Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145430.roa
File: AS145430.roa (raw, json)
Hash identifier: 2cHL/QLEHwGRaRH83G+0lWw92G0IyViva+Q9XRTPYFg=
Subject key identifier: 22:C9:BF:B8:7D:01:ED:B7:1B:1B:3B:9F:5B:8B:5E:88:0E:33:83:74
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5956443B4EB962AF7F13D3C43BEC3BCF215BFE92
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145430.roa
Signing time: Fri 22 May 2026 01:50:33 +0000
ROA not before: Fri 22 May 2026 01:45:33 +0000
ROA not after: Fri 21 May 2027 01:50:33 +0000
asID: 145430
IP address blocks: 240a:aadc::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:56:44:3b:4e:b9:62:af:7f:13:d3:c4:3b:ec:3b:cf:21:5b:fe:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:33 2026 GMT
Not After : May 21 01:50:33 2027 GMT
Subject: CN=22C9BFB87D01EDB71B1B3B9F5B8B5E880E338374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:92:c4:49:65:28:f4:7a:2f:4a:53:76:3d:98:
38:ed:91:34:6a:6d:94:f7:b5:a1:31:8f:43:b4:65:
ea:01:81:52:a1:3f:56:61:da:f1:64:1d:2b:2d:66:
f5:4d:6f:50:c1:22:a1:52:c1:cd:70:ea:ac:89:d5:
93:26:29:96:56:24:57:48:3c:e1:3a:98:77:fc:ad:
39:87:5d:fc:30:51:96:97:30:c8:aa:af:5d:5f:3b:
95:60:08:2d:fc:52:45:da:4c:b2:16:7a:49:56:51:
bc:d4:32:74:53:f0:8c:f6:21:fa:f5:13:a8:04:35:
c5:60:98:cd:d5:2e:09:42:ca:2c:ae:af:51:cc:9b:
f2:3e:8c:a6:18:f2:29:42:c5:0b:17:de:3f:ae:3b:
c5:57:a3:d2:72:27:28:fa:70:c9:26:7c:1b:06:0a:
49:d9:49:97:7e:1c:89:18:8d:00:9b:4e:b3:bf:21:
e3:c6:f5:c4:22:6c:11:87:86:2d:da:f8:bf:9d:dc:
e6:94:19:46:af:db:97:d2:06:ea:fe:3b:f6:49:6b:
bf:fd:d3:d6:62:08:de:4a:11:c0:44:2d:cd:9b:e4:
21:9c:41:14:7b:f7:4d:c5:c6:0f:57:0c:d6:ed:98:
fe:9b:43:93:25:71:0f:9d:7d:f3:27:95:3b:33:77:
83:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:C9:BF:B8:7D:01:ED:B7:1B:1B:3B:9F:5B:8B:5E:88:0E:33:83:74
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145430.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aadc::/32
Signature Algorithm: sha256WithRSAEncryption
00:ec:0c:59:32:1a:fc:0b:55:df:55:66:ec:35:65:a1:d5:09:
b9:79:28:b9:e2:0b:79:da:0f:d3:80:13:e4:d3:4a:cd:8a:38:
92:15:49:ae:5b:36:11:cc:d4:1f:3c:65:95:56:11:7a:dc:22:
19:08:46:d7:3d:4a:1f:7e:c7:8d:f6:65:67:ba:92:89:9d:e0:
e3:a4:f8:d1:e4:39:5f:6f:1b:bf:94:fb:8a:4c:5f:f9:4e:e6:
36:3e:19:1f:2a:61:78:5c:29:6d:d0:31:2d:24:c0:c9:1c:e2:
88:0c:4b:2e:0f:f0:bd:82:6e:f4:72:4e:57:9e:92:fd:fb:cd:
74:03:4e:97:27:dc:b9:bf:ee:91:3e:d6:d4:78:83:02:8c:bb:
74:92:37:36:fa:55:72:33:ff:0f:a1:38:8c:97:00:2c:f5:d1:
5b:e3:b1:48:f9:85:6f:37:0d:b0:97:34:b2:e1:85:82:91:82:
ff:1e:2f:f4:71:ae:53:89:7b:ba:fb:bd:3b:e1:3a:f3:dd:fa:
55:91:dc:4a:ab:bb:5c:4f:f7:64:a3:5d:d6:bb:76:67:eb:cb:
70:1b:da:02:25:e3:60:dc:ec:26:40:de:c7:82:95:26:06:a1:
75:3f:c7:e1:21:f8:b0:0d:34:48:2f:83:cc:d1:06:f9:72:ba:
1f:0d:a0:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:11 2026 by rpki-client