Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145400.roa
File: AS145400.roa (raw, json)
Hash identifier: qB0SgFpil8sGip8Od2zvpPCKYi1edhHArXcUoPBL0Io=
Subject key identifier: 4F:09:8E:86:F0:A3:E4:9A:12:54:AE:C1:82:2A:5D:B4:9A:15:8B:69
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3BC4BF1A4541D4ECDD1C754B4BEB534D55808C2B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145400.roa
Signing time: Mon 25 May 2026 01:51:09 +0000
ROA not before: Mon 25 May 2026 01:46:09 +0000
ROA not after: Mon 24 May 2027 01:51:09 +0000
asID: 145400
IP address blocks: 240a:aabe::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:c4:bf:1a:45:41:d4:ec:dd:1c:75:4b:4b:eb:53:4d:55:80:8c:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:46:09 2026 GMT
Not After : May 24 01:51:09 2027 GMT
Subject: CN=4F098E86F0A3E49A1254AEC1822A5DB49A158B69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:6f:41:cc:2c:d9:76:37:cd:86:d4:e9:b1:f5:
cb:b1:b6:38:0a:d1:f5:7d:78:9b:1b:61:44:84:b4:
97:72:49:4b:93:2b:6c:1c:cb:86:76:82:73:dc:c5:
0f:97:69:38:f1:5e:a7:9e:c4:90:a6:a1:57:95:10:
b5:f5:a3:1a:5e:ce:35:99:77:ff:d0:44:26:78:7d:
0d:6c:a1:db:e1:e6:96:d1:3b:70:8e:16:1c:54:54:
3b:97:06:fa:d1:22:06:18:75:bd:2b:e0:31:e5:5c:
dc:41:c6:98:fe:fb:55:06:be:1e:0d:11:34:0a:af:
b7:5b:98:c0:d8:91:ad:45:f6:c4:e9:d6:89:a2:60:
88:31:eb:29:a4:bb:3f:ed:90:e2:5d:f1:d3:53:f7:
4a:45:b6:07:12:50:ae:be:73:51:2c:18:54:de:11:
26:e6:86:83:a8:7f:43:10:a1:73:10:4f:05:c3:4a:
de:7b:f1:3b:ce:fc:d8:c2:24:62:c2:f2:8d:70:90:
10:c9:5a:c2:23:5b:67:5f:d6:cd:9c:e8:85:1a:c6:
b0:98:0d:29:58:52:3d:47:ec:69:c6:26:c0:c9:1e:
5c:c7:a6:5b:ec:ec:ad:94:ce:3d:fc:bd:33:36:85:
d9:fd:80:9b:51:a2:1d:89:ce:9b:e4:26:d1:25:e2:
c4:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:09:8E:86:F0:A3:E4:9A:12:54:AE:C1:82:2A:5D:B4:9A:15:8B:69
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145400.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aabe::/32
Signature Algorithm: sha256WithRSAEncryption
a3:d5:7f:02:e3:7d:46:e6:d9:3b:41:c1:32:bd:9b:bc:74:88:
16:9c:66:78:9a:58:d5:34:e3:5f:ad:23:46:7f:c1:ca:6c:ac:
b7:60:1f:5e:b9:0b:44:4c:63:ba:e8:30:ee:c1:1a:ff:d7:f8:
69:76:58:9c:e0:d6:3a:97:0a:41:af:d6:fb:c0:5d:9b:41:b7:
0d:80:e6:c7:20:c0:20:7c:97:30:47:c9:af:a5:90:a4:35:99:
6d:83:ef:34:6e:33:78:0b:76:8c:be:a7:23:7e:34:91:c4:12:
f2:37:84:a3:73:11:83:c4:ae:3f:26:71:11:68:4e:aa:4e:69:
00:f7:67:9b:94:b3:ab:20:ca:a9:a6:f8:15:ff:b8:0a:5b:ed:
3e:4f:04:9e:03:07:27:78:25:2f:6f:6e:10:3e:d7:4d:37:46:
29:ff:e9:46:27:ff:e1:cb:e7:fa:a2:d5:7e:e6:48:bb:ea:0b:
0d:24:68:8f:ed:42:6b:72:4d:fe:92:a6:29:a0:08:69:3d:c8:
04:d2:1e:45:31:00:27:0d:e0:65:df:bc:36:c2:4e:de:56:d8:
1d:d5:2d:de:3b:88:29:9a:4b:69:18:c0:89:08:37:f1:ff:e4:
d4:2f:50:dd:a4:45:c0:01:0c:98:f7:4e:b6:14:d2:02:8a:a7:
c5:e1:b5:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:47:44 2026 by rpki-client