Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145426.roa
File: AS145426.roa (raw, json)
Hash identifier: bMRMyMOz5V5eDDqXhJrqxgsdZKFCX89EcRQRaSaHeFo=
Subject key identifier: 73:64:08:A4:42:3A:A7:25:95:DB:E3:F4:29:73:80:63:54:93:F6:D2
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0E663E3B26AA7655F87532D6100ACE5F3D94C7CE
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145426.roa
Signing time: Tue 26 May 2026 06:12:26 +0000
ROA not before: Tue 26 May 2026 06:07:26 +0000
ROA not after: Tue 25 May 2027 06:12:26 +0000
asID: 145426
IP address blocks: 240a:aad8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:66:3e:3b:26:aa:76:55:f8:75:32:d6:10:0a:ce:5f:3d:94:c7:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:07:26 2026 GMT
Not After : May 25 06:12:26 2027 GMT
Subject: CN=736408A4423AA72595DBE3F4297380635493F6D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:be:d5:0f:1a:af:ac:a7:3b:ee:31:23:18:3f:
c8:fa:32:15:ff:9c:4a:24:28:79:33:ab:60:81:fe:
87:db:e7:f1:a3:83:0d:32:98:29:69:c5:f9:30:25:
53:8f:fd:c6:36:62:5d:c0:d8:94:c2:15:a6:d0:97:
1b:58:a9:8d:72:f7:be:70:86:8a:89:b2:7b:2d:d1:
02:e9:78:70:84:a3:e4:45:5e:36:83:05:1f:30:7f:
f5:75:71:24:0e:8e:0f:eb:46:18:92:1f:04:ca:06:
c4:82:9d:df:c2:01:ac:91:63:fa:bb:c0:da:49:61:
5a:3c:29:4b:d2:45:b1:0c:10:65:f0:3d:1f:5d:e8:
c2:d5:9b:95:f5:8c:2c:78:48:12:ba:5d:90:f9:05:
02:46:3a:ea:fb:af:5a:f8:eb:8a:31:c1:cf:ba:4d:
11:7d:db:b9:f6:f2:d3:f4:ff:a3:05:9f:ff:7c:87:
b2:cf:40:32:f2:e3:10:bb:9f:bb:88:cc:75:4c:f3:
53:9c:37:30:25:ac:0e:7c:9f:c8:7c:83:fe:57:a3:
9a:41:da:26:2c:ed:27:b2:8a:fc:34:33:7f:9c:14:
b4:f0:55:fa:0d:66:94:99:bd:cd:1c:8c:3f:6d:54:
c7:6e:21:a8:ba:57:7f:f7:f3:9c:d0:78:e6:3f:16:
e0:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:64:08:A4:42:3A:A7:25:95:DB:E3:F4:29:73:80:63:54:93:F6:D2
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145426.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aad8::/32
Signature Algorithm: sha256WithRSAEncryption
a5:c9:50:eb:bd:d3:c2:7d:8a:53:b3:e1:94:f1:3b:12:d7:1d:
e8:95:55:40:c8:ef:47:88:b1:be:ca:a3:a1:6e:ae:f7:ac:34:
38:5c:68:83:26:75:b0:af:1f:ff:ed:ae:fb:fc:cd:62:ce:8f:
8e:27:4b:6b:99:8f:81:51:e1:5e:a0:e6:e1:ad:7d:bd:04:95:
c8:7f:07:88:50:6b:01:17:28:cc:e3:59:b6:63:98:ee:8d:f2:
fc:06:85:16:9e:88:17:28:95:42:f0:25:8e:02:cb:12:2b:52:
c3:f7:2c:9d:e3:88:00:7c:ef:60:51:75:17:b6:64:9d:27:a1:
ad:cb:f4:8b:21:50:c1:af:45:7f:4a:44:04:14:30:5f:27:35:
ad:ab:bb:6a:ba:6e:3d:5c:0e:fa:1a:f6:e0:74:58:85:c7:46:
45:4e:f7:0f:70:10:43:08:8c:2b:3b:52:7f:85:3a:cd:7b:3b:
15:63:8f:9d:5d:5d:ac:6a:0d:1c:b3:e2:72:b1:b5:bd:52:ee:
02:d9:95:81:97:a4:a4:b3:43:ed:f6:be:2e:eb:db:af:6e:ec:
c9:dc:3c:0d:ef:e7:8a:84:39:dd:92:4c:5b:2d:a7:92:ec:c6:
0d:21:09:98:b6:d2:33:5d:f6:36:a8:fe:4e:97:9f:d5:a0:fa:
c8:c2:5a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:44 2026 by rpki-client