Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145421.roa
File: AS145421.roa (raw, json)
Hash identifier: Ud75ojRi5HNZzdaL7a6I4+cIXZDgO64zKWUWl8KSk58=
Subject key identifier: 01:53:76:C1:F2:84:81:AE:FA:54:3C:0D:76:46:72:C8:D8:99:E0:BF
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 31D8CC2B33D4269AF69FA849B673D8C052691F9C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145421.roa
Signing time: Mon 25 May 2026 06:28:25 +0000
ROA not before: Mon 25 May 2026 06:23:25 +0000
ROA not after: Mon 24 May 2027 06:28:25 +0000
asID: 145421
IP address blocks: 240a:aad3::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:d8:cc:2b:33:d4:26:9a:f6:9f:a8:49:b6:73:d8:c0:52:69:1f:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:25 2026 GMT
Not After : May 24 06:28:25 2027 GMT
Subject: CN=015376C1F28481AEFA543C0D764672C8D899E0BF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:e2:4b:c3:bf:3c:17:00:55:63:7a:f5:5d:7e:
ac:71:f5:ea:0e:87:0c:58:99:46:df:08:95:d5:70:
0a:30:83:86:2e:a4:98:4c:f1:37:f0:5d:c4:ee:17:
70:bb:c8:3e:88:5a:13:b7:f1:90:74:1e:1f:c1:19:
4a:8f:2e:c6:92:58:f8:80:12:02:50:66:ae:b0:79:
fe:d8:f6:04:b0:4e:23:86:b5:98:bf:9b:26:83:21:
39:bb:10:eb:1f:25:25:eb:31:ba:a0:e2:b7:c9:cd:
2a:28:37:29:5c:93:1a:8c:ed:27:5b:0d:3d:18:96:
42:99:9b:b1:57:3b:9d:f4:59:59:9d:11:1e:b5:ad:
e1:ff:cc:52:5c:e0:bd:98:a2:88:59:15:64:c9:92:
67:d5:7d:f8:a2:57:48:71:97:5e:2f:b0:55:fb:30:
22:66:e8:d7:b7:26:6d:01:5e:0c:9d:97:35:bc:2b:
a0:e1:4b:2d:ae:d4:62:cf:46:69:52:29:fc:c0:7b:
d3:38:d2:10:46:48:b1:5f:b8:60:59:8a:b7:eb:0c:
69:01:10:2a:5c:61:09:16:9e:c9:61:51:47:6d:76:
b3:55:0c:b1:23:12:38:ed:ed:21:06:12:a4:a2:86:
0a:3e:60:70:61:59:aa:e9:2a:2c:5e:99:56:e2:50:
75:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:53:76:C1:F2:84:81:AE:FA:54:3C:0D:76:46:72:C8:D8:99:E0:BF
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145421.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aad3::/32
Signature Algorithm: sha256WithRSAEncryption
82:b5:08:3c:8d:f0:da:30:fc:67:fe:67:50:44:50:c2:3e:a3:
bf:2b:90:51:d8:e6:a2:ef:2c:34:4d:b4:c5:8d:f7:bf:84:26:
3c:62:d6:16:d1:31:42:80:80:8f:de:f6:66:5b:95:35:c4:aa:
90:5f:16:0f:be:c7:a3:9e:88:7a:63:b1:23:ca:50:3a:fa:bd:
8c:49:fa:03:91:db:08:a3:d5:2c:57:d1:fd:b4:c2:ab:e4:31:
0a:24:14:d5:a0:0f:03:21:63:35:79:3c:46:53:26:57:a4:ce:
77:32:c5:c4:56:e7:cd:7f:1d:23:e5:9b:14:61:b3:f2:1a:8c:
c1:43:69:71:0f:43:20:d9:29:ea:a4:74:1f:f6:48:e6:00:af:
54:f8:33:65:09:ff:d9:ff:ef:33:6e:b1:82:78:6b:4c:c0:e1:
2b:6a:3a:61:ad:33:10:90:ef:b1:31:a0:53:c8:b7:76:a3:92:
e9:44:8c:c6:c1:54:da:76:d5:5f:0f:80:61:3f:ce:23:e5:f5:
13:26:52:9b:87:6d:62:59:92:71:81:83:2d:f1:be:cd:d4:2a:
a9:5b:e2:15:04:7f:8a:83:0e:ac:c1:8f:8a:88:ad:e2:20:02:
38:88:df:90:e4:9a:1c:f1:c3:5b:71:38:0b:fd:90:08:c6:9f:
13:db:38:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:52 2026 by rpki-client