Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145427.roa
File: AS145427.roa (raw, json)
Hash identifier: AdJXrU/aCG6qkpLYoWbCZohJyJuowZd4YQwJ3IUub0E=
Subject key identifier: 65:2D:A9:F4:B0:81:7A:36:41:BA:EC:30:5F:B6:D4:37:11:44:B1:09
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 77C93D15D9E535F865CDE7AFF825ACF7884D360A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145427.roa
Signing time: Tue 26 May 2026 01:13:26 +0000
ROA not before: Tue 26 May 2026 01:08:26 +0000
ROA not after: Tue 25 May 2027 01:13:26 +0000
asID: 145427
IP address blocks: 240a:aad9::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:c9:3d:15:d9:e5:35:f8:65:cd:e7:af:f8:25:ac:f7:88:4d:36:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:08:26 2026 GMT
Not After : May 25 01:13:26 2027 GMT
Subject: CN=652DA9F4B0817A3641BAEC305FB6D4371144B109
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:7f:ec:4b:10:88:07:05:9e:64:5d:09:55:c2:
db:0b:3b:d3:4c:0a:ca:54:59:9b:ca:18:77:49:6f:
24:9a:26:91:3a:a3:62:b2:20:39:4a:99:bc:e7:20:
92:0b:72:8f:0d:a5:56:5f:6a:d5:24:de:23:ca:8e:
5f:4b:2d:77:58:cf:8a:0e:b3:5a:36:4b:1c:6a:5a:
2c:ae:3f:97:51:a5:a6:98:b9:f6:59:f1:e4:95:ab:
22:9e:ae:8c:ab:ed:fb:5a:50:0a:37:47:7b:76:b1:
26:fe:ba:02:c2:fa:82:6f:84:52:a2:28:a7:9d:42:
a2:3a:81:ab:54:fc:28:3d:20:cc:29:1e:f5:80:2a:
bc:c7:19:bf:64:80:7f:eb:d8:e9:30:f7:18:e4:1a:
92:05:87:7d:57:e0:ac:5b:1e:34:dc:92:4b:48:fd:
5d:8c:4d:37:df:d5:40:97:15:27:a4:a4:73:cd:83:
12:8a:7b:90:02:84:11:e1:47:e2:7e:f6:6e:9a:2c:
73:a0:aa:ee:0b:8e:15:8e:77:06:92:8c:19:f4:88:
ad:58:34:86:3d:57:31:b1:ae:df:3e:18:3b:f8:91:
be:33:74:b4:61:f7:5e:ad:76:6c:47:71:69:e7:d8:
3b:5c:4f:7c:c7:63:aa:9a:6e:d6:a9:20:87:10:56:
4a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:2D:A9:F4:B0:81:7A:36:41:BA:EC:30:5F:B6:D4:37:11:44:B1:09
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145427.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aad9::/32
Signature Algorithm: sha256WithRSAEncryption
07:b8:80:fd:e9:58:51:97:3a:5d:fd:63:d0:39:f3:de:a0:e3:
3b:1c:a4:01:30:94:4f:7d:0a:d3:7c:5b:cd:83:72:19:ee:d3:
6b:f2:6a:e8:56:62:27:a2:c4:18:9c:e8:10:dc:9c:c6:b0:e3:
a2:6f:f1:60:16:88:16:7d:c9:09:14:e7:30:2c:35:4c:e1:8f:
52:22:73:d8:ba:83:ef:81:12:ac:df:b2:16:f3:35:b3:2d:4a:
93:d1:e0:d0:d2:f1:43:8d:ae:6f:e6:41:30:7f:2f:ca:5a:bf:
b0:dd:e4:1d:86:0d:2d:37:0a:82:ac:e9:a8:16:05:e8:a2:4f:
50:8d:cd:a5:45:3e:0b:2c:10:ac:5d:59:bb:63:d6:0b:8a:85:
38:7e:05:14:19:8f:d2:d5:62:0e:37:94:aa:6d:81:3f:59:bb:
ea:7e:ce:57:05:60:82:03:19:b9:4c:c9:ff:72:eb:6e:e5:41:
ec:ad:f0:ec:6d:9e:5b:eb:85:f3:fd:48:d3:6c:f6:52:42:13:
b5:a6:1a:48:e4:39:6b:53:4d:2b:ba:a0:3f:a7:90:fa:42:b0:
38:13:45:ba:62:c2:3e:82:45:34:7d:e3:51:06:0d:18:d2:8f:
9c:c5:49:76:3b:9f:85:9e:c7:bf:7e:ba:c5:ff:dd:23:0c:ce:
e1:6b:4e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:33 2026 by rpki-client