Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145391.roa
File: AS145391.roa (raw, json)
Hash identifier: zg8c0xPDie+6jYiSMgnyP2Jjv/TEpZxillyP+GWMri0=
Subject key identifier: DE:23:0D:28:53:E8:3C:92:74:A1:A2:53:B3:0F:44:8A:70:8A:C2:08
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4ACF1D2F94D639DB993C4267873253C63AEDE280
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145391.roa
Signing time: Fri 22 May 2026 07:09:14 +0000
ROA not before: Fri 22 May 2026 07:04:14 +0000
ROA not after: Fri 21 May 2027 07:09:14 +0000
asID: 145391
IP address blocks: 240a:aab5::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:cf:1d:2f:94:d6:39:db:99:3c:42:67:87:32:53:c6:3a:ed:e2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:04:14 2026 GMT
Not After : May 21 07:09:14 2027 GMT
Subject: CN=DE230D2853E83C9274A1A253B30F448A708AC208
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ab:9d:0e:ad:4f:e4:26:56:13:c5:e6:ac:9c:
86:e0:76:52:71:4f:81:c3:ff:55:9a:ac:38:57:a8:
6a:44:ec:c0:ba:d9:55:16:28:ab:ee:a4:fa:4f:46:
2b:72:01:ce:8a:66:8c:61:51:17:ae:d6:2a:df:65:
22:6e:7a:8b:08:3b:79:53:1f:e0:ff:ee:ba:a6:21:
41:df:05:9e:4f:33:ed:4b:39:ce:42:40:42:e1:67:
1a:9d:d0:57:3d:90:c2:31:f3:0a:d9:cf:7c:b6:d8:
65:4f:1a:9f:0e:53:d4:79:4d:dd:a5:4f:f6:0d:57:
7a:52:78:4f:77:e0:89:bd:3b:ac:76:c4:02:29:45:
e4:e1:6f:61:d4:db:75:ec:5c:f6:ad:51:f3:da:bf:
bd:c0:b5:10:a3:04:ca:ad:6b:5f:a0:95:ac:e2:27:
89:55:07:51:ec:65:78:2c:9f:65:9e:98:f6:f4:72:
70:75:92:f4:3f:c1:dd:72:cf:d1:bc:dd:d1:08:44:
c4:bf:e6:59:0d:21:aa:d5:1f:49:ed:bb:37:df:31:
a0:8a:57:d8:a7:41:67:d3:c4:8a:44:f4:38:b7:80:
a2:5b:87:b2:49:3b:4c:07:de:15:7f:41:2a:fb:0b:
13:f4:52:af:68:cf:29:48:47:89:bf:a8:cb:47:2d:
2e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:23:0D:28:53:E8:3C:92:74:A1:A2:53:B3:0F:44:8A:70:8A:C2:08
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145391.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aab5::/32
Signature Algorithm: sha256WithRSAEncryption
24:ec:a0:67:e4:7b:c7:7b:a3:ea:14:37:77:df:4c:eb:00:52:
53:21:52:35:12:95:fa:ba:a0:86:1a:b2:a3:17:b5:20:6c:7a:
56:05:2d:dd:50:b5:fb:aa:1a:56:bd:de:cb:16:01:d7:3c:a1:
2b:04:cc:39:34:02:07:ba:db:08:9a:2f:a2:ba:f5:e2:5d:b0:
74:b7:cf:35:c1:54:df:77:f8:d4:88:c9:5b:4e:51:ba:43:75:
8e:2f:13:8d:fa:39:d2:cd:2f:4c:99:ac:28:cf:15:91:4b:4b:
db:a8:a4:b4:0c:85:6a:d5:e7:ec:c5:00:46:b2:fc:64:6f:c4:
2b:3b:52:24:25:36:90:c2:53:bf:54:fb:37:2c:c9:6e:81:2a:
30:72:9d:22:d7:f8:b0:7b:d1:a9:03:4f:b2:2e:d1:26:d9:51:
fd:a7:94:24:80:d7:f5:17:ce:08:37:01:52:86:cc:19:2c:b8:
c0:0c:4c:68:ff:11:e9:3b:15:13:51:58:bb:03:0c:60:cc:30:
97:28:ff:78:c7:f7:e5:f3:69:e3:b5:6a:dd:d8:61:89:12:95:
a9:b0:b5:a5:9a:ec:ac:a8:1a:4f:e2:0f:29:50:00:2c:ed:0b:
6f:88:d6:e2:5b:84:4a:79:92:95:19:f0:d2:71:de:4e:d0:d1:
50:20:a1:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:58 2026 by rpki-client