Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145433.roa
File: AS145433.roa (raw, json)
Hash identifier: tFjewxGlP9HqZC46xfMzWyTOFVdYq2k5/0DHARcPK+4=
Subject key identifier: DF:B2:4F:64:81:29:E0:F4:2D:FD:0E:60:1E:5E:67:F1:75:8D:90:4F
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: F564D3708B7D8E44402B59340904B20039E788
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145433.roa
Signing time: Mon 25 May 2026 06:28:39 +0000
ROA not before: Mon 25 May 2026 06:23:39 +0000
ROA not after: Mon 24 May 2027 06:28:39 +0000
asID: 145433
IP address blocks: 240a:aadf::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
f5:64:d3:70:8b:7d:8e:44:40:2b:59:34:09:04:b2:00:39:e7:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:39 2026 GMT
Not After : May 24 06:28:39 2027 GMT
Subject: CN=DFB24F648129E0F42DFD0E601E5E67F1758D904F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:55:4f:c9:8f:07:a7:4e:94:50:79:90:e6:37:
9c:3e:76:8a:75:49:b3:88:1a:15:68:0f:12:d4:51:
59:45:35:7a:66:b7:b5:60:27:20:e3:9e:91:8b:9a:
1e:0c:6c:dc:da:57:49:ef:f8:7a:c5:ff:62:0e:fa:
02:c8:66:f1:bc:40:fe:b8:a7:08:62:99:04:46:f0:
f4:c4:56:cc:6e:b9:44:85:05:71:60:e7:ef:d1:56:
a7:75:65:c6:78:e8:1b:21:96:a4:3a:c5:05:ab:91:
4b:df:ad:5a:ba:96:f7:d8:de:58:63:5c:c4:c8:a1:
5b:69:fd:f3:e1:95:8a:c9:45:73:d0:e2:35:83:ab:
46:d0:dd:94:61:67:32:c9:e6:39:85:f1:36:9b:cf:
f6:df:27:33:1e:1e:c9:3b:4c:82:eb:6e:d5:8e:47:
dc:c1:23:2f:7a:fb:e1:fd:a5:7a:48:3d:9e:b7:d4:
62:ce:13:e2:46:1e:d1:07:56:b8:48:f4:db:04:cf:
17:09:f4:91:27:07:4a:0d:c7:1a:61:c6:f4:fa:62:
4c:21:13:f5:22:18:78:f1:24:08:b2:21:56:52:fc:
2d:3c:1e:79:8e:51:16:df:8c:d5:54:22:1c:ed:b2:
67:1c:7a:3e:0e:0c:79:92:90:0a:8a:25:b0:8f:60:
c6:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:B2:4F:64:81:29:E0:F4:2D:FD:0E:60:1E:5E:67:F1:75:8D:90:4F
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145433.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aadf::/32
Signature Algorithm: sha256WithRSAEncryption
2d:29:f0:76:9a:27:98:32:c9:10:1c:c0:86:a9:0f:85:5d:70:
fc:01:bb:50:c5:70:b8:ba:f9:41:be:ec:50:b9:c3:44:65:19:
07:e3:bd:72:e4:d7:60:78:1d:8e:b5:ef:66:85:b6:31:1e:df:
d0:a9:dc:50:25:9d:18:c1:8b:1f:31:39:96:61:c9:b8:7f:ce:
69:c0:60:32:c4:64:47:9a:5c:f4:62:5c:9b:27:5a:73:ab:49:
7d:e3:4d:41:99:21:87:f4:1e:b2:b4:04:16:85:60:21:07:18:
6b:55:be:08:0a:a3:cc:f7:e8:c6:e7:4d:21:74:16:06:37:05:
59:c1:f4:50:0c:d5:85:a4:c8:8b:10:db:40:39:c6:7b:e0:5c:
bf:f3:73:a2:de:ea:56:04:52:2e:8c:56:3a:f3:f0:66:b2:28:
97:25:50:af:8f:fc:2e:4b:68:8e:30:24:b1:1e:32:a4:55:ce:
8f:cf:78:db:50:45:b2:cd:87:18:dd:2f:e3:3a:2e:f2:4a:14:
d3:48:85:6a:b0:21:26:39:76:10:92:f2:9a:e0:09:3a:70:f4:
46:16:37:60:e3:8c:e2:6a:65:ce:2b:10:2d:6d:0b:02:eb:e7:
8e:86:0d:8a:c7:71:7e:e3:0a:35:48:5a:f4:12:f2:42:15:74:
7c:ff:b8:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:57 2026 by rpki-client