19:53 +0000
ROA not after: Fri 21 May 2027 07:24:53 +0000
asID: 145386
IP address blocks: 240a:aab0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:74:0f:71:1e:49:48:cd:0e:12:69:e0:7b:76:1b:cb:4c:8f:42:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:19:53 2026 GMT
Not After : May 21 07:24:53 2027 GMT
Subject: CN=7C755BBA6C075F9A1BFEAE68E4B068649E5B8A5E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:48:44:7d:31:4d:44:bf:82:d5:53:12:90:12:
88:1a:c7:b0:fc:ad:cc:0e:b9:a4:d8:00:25:7f:8f:
40:4f:1f:07:0d:e4:f6:67:59:03:b1:0a:7d:3c:64:
b2:69:e3:ea:df:7e:83:db:78:5f:25:e9:10:1e:ff:
4e:51:dd:a8:fe:4c:70:00:65:22:f9:2b:a7:16:b5:
d5:d8:44:2f:b4:e8:d2:0a:38:1c:06:a8:94:f9:29:
77:70:1e:f0:e2:90:c1:15:27:64:3c:ab:3d:1d:da:
49:dd:b1:54:ab:49:5b:f2:a2:02:cf:41:d9:62:b4:
2e:14:d7:dc:d7:c9:08:b7:5e:1e:e6:74:a6:d0:20:
79:7e:d0:ff:60:d2:94:7c:14:10:df:a0:18:a3:d4:
4d:4e:4f:22:b1:87:46:b9:93:a1:f6:49:a1:f7:80:
56:5b:37:3f:f8:07:de:3a:e6:3c:1b:8f:26:98:a8:
a3:ea:e4:c2:80:09:1a:7d:e8:e7:3c:71:e7:8a:6c:
1d:19:77:ed:b9:bc:8a:a5:7a:96:6d:f4:d0:b3:97:
43:10:77:f5:5e:f2:64:8c:a9:41:d8:3b:9d:73:b1:
88:22:d3:32:3f:cf:99:e8:53:33:7f:fd:8b:9c:75:
bf:d0:48:72:59:75:a4:91:68:07:f6:24:2a:e7:cc:
ed:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:75:5B:BA:6C:07:5F:9A:1B:FE:AE:68:E4:B0:68:64:9E:5B:8A:5E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145386.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aab0::/32
Signature Algorithm: sha256WithRSAEncryption
50:06:e7:19:ea:ac:a4:8e:3a:1b:49:15:ea:e6:16:7e:3c:c9:
70:58:57:4d:9c:5a:26:cd:80:13:fe:19:dc:fb:3c:00:47:13:
43:77:69:1b:4e:ae:6f:0b:3a:86:dc:4d:d3:e4:e7:ac:cc:4d:
28:fa:72:25:9e:73:f6:44:24:95:7f:ca:56:28:e8:a9:31:19:
9f:44:30:77:02:82:6f:80:bc:03:20:a4:67:64:a7:20:91:82:
27:40:47:63:10:1c:c7:79:d0:47:18:20:37:96:d9:fb:ee:57:
e4:bf:d1:cf:65:a7:7b:22:f5:5b:b6:54:7f:e8:de:8f:d1:c7:
e9:2b:46:57:e4:5c:4c:3b:57:4c:53:44:3e:72:6e:4e:dc:a0:
e3:f5:10:74:55:5e:6a:fc:0d:59:6c:58:f2:de:45:7b:76:20:
12:30:17:2c:3f:85:11:77:41:45:84:2c:36:4e:64:1e:a5:a7:
7a:25:0b:c9:35:f5:0c:79:63:f2:31:be:42:03:89:f7:a1:0d:
d8:58:fb:7f:d8:20:0f:4e:25:ec:3f:de:3a:8e:8a:86:db:2a:
ab:35:86:13:b3:d1:8b:11:7c:4b:3a:e5:c2:50:93:96:ff:fa:
b4:ea:28:a3:52:69:8c:10:10:b7:36:fa:0a:d2:d3:99:05:de:
63:60:4e:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:47 2026 by rpki-client