Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145407.roa
File: AS145407.roa (raw, json)
Hash identifier: sh8X9+lJbBMNO+2D8vLvLfmbVxjB+2Wo2/Q/JxP89Rc=
Subject key identifier: 1C:AF:E3:30:68:43:B6:8B:DD:DA:9F:DC:15:41:38:C7:45:EA:42:4E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4377B2A8496DD2EB9A6B9EE1914896D08E6A9E8C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145407.roa
Signing time: Mon 25 May 2026 01:38:30 +0000
ROA not before: Mon 25 May 2026 01:33:30 +0000
ROA not after: Mon 24 May 2027 01:38:30 +0000
asID: 145407
IP address blocks: 240a:aac5::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:77:b2:a8:49:6d:d2:eb:9a:6b:9e:e1:91:48:96:d0:8e:6a:9e:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:30 2026 GMT
Not After : May 24 01:38:30 2027 GMT
Subject: CN=1CAFE3306843B68BDDDA9FDC154138C745EA424E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f3:02:00:d2:28:a8:1d:21:ba:e5:0f:be:cb:
d2:6a:6b:2d:c7:08:70:41:96:a3:6a:23:b8:fe:a6:
d4:0c:99:ff:97:1a:e1:27:7d:82:51:69:2f:8a:83:
80:db:15:ee:9a:d1:3e:03:90:d4:0f:73:9c:eb:26:
48:77:f3:2d:8f:93:c9:c2:4d:cd:b4:b3:27:49:49:
0b:43:83:3e:56:26:c2:5d:89:7e:fa:8e:7a:bc:d5:
11:05:60:04:0f:ae:dc:a5:a1:b0:74:8e:36:c1:07:
75:4f:ab:15:77:2f:3e:7e:66:30:59:b3:ea:f3:2f:
6c:d9:35:df:06:8e:bc:b3:78:fa:d0:10:32:95:f2:
a9:c5:da:4c:d9:25:be:95:33:45:c7:70:70:5e:61:
8a:4a:a8:6f:f1:32:ca:39:29:d7:51:76:d8:4d:16:
9a:51:ac:8e:fe:1c:cc:2b:22:a9:fe:01:09:71:5b:
1a:53:b1:96:d7:7a:6c:18:8d:db:59:18:39:f3:76:
04:99:ab:60:8a:23:f2:d2:77:32:90:79:81:0f:fe:
85:60:a2:e9:4f:8a:2c:d7:d9:8a:90:24:b8:7b:38:
6e:f1:40:03:bc:4d:9e:fa:2b:18:a4:50:ab:e7:90:
5e:01:90:7c:d9:bc:ae:9f:20:91:bf:cc:5d:c2:c3:
d6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:AF:E3:30:68:43:B6:8B:DD:DA:9F:DC:15:41:38:C7:45:EA:42:4E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145407.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aac5::/32
Signature Algorithm: sha256WithRSAEncryption
1f:cb:47:25:81:10:57:2a:3d:76:2f:d5:ab:7f:d0:a2:fc:80:
bd:15:57:9b:43:69:24:93:52:b5:8b:25:1e:01:c6:5a:af:d1:
0e:4c:77:8f:88:bf:86:3d:12:a7:1e:24:a6:ed:8d:21:ed:2e:
79:93:d6:ec:50:ee:25:1d:ce:53:af:ba:44:49:45:c7:1a:d5:
c7:f1:71:f8:fa:a5:c8:6e:a3:47:9f:c8:ff:67:27:c0:38:f3:
85:53:48:f4:ac:85:10:6f:d4:4d:a5:e0:18:04:ad:1a:d3:34:
11:b3:83:b3:2e:52:71:3f:64:53:75:3c:50:df:61:e0:c5:98:
7e:2e:d6:79:b9:07:2f:87:18:8b:1b:85:a7:b3:7e:c4:72:1b:
d9:b0:fc:91:25:ee:c1:c6:96:5a:9c:db:38:64:e4:2b:5f:90:
a6:97:a6:eb:0d:2a:54:82:f9:f7:d5:99:21:39:b1:42:2a:38:
08:65:66:9e:01:eb:8b:45:37:82:4e:11:1a:fd:47:b3:3c:e8:
51:55:36:4e:36:50:ac:1d:86:b4:25:32:06:b3:61:58:34:b1:
5c:6b:86:9b:4c:68:b7:0d:e2:89:02:d1:06:cc:03:16:55:b5:
d9:f9:f6:d4:15:12:c2:de:20:57:13:45:f5:05:16:eb:16:96:
91:6b:20:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:11 2026 by rpki-client