Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145397.roa
File: AS145397.roa (raw, json)
Hash identifier: eqoFeo7tySmBGUnOTvmLa2h6iWsmgtBNucoRMMxCHFU=
Subject key identifier: D9:28:6B:B9:FE:09:FF:F5:55:95:FF:50:4F:14:08:4D:58:44:F1:7E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 54F3646E8729351F5AE7A26029120EBC91A77567
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145397.roa
Signing time: Tue 26 May 2026 08:52:43 +0000
ROA not before: Tue 26 May 2026 08:47:43 +0000
ROA not after: Tue 25 May 2027 08:52:43 +0000
asID: 145397
IP address blocks: 240a:aabb::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:f3:64:6e:87:29:35:1f:5a:e7:a2:60:29:12:0e:bc:91:a7:75:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 08:47:43 2026 GMT
Not After : May 25 08:52:43 2027 GMT
Subject: CN=D9286BB9FE09FFF55595FF504F14084D5844F17E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:46:d6:08:d6:03:a2:ae:d6:7f:81:0f:71:50:
fa:a1:de:d5:5b:34:29:fc:10:c7:20:8d:dd:f6:19:
a3:e4:2b:57:60:62:bb:97:5d:93:75:03:13:3a:a0:
5d:a7:60:2d:8a:aa:3c:79:48:55:f2:80:bb:b6:ed:
af:22:88:48:58:52:21:71:33:b1:7d:d3:05:f9:4c:
d4:04:77:34:e8:16:32:f5:e3:f9:72:66:0f:04:cc:
60:37:89:2a:9b:73:06:21:d3:54:9c:80:c0:21:37:
d9:16:86:66:59:83:78:a9:dd:a9:83:a9:38:c7:ec:
07:6b:6a:a2:46:28:6e:99:b6:dc:40:a5:6a:8d:4a:
4a:fe:4b:82:7e:55:2e:e1:57:b8:32:52:5e:a5:a9:
7a:de:5b:bf:49:41:34:39:0e:83:1b:5d:e3:28:4d:
d5:06:bc:db:42:c3:17:f4:7e:0a:54:2c:0c:4a:9b:
4f:59:91:71:bc:80:e6:6d:7a:ec:74:47:e8:a2:33:
ef:f4:34:82:bb:94:0f:fa:3e:a8:f0:8c:ba:04:aa:
66:4c:5c:02:39:08:3b:88:e1:79:7e:f4:83:ee:f6:
f6:c0:a0:46:40:ac:6b:5f:9b:88:fe:14:40:7b:1f:
b0:1f:89:8e:b5:20:a4:a1:28:b3:23:ea:c6:60:94:
c8:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:28:6B:B9:FE:09:FF:F5:55:95:FF:50:4F:14:08:4D:58:44:F1:7E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145397.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aabb::/32
Signature Algorithm: sha256WithRSAEncryption
50:2d:15:3f:1b:ae:d5:fe:b7:5a:c6:8d:99:2b:9f:fe:79:ed:
ab:60:2f:0f:fe:14:e6:4a:98:b6:c2:fd:79:a1:82:a9:c5:95:
ff:87:2e:75:63:b5:1e:e7:a0:9c:e3:73:48:d8:dc:68:cb:6e:
04:5e:14:d7:3c:c1:64:f1:89:a4:40:eb:7d:84:4b:17:64:63:
25:66:ac:b5:93:b0:f7:e9:e0:67:98:12:a1:97:17:3b:c1:b1:
5c:21:9f:c7:8d:c4:07:43:0e:01:0c:e4:80:21:d3:a0:cc:23:
26:a2:2d:7b:47:19:b5:b1:e8:3b:a5:de:a7:9d:18:fc:d1:76:
1f:07:1b:b2:e1:65:9d:3e:32:3b:20:e8:3f:65:e3:38:d8:cc:
ba:83:7c:5f:8b:f3:65:12:f2:01:ca:63:0b:48:2f:ce:40:7c:
29:f3:e0:3b:f4:83:65:fc:59:93:49:4d:dd:60:ed:87:33:b3:
78:02:57:ce:6d:82:76:7e:d2:a3:51:39:20:e4:ca:68:73:f8:
c1:35:5e:e9:2a:3a:ed:a7:bd:b8:94:70:7b:4f:de:4e:bd:aa:
04:61:c0:42:54:d6:8a:be:ee:b2:68:cd:91:e2:7c:3b:16:80:
0c:07:98:6d:9e:d5:8a:d8:87:9b:55:50:cc:93:4f:07:fb:c6:
00:90:0c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:54 2026 by rpki-client