Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145403.roa
File: AS145403.roa (raw, json)
Hash identifier: CcnAdmxx1EDL+ok+7AwHzK6gf76bC6vO8BEMguW4Vrg=
Subject key identifier: DE:DA:7E:5E:85:BF:F6:C2:FF:E9:ED:10:F6:4F:B0:3E:D6:7A:5C:32
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6EB6526A820B3023D1CB728CCBF9D1F98216306F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145403.roa
Signing time: Mon 25 May 2026 01:20:39 +0000
ROA not before: Mon 25 May 2026 01:15:39 +0000
ROA not after: Mon 24 May 2027 01:20:39 +0000
asID: 145403
IP address blocks: 240a:aac1::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:b6:52:6a:82:0b:30:23:d1:cb:72:8c:cb:f9:d1:f9:82:16:30:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:15:39 2026 GMT
Not After : May 24 01:20:39 2027 GMT
Subject: CN=DEDA7E5E85BFF6C2FFE9ED10F64FB03ED67A5C32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ad:f5:35:38:16:e8:81:78:63:6d:55:6b:9e:
e0:8e:d1:30:60:6c:a0:92:fc:3f:ec:30:ae:db:7b:
39:c8:38:99:5d:4a:71:c8:0a:16:45:fb:12:47:da:
11:24:48:26:96:84:a1:38:6f:70:29:82:09:42:03:
98:4b:43:e2:e4:0e:60:22:14:f5:23:e2:d4:3d:12:
53:29:9c:05:38:ae:81:f9:70:16:6d:6d:da:d9:64:
fb:78:fe:15:af:cb:2e:9e:5e:67:06:c6:36:a0:5d:
e5:0f:28:53:e0:1f:c3:ef:8f:3f:dd:82:98:b9:e3:
63:0f:a5:00:d2:43:8b:3d:50:fc:e3:d9:97:d4:76:
14:50:1c:4e:6c:7a:94:cd:34:9b:7b:cc:aa:fd:43:
e9:bd:0c:3c:95:e0:aa:d6:e7:22:f9:d2:c0:e6:dc:
70:c4:01:d1:77:77:70:75:8e:f5:b1:64:f6:43:bd:
6d:8e:23:1e:4a:0c:4f:7a:48:99:60:87:62:b8:a6:
80:34:b8:29:62:93:b3:12:f9:d1:67:8e:76:c0:75:
2f:be:b3:1a:6b:f3:ca:52:9f:9d:fd:83:88:53:e2:
2b:58:7f:c5:4b:c3:ca:1c:04:f3:01:c8:bd:9c:a1:
6e:35:19:57:34:5d:ec:d4:16:e7:09:1c:44:3f:aa:
b0:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:DA:7E:5E:85:BF:F6:C2:FF:E9:ED:10:F6:4F:B0:3E:D6:7A:5C:32
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145403.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aac1::/32
Signature Algorithm: sha256WithRSAEncryption
1b:cc:d5:cf:af:ab:ac:16:45:42:3d:e3:bf:20:74:c0:d2:79:
a6:d7:73:e4:56:cc:ee:1c:79:3d:64:10:e5:2d:06:d1:ab:35:
9e:22:c0:11:b2:57:9f:a3:fc:5e:4f:17:db:cd:cd:c5:0a:57:
27:dd:2b:14:21:9e:b2:d5:f5:a2:2c:db:df:6d:2c:6d:cd:43:
5d:f5:3b:91:ed:14:1c:30:98:c4:d2:c5:70:3e:d7:d2:1c:24:
7b:39:cb:0d:6a:d0:f6:ad:89:27:17:4a:51:52:bf:e8:a2:18:
ae:36:51:df:e8:6e:10:fc:3a:cc:08:83:f3:6f:63:18:58:02:
33:9b:a7:1c:bc:51:eb:fc:cf:e5:63:13:f3:4e:62:bd:f9:1f:
1a:29:27:07:69:d6:4e:44:61:bc:39:c4:b7:40:4f:b4:3f:46:
55:8c:e4:54:d0:96:63:83:66:0e:fb:83:56:aa:98:03:f3:63:
2b:c3:a5:c7:9d:1b:6e:6a:f4:d6:a1:b2:ff:26:9c:5e:ff:a9:
53:4b:00:22:32:de:62:ec:36:e2:4c:dd:7f:e4:d2:4c:2e:2b:
85:f4:b5:e4:db:bd:3a:e5:8b:8a:1e:04:25:17:87:0e:bf:cf:
75:f0:62:ce:01:51:45:85:3c:54:58:6e:5f:a7:a6:3b:38:db:
19:82:41:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:55 2026 by rpki-client