Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145401.roa
File: AS145401.roa (raw, json)
Hash identifier: WME/dJ7iyEJ7ukVHSX9cSSjLkcidU0IEzL9ByjiMnV4=
Subject key identifier: 0E:1F:4F:99:EA:D7:F8:24:40:7D:68:05:F8:0E:3B:25:62:C5:43:3D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 67F2C5569B51E73C68F22936474808B718CA0F68
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145401.roa
Signing time: Fri 22 May 2026 07:24:45 +0000
ROA not before: Fri 22 May 2026 07:19:45 +0000
ROA not after: Fri 21 May 2027 07:24:45 +0000
asID: 145401
IP address blocks: 240a:aabf::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
67:f2:c5:56:9b:51:e7:3c:68:f2:29:36:47:48:08:b7:18:ca:0f:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:19:45 2026 GMT
Not After : May 21 07:24:45 2027 GMT
Subject: CN=0E1F4F99EAD7F824407D6805F80E3B2562C5433D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:1c:51:6e:b9:94:46:bb:1c:6b:45:93:63:29:
41:a5:8c:bd:64:07:46:a5:d0:c2:4b:bd:fe:08:15:
e1:65:42:f4:bb:16:ba:b4:78:fa:f9:b0:f6:19:4e:
88:65:9b:1a:94:40:c4:60:66:78:df:34:2f:6e:3d:
58:5f:25:fd:92:9f:a5:74:f8:30:e6:ee:af:37:1c:
95:16:4c:27:c8:c3:f4:4f:36:af:c6:7e:27:7f:3a:
59:ed:45:64:63:15:09:1e:5d:da:e4:2f:1e:66:62:
01:47:8c:cb:37:40:fc:8d:3e:17:0c:f0:40:44:bb:
09:74:50:04:27:42:25:77:f5:80:fe:86:e6:63:e5:
61:34:e7:fb:d9:15:a4:c3:dc:90:b8:e9:b3:55:0a:
4e:58:c0:f2:92:f9:f9:5f:25:d0:5a:36:d8:69:24:
6f:38:9e:10:6e:b8:69:c9:14:a3:67:b0:a7:3d:71:
af:91:35:ce:8e:b6:e5:c1:ff:8c:ec:19:91:cb:78:
ec:59:54:f9:f2:cd:57:91:28:d5:1a:45:85:01:74:
1a:44:6a:3a:fe:c4:cc:6c:24:72:eb:65:14:af:45:
64:0a:2f:2e:c5:6d:8e:bf:98:0c:26:8e:7f:6a:95:
08:5e:9d:11:85:3e:d3:0e:c0:a4:31:92:dd:35:88:
0b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:1F:4F:99:EA:D7:F8:24:40:7D:68:05:F8:0E:3B:25:62:C5:43:3D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145401.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aabf::/32
Signature Algorithm: sha256WithRSAEncryption
62:76:09:45:6a:14:90:df:6a:36:0e:bd:36:dc:aa:4f:9d:90:
f3:13:4d:53:72:7d:a0:1a:6e:60:33:c4:bd:b0:65:dd:d0:51:
a4:cd:d2:f4:c5:1a:9e:76:0b:20:38:47:a3:4d:41:b0:1e:f7:
16:88:93:f9:1d:8d:2b:8a:f2:21:5d:e6:b6:82:7d:a0:71:0a:
d6:6e:f0:83:fa:1d:e2:04:a9:83:ea:6a:22:5a:e8:01:70:5d:
33:84:c3:08:1a:a6:a5:ad:42:4c:9d:6d:11:e8:e0:6a:65:b2:
b9:54:b0:11:32:21:37:cc:cc:78:e0:e5:30:76:9d:4a:a0:cc:
e2:4f:48:f2:b9:7d:83:92:b2:a9:3d:23:9e:e1:df:fd:9d:7c:
13:56:9a:80:5a:0a:63:84:6d:51:ef:55:7b:df:22:2c:fa:2d:
3f:96:02:b9:a4:2d:e0:aa:5a:fe:76:8b:27:21:73:ba:63:39:
71:30:bd:b6:ca:7b:fe:cf:40:79:34:e7:9b:bc:fb:c0:86:b5:
8e:f3:30:bd:52:f1:15:93:5b:06:ac:a2:bb:c6:45:93:1f:60:
77:ac:66:1f:2f:be:af:aa:7a:88:c2:99:ed:f9:23:c8:d4:e6:
e5:d7:e7:72:c3:72:c4:be:ef:a5:62:10:90:70:33:ba:b1:7f:
b0:c4:25:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:23 2026 by rpki-client