Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145389.roa
File: AS145389.roa (raw, json)
Hash identifier: G8q/yAUA8YJIhdtQsVHvwRjAfV2B+Kebhj2NF2Y84MM=
Subject key identifier: 47:48:E5:B0:5D:AD:C3:24:AA:0D:01:0D:47:EB:A4:C8:87:79:F1:BB
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 33C10897BB01CE256A686D67B6E15A58FB68A5E7
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145389.roa
Signing time: Fri 22 May 2026 04:26:42 +0000
ROA not before: Fri 22 May 2026 04:21:42 +0000
ROA not after: Fri 21 May 2027 04:26:42 +0000
asID: 145389
IP address blocks: 240a:aab3::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:c1:08:97:bb:01:ce:25:6a:68:6d:67:b6:e1:5a:58:fb:68:a5:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:21:42 2026 GMT
Not After : May 21 04:26:42 2027 GMT
Subject: CN=4748E5B05DADC324AA0D010D47EBA4C88779F1BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:df:c2:f0:43:07:53:60:15:e6:f4:d2:2b:74:
8e:d6:26:56:82:99:1f:37:ce:62:d6:a2:5c:77:10:
10:5b:1d:a0:f7:60:c0:bd:72:1f:81:f9:d7:bd:eb:
59:61:78:2c:4f:47:ce:69:79:69:04:8f:07:a6:e1:
bb:9c:eb:0b:01:ee:36:f0:d6:fc:ba:96:90:fe:e4:
3a:00:f4:37:91:f4:8d:5e:25:ee:70:7b:21:14:c1:
f1:d3:b4:aa:33:66:12:13:80:97:32:da:31:fa:6c:
d2:b0:21:c3:ed:05:c8:11:cd:80:72:86:b6:c5:ed:
f9:30:56:86:58:48:22:90:00:30:cc:94:49:b2:a5:
4c:5e:3d:28:d4:e5:cc:e0:fe:e5:5d:57:86:e8:34:
53:60:04:b1:54:54:eb:91:d1:b7:21:ff:fb:7b:ca:
0b:6a:47:b8:55:39:16:e0:9a:4e:19:0a:37:1f:bd:
b0:8f:bd:d0:94:db:cb:26:fb:f0:42:d8:07:ae:84:
a8:14:8c:a7:81:48:bc:01:a9:c0:fc:fe:2c:ed:90:
12:02:91:df:5d:50:3a:d3:87:6f:5b:5b:74:26:a7:
bf:03:1d:42:7a:c2:3c:6d:f4:e4:1f:00:19:fd:dc:
39:8f:92:30:28:4d:46:a8:3f:49:fd:d2:e9:ba:b3:
ba:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:48:E5:B0:5D:AD:C3:24:AA:0D:01:0D:47:EB:A4:C8:87:79:F1:BB
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145389.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aab3::/32
Signature Algorithm: sha256WithRSAEncryption
8a:a2:e4:51:0c:cb:d6:6d:bb:d1:8d:e4:d6:39:cc:01:5a:d1:
20:6c:cb:93:53:b3:58:66:71:a0:e2:ad:a5:52:e7:98:e7:61:
8b:5e:ca:b4:23:fc:d6:df:69:0d:3a:ec:c7:f7:6c:48:4f:95:
96:f2:e7:9d:6e:b8:a7:e0:b1:bf:03:5d:d7:3c:7b:65:31:b7:
f7:ab:95:c2:1b:b9:71:3a:a3:ce:62:0a:e6:81:0f:a7:87:18:
8a:49:e2:9d:45:a4:be:e6:87:95:6c:c9:6a:f4:7d:37:19:a0:
b4:cc:79:e3:d3:25:75:67:a9:2f:d0:93:ca:aa:95:1f:27:7a:
50:f1:0e:12:43:2c:47:ee:3e:9f:c8:53:c5:e0:d2:98:29:40:
cf:3b:dc:18:8a:96:23:33:99:33:0d:e8:eb:1d:07:82:37:ef:
5a:09:45:16:22:96:59:10:88:e0:e6:91:8a:10:a5:4f:b9:c4:
ec:f3:a1:49:b8:af:da:11:03:13:a1:38:93:c9:f6:16:b3:57:
37:15:a7:5d:bf:ab:63:ce:d2:5c:d3:b8:ef:87:be:ba:d3:08:
41:31:09:2e:36:df:b7:38:ee:bc:8e:e3:f3:66:33:26:cd:41:
1e:3f:27:58:0c:2f:bd:0a:2f:ed:48:6b:9c:66:ce:00:66:ed:
6b:83:4e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:49 2026 by rpki-client