Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145399.roa
File: AS145399.roa (raw, json)
Hash identifier: Zz1aqS/VVYiKBK2PzIAN2BVz4UKA2muWS+GWCzLjzbU=
Subject key identifier: 3D:1E:D1:20:4D:2C:17:FC:9F:38:7C:67:52:D7:43:21:BE:4C:03:5B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 327C8A695D60A06D84E2D0B4790E8F05E8FE8A71
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145399.roa
Signing time: Tue 26 May 2026 02:35:13 +0000
ROA not before: Tue 26 May 2026 02:30:13 +0000
ROA not after: Tue 25 May 2027 02:35:13 +0000
asID: 145399
IP address blocks: 240a:aabd::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:7c:8a:69:5d:60:a0:6d:84:e2:d0:b4:79:0e:8f:05:e8:fe:8a:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:30:13 2026 GMT
Not After : May 25 02:35:13 2027 GMT
Subject: CN=3D1ED1204D2C17FC9F387C6752D74321BE4C035B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:5f:55:c4:ba:bf:7c:8f:3c:00:5e:1e:c5:34:
ca:e3:b7:e8:07:f6:e1:fd:8d:89:69:30:53:c7:79:
4c:ba:bc:a8:71:4e:b8:e7:ca:62:28:18:0c:7c:58:
78:ac:01:f5:8f:d6:e1:00:f2:e1:82:cc:bb:90:ba:
c1:dc:c2:92:10:9f:eb:c0:da:0c:a0:6b:3d:7c:d8:
1f:86:ba:fb:41:af:b5:fb:37:48:e4:7e:b0:85:f3:
6a:39:ff:2f:bc:38:d9:a9:70:ce:5a:9c:60:98:21:
65:8f:ab:22:4c:5d:61:bd:70:6e:84:6b:0d:91:13:
f2:06:73:40:3f:b3:78:b4:3c:c6:42:48:1d:b5:7a:
d0:34:f7:6c:56:cd:de:97:6a:d8:60:89:cb:4c:c3:
63:6d:83:11:51:5f:af:12:c8:a4:bf:95:1e:d6:92:
0a:33:09:95:12:cf:3a:38:97:8e:43:d7:8b:06:27:
61:8e:34:77:38:00:96:86:c6:78:b5:a8:c4:71:dc:
f7:7b:24:cb:de:25:47:c7:48:f6:cd:0c:e9:73:5e:
f6:0a:8d:10:fc:ee:a7:a6:4d:e0:a2:a4:d8:53:df:
2a:ce:e9:62:8c:39:6f:96:fc:ac:88:62:a8:c0:50:
f2:03:19:0d:27:4c:bc:14:01:d2:a8:f3:c0:63:fa:
be:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:1E:D1:20:4D:2C:17:FC:9F:38:7C:67:52:D7:43:21:BE:4C:03:5B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145399.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aabd::/32
Signature Algorithm: sha256WithRSAEncryption
05:d5:50:6e:49:f6:41:ef:fd:94:49:f0:15:5c:22:38:38:a5:
6d:c7:89:37:59:08:0a:9a:07:bf:1c:a8:6e:5d:6f:b6:a4:52:
f3:d1:3c:2f:1a:9f:82:63:ef:02:f1:2d:55:82:1e:92:66:16:
86:35:de:e6:51:e2:b3:fe:78:73:dd:86:a8:cf:99:19:49:ae:
f1:f8:5f:4a:25:b4:1a:f6:7d:c9:01:19:35:bf:7e:b5:74:ff:
63:11:21:ec:ab:39:7a:73:60:64:32:c6:62:da:b4:6f:46:27:
21:1d:32:e0:af:c6:ea:dc:8a:db:d1:33:9d:e9:21:b0:27:83:
90:50:7b:48:0e:ba:27:40:e0:46:27:59:43:ab:c2:0f:a4:89:
da:91:c6:23:63:68:67:6e:ff:69:b7:60:21:81:d2:6f:ee:d3:
ec:0f:54:0a:68:c7:3e:ee:34:8b:c4:b0:4b:ea:23:a6:3a:d9:
ea:15:54:3e:67:39:98:44:b1:03:93:81:15:6d:7d:06:9b:88:
e9:4e:a4:e1:55:32:f9:ff:0a:ad:11:0c:4b:9b:e1:39:b1:45:
d5:c3:f9:71:24:f0:ba:6e:9b:a7:e2:2c:91:93:1a:fe:36:47:
94:02:c2:a5:c8:18:62:01:cb:7e:a1:12:a2:0a:e8:ea:92:c5:
98:73:22:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:39 2026 by rpki-client