Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145394.roa
File: AS145394.roa (raw, json)
Hash identifier: DPegDtQTRopxBQBZ4s9kXAjQYEl1GX9020r0dNT9lyg=
Subject key identifier: 2F:6B:54:6A:B8:53:3A:83:3C:0E:9C:06:7B:91:52:DD:7A:43:CB:DA
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2CA8214214530558C2438121D5235BBFC707A581
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145394.roa
Signing time: Fri 22 May 2026 01:50:37 +0000
ROA not before: Fri 22 May 2026 01:45:37 +0000
ROA not after: Fri 21 May 2027 01:50:37 +0000
asID: 145394
IP address blocks: 240a:aab8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:a8:21:42:14:53:05:58:c2:43:81:21:d5:23:5b:bf:c7:07:a5:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:37 2026 GMT
Not After : May 21 01:50:37 2027 GMT
Subject: CN=2F6B546AB8533A833C0E9C067B9152DD7A43CBDA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:76:f6:21:7b:e9:02:c1:da:75:75:fb:8c:f0:
fb:19:a6:8e:89:3a:8c:7f:32:a0:57:2f:41:da:98:
5e:04:72:e8:7a:15:a7:a7:9d:d1:ab:83:ef:c2:97:
f0:35:58:02:76:f0:3e:51:00:19:07:0d:f2:19:dc:
52:98:0e:83:5c:be:81:d3:3b:09:ea:08:fb:e4:53:
32:46:31:8d:ec:7c:19:ef:7d:73:bc:51:07:46:87:
d5:8b:71:83:c2:43:ea:45:95:93:a0:26:cc:36:78:
95:2a:a9:02:b3:39:33:22:11:43:19:09:af:85:08:
3b:0a:ce:f4:b6:2c:75:56:6e:e3:d2:7c:ea:e1:f0:
e4:f4:09:1c:32:81:4b:84:63:ae:74:d1:4f:b8:dd:
f4:b3:ed:0b:79:94:54:d4:fb:5c:c4:dd:d1:4d:c4:
41:fe:b1:80:08:9b:06:d6:c8:63:8d:45:8b:11:25:
cc:0f:7d:94:33:ed:d1:1d:85:20:61:5f:1b:5f:a2:
9f:9e:86:77:5e:ee:a5:13:66:c2:16:db:97:96:86:
90:5c:fd:ad:29:26:fb:5f:dc:ff:49:2e:49:2b:a9:
fb:80:ed:d9:91:da:d0:bf:92:3c:6f:ac:57:d7:84:
6e:0d:d0:ff:6e:26:d7:f2:5f:d1:00:a3:86:4c:89:
6d:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:6B:54:6A:B8:53:3A:83:3C:0E:9C:06:7B:91:52:DD:7A:43:CB:DA
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145394.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aab8::/32
Signature Algorithm: sha256WithRSAEncryption
af:e3:a0:ae:b7:17:d8:66:c3:1a:33:16:d3:33:e2:9c:f6:59:
5e:96:78:5a:d8:ea:4e:a7:c7:8c:fb:71:f1:60:f1:3a:07:f3:
e2:9c:b4:0a:a7:a9:ca:6c:03:b8:7b:68:b6:1d:fa:3d:f4:5c:
30:7f:46:9c:01:28:ac:5b:cf:82:8b:36:30:16:ab:cb:f5:63:
36:03:bf:fa:4e:7b:b2:1f:2a:3e:7d:2b:db:1e:0c:d7:86:8a:
51:62:9f:07:46:b4:f2:36:10:97:2f:3d:8e:12:47:5e:a6:7c:
ac:68:36:a9:68:b8:24:a6:c2:d2:a5:6d:80:9d:bc:40:51:45:
ed:1a:34:08:b6:ec:43:88:7a:9f:72:e5:a9:47:62:ec:2b:08:
03:2e:08:14:eb:75:e1:44:82:70:1d:d3:19:c3:d6:40:f0:fa:
3e:63:00:b9:c9:79:54:b9:b6:2b:b2:ca:ae:b1:ff:b7:ef:70:
4b:f4:98:33:6d:b6:ff:b1:c8:b6:70:8c:b4:36:71:7c:a6:92:
9e:60:61:35:a4:6b:80:51:a2:57:1a:b4:67:b6:f8:52:42:08:
73:b0:cc:e4:0b:67:13:cc:fa:9d:e0:c4:dc:0a:c5:74:d8:11:
b6:0d:7a:15:06:0a:9c:7a:3b:40:97:3d:69:5f:ab:e5:bd:71:
5b:a2:30:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:36 2026 by rpki-client