Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145413.roa
File: AS145413.roa (raw, json)
Hash identifier: 1XcWJDM9pM4gv+MciTaTMwxu+TooidXqpPiskRNkvhk=
Subject key identifier: B5:4B:ED:AA:AF:7E:C7:1E:7C:59:64:3C:84:56:E0:0E:FF:C4:1E:3B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0AF520547497372BF4BC626BAE22731CB83EE1F2
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145413.roa
Signing time: Fri 22 May 2026 06:46:31 +0000
ROA not before: Fri 22 May 2026 06:41:31 +0000
ROA not after: Fri 21 May 2027 06:46:31 +0000
asID: 145413
IP address blocks: 240a:aacb::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:f5:20:54:74:97:37:2b:f4:bc:62:6b:ae:22:73:1c:b8:3e:e1:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:41:31 2026 GMT
Not After : May 21 06:46:31 2027 GMT
Subject: CN=B54BEDAAAF7EC71E7C59643C8456E00EFFC41E3B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a9:c3:0e:a5:e4:95:7e:7a:b2:38:a0:96:7e:
3d:c2:33:d0:b4:c6:cf:c8:88:38:cb:e8:31:fd:d7:
c3:cc:26:62:e5:08:39:51:ea:c4:28:28:a1:4a:3d:
21:d4:90:27:bb:d5:0b:ed:28:ce:26:d4:85:bc:be:
6c:74:67:f0:65:f5:9c:53:ff:15:93:70:93:58:65:
a1:fb:a1:92:e7:d5:9c:08:80:94:e9:b7:64:9d:02:
33:23:fc:6c:7c:b3:f3:6f:75:29:93:a6:6f:d2:7d:
c6:2f:b7:6d:4e:ba:1a:de:1e:8f:95:b2:d2:ac:60:
bf:b3:75:6e:41:84:3f:a7:04:4b:70:08:9f:d8:fd:
01:c5:49:37:3c:d1:f6:05:52:ac:43:d4:90:ff:ff:
b7:90:97:c5:a3:cb:a1:bd:f0:ec:77:f9:94:b6:a9:
db:39:d9:2a:8e:77:cf:e3:cf:be:46:40:43:7a:a7:
05:7f:a2:ca:0a:2a:da:ca:3c:c1:f7:46:65:71:20:
13:e0:ea:00:b9:44:98:2a:d7:4e:fa:4b:8d:e6:06:
ed:61:e7:77:31:1a:33:ad:f2:ec:20:2e:a8:c1:3e:
95:e1:bc:e9:1c:d4:9f:ad:cb:05:3a:fe:18:77:ee:
1f:6e:b3:ef:3e:8f:e7:f9:5f:9f:6d:37:21:5a:96:
75:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:4B:ED:AA:AF:7E:C7:1E:7C:59:64:3C:84:56:E0:0E:FF:C4:1E:3B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145413.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aacb::/32
Signature Algorithm: sha256WithRSAEncryption
22:3c:90:2d:fa:db:ed:fc:3d:d8:f1:5a:7e:fe:74:f2:77:dd:
75:76:bb:74:10:26:bc:e1:b1:8e:d0:92:f0:e7:94:17:31:4d:
5e:a5:9a:21:27:68:fb:4c:ba:6f:12:2a:04:88:fc:74:1d:85:
4b:08:0b:c4:8e:63:4c:95:df:b7:2d:cc:eb:b3:9b:b3:e2:4c:
45:ed:9f:28:f8:59:25:45:90:58:60:c7:e0:65:41:9c:47:95:
f5:f2:db:47:ad:fc:25:af:83:8c:19:b2:eb:f5:52:8d:cd:9d:
2b:8d:44:92:bf:a6:af:d5:ff:93:ac:a9:1e:13:84:88:13:0a:
03:1a:02:69:a6:00:b0:ac:fb:eb:09:57:88:5b:b2:ee:c5:4c:
9c:d0:59:d8:06:fd:c1:21:e0:ad:b5:e7:b5:a8:fe:20:59:8f:
96:00:4c:79:57:d7:85:09:e9:c2:cf:74:89:0b:87:46:91:ad:
77:83:c1:cf:1f:8e:cc:90:6f:0f:ab:18:3d:d1:81:7a:ed:28:
6d:38:ac:16:0b:6b:c9:61:6a:9b:60:1a:cb:c0:36:9e:52:20:
e3:13:02:dd:84:45:de:16:83:ab:a0:43:94:9c:a7:8d:19:9c:
05:83:97:8a:94:6c:b6:45:bc:3a:9b:71:fb:82:f9:f7:70:fc:
fb:94:ba:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:00 2026 by rpki-client