Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145411.roa
File: AS145411.roa (raw, json)
Hash identifier: fhHj9Vi7c9rC3IG4dvOpj+ohCECrNFQn7WWC7nxUXTA=
Subject key identifier: AF:B3:31:2D:7F:F2:50:44:F7:EA:41:1F:1F:12:01:92:F0:50:74:92
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 22686837586E9B7912CE6CE805C3E81C0E9EABB5
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145411.roa
Signing time: Fri 22 May 2026 01:50:19 +0000
ROA not before: Fri 22 May 2026 01:45:19 +0000
ROA not after: Fri 21 May 2027 01:50:19 +0000
asID: 145411
IP address blocks: 240a:aac9::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:68:68:37:58:6e:9b:79:12:ce:6c:e8:05:c3:e8:1c:0e:9e:ab:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:19 2026 GMT
Not After : May 21 01:50:19 2027 GMT
Subject: CN=AFB3312D7FF25044F7EA411F1F120192F0507492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:72:bb:32:39:dc:b6:07:a9:1e:0a:8a:d4:68:
a9:2f:97:e6:86:f3:39:92:0b:e9:e9:83:0d:b4:8d:
e1:64:28:a5:17:9c:1b:e6:d1:09:5c:db:c0:94:a0:
2d:25:b8:f1:da:d3:ee:b7:b5:a0:ef:58:11:2b:48:
c4:33:9a:ac:49:0d:f5:70:6d:11:b2:89:70:70:42:
07:99:dc:b1:df:5c:99:09:0a:2b:af:b4:3e:ef:9e:
39:c0:cd:35:d5:16:d7:6b:e2:38:04:28:b1:d6:07:
8f:8a:db:bd:2b:4c:81:33:17:a6:57:af:a8:47:2e:
d5:c5:e9:cf:86:be:61:b9:8b:22:00:ea:a8:ad:3f:
7d:93:51:7c:6f:64:5d:d0:88:8f:f6:71:7e:81:ac:
c6:22:bb:56:b9:a8:dd:78:67:90:ed:75:22:ea:13:
6c:98:56:d6:fa:53:20:26:72:b7:2c:2e:ff:e1:fd:
03:99:d3:0f:65:83:bc:d8:0e:11:da:bc:82:ed:0a:
5d:c4:78:b8:a5:72:1f:a7:4e:a1:60:d0:97:07:46:
03:50:e4:86:63:4c:d9:2c:03:23:f7:fe:99:95:44:
53:d1:f3:2c:89:4b:b5:31:bc:7b:95:2d:83:2a:29:
90:b0:f1:18:7b:66:27:9d:a3:1e:1e:91:83:23:d6:
15:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:B3:31:2D:7F:F2:50:44:F7:EA:41:1F:1F:12:01:92:F0:50:74:92
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145411.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aac9::/32
Signature Algorithm: sha256WithRSAEncryption
52:09:67:10:b3:97:66:a1:58:8f:01:b0:a2:79:fb:49:19:dd:
72:4f:76:8e:99:64:fa:17:58:26:b6:de:2f:f4:d2:f5:05:fc:
b9:ed:30:82:f1:41:e7:ef:da:a2:91:fd:5d:9f:cb:d8:f7:1c:
ed:d8:b4:87:66:f6:2c:aa:88:fe:a3:b6:04:3d:e1:1c:f6:61:
8f:81:b7:a5:58:0c:0e:fb:3b:bf:20:a3:e2:fb:e3:3c:d7:8f:
c1:a4:8e:90:85:8e:4b:19:71:1d:8e:54:18:eb:d3:7c:ad:fb:
6a:2a:20:fd:ae:05:74:35:0e:77:7e:6e:a6:06:0b:08:ff:39:
9e:7d:94:ad:0c:f1:27:05:09:18:f7:1b:d4:69:6d:7e:a9:af:
22:1e:ca:74:80:0d:87:3e:49:d2:41:1c:e5:59:ca:11:aa:fa:
20:25:8e:8a:a6:c0:e4:93:a6:46:6b:e3:a9:2b:d2:ae:f5:34:
e3:a9:13:5b:34:a9:e5:51:76:7c:f2:ce:d0:df:d3:6f:7a:33:
02:8e:84:1f:83:20:e6:ec:b5:18:ed:91:2d:9f:ff:ca:aa:26:
21:cf:b5:8a:ee:8f:6a:5d:80:0c:af:6c:66:70:56:5f:7e:8a:
7c:3c:37:99:28:a4:83:8e:93:c1:14:c4:1d:06:3e:82:14:e6:
16:30:31:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:19 2026 by rpki-client