Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145393.roa
File: AS145393.roa (raw, json)
Hash identifier: MEUNngvFcOeuhMMqvMqO07vjAr+0C/3LtcZ+YLtgT8A=
Subject key identifier: 40:09:4C:02:2E:EE:0B:C7:62:E6:2B:87:C9:A4:FF:70:3D:5E:F2:3C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6B2F731A2F84AC6A546A349E387A8A2258120D4D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145393.roa
Signing time: Fri 22 May 2026 04:26:48 +0000
ROA not before: Fri 22 May 2026 04:21:48 +0000
ROA not after: Fri 21 May 2027 04:26:48 +0000
asID: 145393
IP address blocks: 240a:aab7::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:2f:73:1a:2f:84:ac:6a:54:6a:34:9e:38:7a:8a:22:58:12:0d:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:21:48 2026 GMT
Not After : May 21 04:26:48 2027 GMT
Subject: CN=40094C022EEE0BC762E62B87C9A4FF703D5EF23C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c3:66:c4:a1:74:88:fb:96:d2:b9:08:16:ff:
b6:68:f3:c6:92:a5:7f:c3:e4:19:50:c1:f7:cd:11:
cc:b7:96:23:28:a1:e9:a9:d3:55:ab:0b:21:fb:2d:
d1:0c:56:55:13:5c:5d:e8:23:5f:8d:a6:c1:0c:f7:
3b:59:e7:ce:d3:cd:e5:fc:22:e7:90:d1:c4:11:89:
69:57:13:fc:91:22:97:51:f9:07:0f:85:71:d8:d3:
34:18:61:ce:50:70:f1:a6:62:50:27:25:61:6b:d4:
e4:1c:2f:bb:80:3a:76:26:41:8c:bd:ba:08:d3:8c:
1e:a8:8d:57:c8:1b:23:cd:25:03:87:ce:b0:2a:45:
11:99:fc:fe:7c:a4:a7:88:ea:3d:78:58:5d:ff:6c:
c0:9c:ba:80:84:06:ba:62:4e:b7:3a:4e:08:82:37:
4d:0c:aa:c1:25:34:f5:6e:65:19:d2:03:c8:d0:65:
00:e3:62:6b:48:4f:da:a9:45:c3:b7:b2:84:48:15:
17:b6:50:18:43:2f:ea:cf:bd:a9:69:36:db:3e:c5:
98:78:4c:e0:e2:2e:08:1f:2d:2d:a0:d0:16:f4:75:
0b:11:35:01:c9:d3:8f:fa:f8:20:6e:18:ed:b7:17:
01:b3:8c:57:16:d4:1f:71:81:31:c4:ef:42:dc:f4:
77:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:09:4C:02:2E:EE:0B:C7:62:E6:2B:87:C9:A4:FF:70:3D:5E:F2:3C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145393.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aab7::/32
Signature Algorithm: sha256WithRSAEncryption
2e:af:d7:56:ad:a6:81:04:74:18:77:fa:b6:b6:37:4b:40:e0:
83:14:76:ce:b2:d9:e1:90:51:87:ad:ec:8e:d8:16:6c:b6:95:
2c:d9:b2:09:f8:38:23:a3:13:5a:d5:b9:01:13:69:c6:66:ca:
32:43:92:cd:43:56:ff:a4:82:0d:5e:27:c5:05:f6:52:a8:7e:
55:1b:0e:28:1c:10:96:82:53:95:16:30:3a:8e:08:21:96:97:
4c:f7:7b:2d:f2:2f:6c:58:37:10:5d:93:c4:55:69:43:59:67:
08:f0:b8:3f:af:a8:bc:33:52:1f:46:56:b2:f7:ac:22:41:11:
f1:cc:85:71:16:7b:9c:80:5a:6e:29:da:9a:a8:5b:09:c7:40:
65:d5:f5:9f:df:ba:0e:2f:0f:1b:33:be:0c:ed:5e:2d:4d:04:
f0:ee:6a:59:d3:1f:b6:a0:a5:5a:47:25:66:c3:be:ed:ed:b6:
3d:bb:76:e6:d5:58:60:8e:8a:1e:99:ee:9a:1f:be:6a:54:b6:
37:97:f6:fb:06:e8:2b:de:45:af:d6:07:60:e2:d1:35:e9:2f:
7a:92:d2:d6:6a:bd:38:8a:a1:dd:31:20:2f:74:4a:f6:33:19:
73:e3:09:21:ec:a7:19:87:f9:7a:dd:77:87:28:21:d9:d7:7a:
75:e6:31:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:17 2026 by rpki-client