Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145423.roa
File: AS145423.roa (raw, json)
Hash identifier: 7Q6NU2Z4On6jZe5VGMg/4h+ZRne613UlP889/OX/WTI=
Subject key identifier: 66:EB:3F:12:E1:B4:39:73:4E:05:93:2F:3C:9F:1C:DC:91:9E:9E:B9
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 73D7DD57E73906745BAFA02855FC15F6CD3A0680
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145423.roa
Signing time: Mon 25 May 2026 01:38:16 +0000
ROA not before: Mon 25 May 2026 01:33:16 +0000
ROA not after: Mon 24 May 2027 01:38:16 +0000
asID: 145423
IP address blocks: 240a:aad5::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:d7:dd:57:e7:39:06:74:5b:af:a0:28:55:fc:15:f6:cd:3a:06:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:16 2026 GMT
Not After : May 24 01:38:16 2027 GMT
Subject: CN=66EB3F12E1B439734E05932F3C9F1CDC919E9EB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b4:8b:d6:2a:84:16:3e:28:b0:52:16:ec:f2:
f0:6a:f9:87:71:4a:f6:fc:86:ec:50:ca:2c:c1:03:
8f:bb:3a:01:5b:8e:7d:a5:e6:93:ef:2a:4b:c0:bd:
e6:ed:fe:a1:2f:0f:e5:a4:4f:14:f3:9e:83:87:9f:
80:03:8a:d6:ee:45:72:82:f5:72:f3:c3:11:16:31:
e8:08:0f:33:04:22:bc:76:26:99:c7:65:c5:2d:a2:
82:fe:1b:52:4a:5a:16:98:1c:fa:db:48:0f:89:cc:
b7:91:9c:d6:34:66:68:48:a2:b5:1d:61:3d:db:ec:
31:07:48:f4:be:8e:14:bb:79:c1:89:a2:da:79:7e:
d8:06:ba:81:e7:d0:ec:89:8f:7d:75:6b:53:4e:0f:
1d:eb:bc:de:b7:ee:3e:72:aa:3b:10:6a:2a:46:63:
43:2a:75:51:af:cf:97:26:1e:b6:eb:49:36:40:24:
cd:df:97:8f:d5:f4:08:12:00:0c:65:43:2a:c8:54:
10:12:ef:19:37:28:ec:bc:bd:08:ed:6c:a3:b7:b1:
91:fb:20:ee:62:3a:50:81:51:33:5f:29:7e:b4:45:
8d:e5:8f:dc:b8:4c:4e:45:29:eb:d1:46:41:cc:ec:
cb:8b:b2:0b:58:c4:bc:fd:54:f8:e5:b5:9b:a0:bf:
f8:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:EB:3F:12:E1:B4:39:73:4E:05:93:2F:3C:9F:1C:DC:91:9E:9E:B9
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145423.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aad5::/32
Signature Algorithm: sha256WithRSAEncryption
b4:f2:c6:5f:2c:56:e6:e4:f4:b0:86:22:c0:49:1e:a0:49:b2:
76:a5:bd:14:92:65:4c:4b:ab:46:89:a7:5f:4b:d2:cf:ba:2d:
07:f4:53:6a:47:7e:cb:0c:56:0b:a9:be:e7:df:52:58:0e:57:
c4:51:2a:7c:a4:62:f9:33:bc:cb:33:bc:51:b9:33:bb:0c:17:
5c:6c:da:dd:13:78:08:7c:3a:f7:4e:4b:e0:b4:b2:66:30:84:
1e:2e:33:32:d2:ef:9a:51:15:c8:a9:1f:47:32:fa:86:61:4e:
71:6c:04:a3:30:bb:6e:16:91:16:3a:5a:61:b0:fc:a5:7d:44:
0b:41:f1:35:39:11:a4:95:8c:58:33:fd:db:ce:07:17:af:63:
e9:22:c1:eb:09:7f:30:13:8e:b6:51:b8:c4:44:7b:e6:90:10:
7f:5a:fa:c5:38:f6:e9:ee:c1:ef:0e:85:27:bd:db:36:b4:7e:
8d:c7:ec:3a:b5:37:30:bf:83:9c:4c:bf:c6:2b:53:a8:cd:ed:
75:6b:d1:95:78:a0:8a:fe:4a:8f:1f:81:7d:68:9c:fd:07:39:
ea:59:6a:f1:cf:17:d8:fb:cd:c7:9f:41:40:c0:ee:2f:85:93:
12:96:b6:62:33:e8:a2:1d:26:89:53:7b:5b:ad:16:38:14:43:
f5:87:3f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:24 2026 by rpki-client