Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145438.roa
File: AS145438.roa (raw, json)
Hash identifier: J4RB6eSMh03v7VaWf4vPBMfzWmQTie8IwmoUJi9rHrI=
Subject key identifier: C4:4F:EF:D5:DD:73:6A:7D:EA:EF:FC:FF:71:27:F7:8B:AA:DC:28:42
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 70C0598C512333B3D3B6603D54620588BF78A4F6
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145438.roa
Signing time: Mon 25 May 2026 01:38:07 +0000
ROA not before: Mon 25 May 2026 01:33:07 +0000
ROA not after: Mon 24 May 2027 01:38:07 +0000
asID: 145438
IP address blocks: 240a:aae4::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:c0:59:8c:51:23:33:b3:d3:b6:60:3d:54:62:05:88:bf:78:a4:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:07 2026 GMT
Not After : May 24 01:38:07 2027 GMT
Subject: CN=C44FEFD5DD736A7DEAEFFCFF7127F78BAADC2842
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:50:54:f9:1b:13:ee:41:6b:97:99:5a:a2:cc:
2e:84:c2:c2:86:a7:61:c2:e6:79:e4:1f:a7:35:0f:
71:30:49:a8:c6:ce:b9:ca:0c:89:87:0a:27:44:d2:
0a:81:61:34:c0:b0:e2:9b:3d:5f:08:2f:67:cc:67:
90:f2:3f:e6:28:09:46:ba:48:af:a5:db:64:57:87:
7d:87:59:41:ef:28:75:11:70:72:82:c2:11:48:3c:
e0:85:ed:c8:e6:b7:45:83:56:b2:74:e0:e4:28:fe:
36:9a:45:c0:49:e5:a6:00:32:21:1a:44:7a:b1:4d:
54:63:ec:cb:b1:ef:d1:f0:b5:92:cd:f1:a2:ea:48:
1f:1b:31:6c:16:ff:d6:b0:f2:60:0b:b5:7c:98:95:
b1:bb:f0:b7:60:68:05:a4:1e:3f:b0:7b:52:63:bf:
4f:ce:6f:0b:58:de:51:44:28:2a:b8:bf:db:5d:76:
b9:df:12:30:a4:7a:20:87:71:12:00:22:33:71:59:
53:33:db:44:93:e5:7e:60:10:ac:ea:b8:75:66:4b:
f1:21:99:f3:3e:a7:c8:14:92:5a:3c:cc:db:a8:18:
d3:6b:ad:ef:95:05:b8:59:14:a5:54:75:6c:5e:63:
78:af:39:5c:17:69:2d:12:c0:0e:86:a8:3a:1f:83:
91:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:4F:EF:D5:DD:73:6A:7D:EA:EF:FC:FF:71:27:F7:8B:AA:DC:28:42
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145438.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aae4::/32
Signature Algorithm: sha256WithRSAEncryption
22:a0:63:92:39:60:f4:4c:85:ae:f3:4d:3b:85:bc:3d:29:26:
19:98:ac:75:ae:b4:79:6f:5b:51:b0:37:98:b8:93:ea:11:cd:
34:db:bc:86:cc:cb:f2:95:48:22:63:7f:b7:04:2a:6b:4b:a3:
eb:2c:18:21:02:11:1d:d9:e1:5e:b1:58:32:17:5f:a0:d3:96:
a9:97:af:c7:06:57:64:af:62:fd:ab:d3:f2:45:37:0c:2d:7d:
d3:c3:ee:44:8f:72:7b:03:83:5c:74:5c:4d:84:70:bb:8d:33:
cc:a2:da:3d:48:e4:46:d6:01:f2:4d:9b:f6:87:5c:12:38:2c:
c7:39:26:12:37:ab:4a:90:40:af:41:b0:c5:6c:aa:5c:b9:f3:
58:4b:67:7a:5c:c2:ed:03:7f:31:6c:64:c3:24:bd:f7:d0:0c:
21:50:a1:e6:a9:cd:d0:5b:d5:05:5c:0c:8e:c0:52:38:01:3e:
1f:29:18:99:5e:1d:fc:b7:27:61:8e:a7:9d:00:fe:25:f7:62:
20:07:1b:70:ef:fc:d6:6f:dc:a9:a6:8f:d5:bf:db:6a:ce:d3:
2b:0e:3e:e5:7f:9c:46:cb:99:da:25:1c:09:e5:e3:db:9c:1e:
b2:64:75:13:f0:f2:47:7a:df:3d:87:f1:a5:92:49:7c:d2:d5:
fd:bd:61:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:51 2026 by rpki-client