Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145419.roa
File: AS145419.roa (raw, json)
Hash identifier: HTpHrdqmcvT/KCJOI9p75Lw7KNfuidlP5kPB9noxu3o=
Subject key identifier: FC:0F:4D:4A:FD:AD:A6:95:91:E1:B6:79:6C:56:A4:4E:2A:43:C6:02
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 432F2DE7D7710D7E7D6DB6EDE0CB13A1986C3233
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145419.roa
Signing time: Fri 22 May 2026 04:27:14 +0000
ROA not before: Fri 22 May 2026 04:22:14 +0000
ROA not after: Fri 21 May 2027 04:27:14 +0000
asID: 145419
IP address blocks: 240a:aad1::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:2f:2d:e7:d7:71:0d:7e:7d:6d:b6:ed:e0:cb:13:a1:98:6c:32:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:22:14 2026 GMT
Not After : May 21 04:27:14 2027 GMT
Subject: CN=FC0F4D4AFDADA69591E1B6796C56A44E2A43C602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8f:36:3d:ef:01:79:40:43:0d:ae:d7:fa:18:
3f:60:9c:ce:13:61:64:52:08:4b:ff:fa:c4:be:34:
3c:0b:38:94:96:cb:0a:e8:da:40:9d:2c:1e:22:b3:
19:01:01:4d:d9:5d:64:55:08:20:7b:27:23:ce:00:
17:b3:37:b6:ee:d4:1a:ba:2e:42:bd:f7:3e:bc:89:
33:1e:c6:55:5c:b2:3b:1a:19:15:1c:4a:d8:7f:d4:
7a:4c:8d:ff:81:77:9d:32:60:af:ab:9f:79:9b:da:
69:b9:5a:eb:86:9e:7d:88:8c:cc:d7:2a:5d:3f:f5:
91:c5:98:b2:28:4d:5b:18:b8:c4:2d:e8:ff:d1:c1:
c5:2f:06:03:63:98:bd:62:90:08:90:55:8f:45:2a:
ae:65:f2:d6:41:bc:b5:e7:b9:92:0e:3f:8c:51:f9:
b2:2e:14:76:88:63:30:c9:aa:a3:82:59:6a:03:b6:
71:6b:15:b9:fa:f1:d6:43:2c:2f:f5:e1:c9:c8:6a:
3f:1e:aa:1c:09:30:d7:e9:8f:ad:78:0d:85:aa:5c:
55:41:e3:fe:45:85:43:a9:68:86:1d:bd:37:55:0f:
ca:54:25:da:72:3f:7e:83:56:f5:64:b7:e9:01:68:
fb:23:71:68:c0:2b:db:4e:0f:f9:45:87:8f:24:6d:
f3:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:0F:4D:4A:FD:AD:A6:95:91:E1:B6:79:6C:56:A4:4E:2A:43:C6:02
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145419.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aad1::/32
Signature Algorithm: sha256WithRSAEncryption
b3:7c:56:01:c6:c1:82:04:0c:e1:b8:fe:e5:e8:32:f8:23:50:
ff:00:f1:d8:bd:e3:4d:f5:79:f8:4f:a7:e9:ea:4a:d2:7c:68:
a7:67:eb:2f:6f:ab:ac:c5:ba:03:a3:d4:1e:f9:70:de:e3:2e:
90:40:7a:05:ff:b0:64:fa:62:08:63:e4:70:bc:2b:4b:2d:bd:
54:9e:3a:d8:66:59:f6:90:6e:10:93:7e:fa:02:ee:be:bc:37:
a8:38:b2:cd:ae:4b:d6:92:01:a0:43:50:c8:78:36:e0:9d:51:
bd:b0:93:ca:2a:4f:84:e0:9f:35:a8:ce:5d:1a:3f:df:bd:4e:
9b:54:35:de:b3:9a:06:b1:5e:1c:89:80:ec:70:a7:23:23:f1:
cf:87:58:e6:9e:5c:37:72:89:82:7c:5d:3e:60:08:38:80:ca:
e5:08:1c:03:27:88:b3:e2:55:37:8a:c5:62:6e:ae:bb:9f:ef:
a1:37:0f:08:22:ab:f9:d7:bd:f6:f1:65:03:07:39:e8:52:41:
58:ca:79:47:54:f0:12:da:4f:7f:eb:21:9f:5d:e2:e6:76:cb:
e0:f9:2c:9c:48:ae:c8:d7:a4:40:9d:3a:1f:7c:98:fe:0b:dd:
f8:f0:12:24:46:68:2e:59:d2:7d:ea:f1:27:6f:cb:5f:cd:99:
d9:2f:c8:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:00 2026 by rpki-client