Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145410.roa
File: AS145410.roa (raw, json)
Hash identifier: N0o9YMQrfpEcutq15RjcxH4LQlUEMf9hoilQ3zymvfI=
Subject key identifier: 9D:7C:B3:9F:03:B3:84:D3:39:85:AB:49:67:33:F4:3F:52:A3:61:47
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 03DCF9E16611A51B845F119E466AC473B5CBFB48
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145410.roa
Signing time: Fri 22 May 2026 01:50:26 +0000
ROA not before: Fri 22 May 2026 01:45:26 +0000
ROA not after: Fri 21 May 2027 01:50:26 +0000
asID: 145410
IP address blocks: 240a:aac8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:dc:f9:e1:66:11:a5:1b:84:5f:11:9e:46:6a:c4:73:b5:cb:fb:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:26 2026 GMT
Not After : May 21 01:50:26 2027 GMT
Subject: CN=9D7CB39F03B384D33985AB496733F43F52A36147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:aa:b2:56:81:1b:83:32:71:da:54:b3:c2:23:
69:7b:31:08:d6:7a:04:80:4f:8b:e3:9a:31:6f:8a:
aa:59:e4:ef:26:ea:88:f0:d0:31:99:dc:0f:9a:5c:
53:84:24:25:0b:78:b0:56:e3:b2:11:09:52:1f:7d:
f5:fb:08:56:6c:bd:72:0c:9e:bd:54:61:e8:03:84:
e7:ff:45:e7:ac:c2:44:e0:96:c7:be:58:be:50:0f:
a8:17:a4:3a:20:a3:6d:ec:e4:3c:82:01:eb:01:da:
af:04:f6:3a:3d:eb:3e:82:e7:44:91:2b:63:e6:46:
5b:06:13:19:68:f2:a1:4f:43:e2:6a:74:b7:a0:e9:
0d:73:4d:62:0c:7a:98:03:c3:cf:1d:76:79:da:50:
fd:27:cb:e3:a2:92:bf:db:a2:e7:5a:49:03:c0:53:
ed:82:5c:a0:c1:b7:db:26:d0:41:4d:47:c7:5e:78:
0f:9e:81:97:96:f0:45:06:04:cb:2d:d9:a0:f2:f2:
85:c7:5f:7c:3a:0c:40:f7:1f:66:bb:f2:6e:87:93:
a6:b9:18:98:b1:f0:c3:9e:4d:64:59:3c:f5:04:7b:
69:4a:00:9a:cb:d0:d3:33:ce:33:45:c4:e9:94:90:
22:c7:10:45:22:e1:f0:ed:2f:a6:96:8b:50:e6:b8:
5d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:7C:B3:9F:03:B3:84:D3:39:85:AB:49:67:33:F4:3F:52:A3:61:47
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145410.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aac8::/32
Signature Algorithm: sha256WithRSAEncryption
51:44:2e:38:a2:67:0f:fa:e1:bb:89:c2:7e:8d:df:c2:97:c6:
36:a5:1e:bf:bb:09:ae:38:9a:d6:b9:93:9d:0c:4c:c4:15:63:
f7:bd:a6:52:32:d4:36:63:ef:22:54:f3:64:01:ee:f2:eb:ca:
e9:f1:78:4f:b2:91:82:b8:0a:90:50:74:5d:01:dc:bd:77:2f:
28:89:59:7e:c2:a2:22:81:1c:cc:1b:9d:5e:71:15:f8:68:bd:
c3:d7:5c:13:85:91:7d:30:d3:8d:ba:9d:e9:cc:2b:db:a0:a4:
23:86:79:97:b2:6c:e9:74:2c:f2:f0:85:d6:a1:49:7a:17:89:
42:76:6d:c5:24:f7:c2:01:44:ad:f6:57:f5:fb:59:ac:1c:ed:
2f:07:4e:74:4a:43:2f:dd:68:77:f8:8e:38:6c:57:55:ba:2e:
8a:16:92:bb:ca:7f:21:85:fb:c8:d0:83:8d:cf:cf:38:48:48:
0d:1d:a1:66:60:9e:f7:8d:05:7a:70:03:1a:e2:16:3a:aa:96:
cf:04:ca:6a:fa:ea:04:b2:01:14:6b:7d:f9:25:92:d4:a5:3b:
e9:a6:a7:2a:81:85:ee:39:2e:0d:b9:87:04:95:6b:29:6e:19:
ec:99:10:d1:59:eb:02:cb:fc:9d:6d:fe:97:5a:2a:e8:77:ec:
17:80:db:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:01 2026 by rpki-client