Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145443.roa
File: AS145443.roa (raw, json)
Hash identifier: lByUJVhbanU4PNTxe/D1najVmUpVoiRHZKnv3bSzDpw=
Subject key identifier: 1D:8C:9E:55:3A:AD:8E:8D:CA:B2:47:42:52:96:61:2E:7C:5D:5F:68
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 068E40F6F1C3A50A9F61D8187ADDC8A024F33AB8
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145443.roa
Signing time: Fri 22 May 2026 06:46:09 +0000
ROA not before: Fri 22 May 2026 06:41:09 +0000
ROA not after: Fri 21 May 2027 06:46:09 +0000
asID: 145443
IP address blocks: 240a:aae9::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:8e:40:f6:f1:c3:a5:0a:9f:61:d8:18:7a:dd:c8:a0:24:f3:3a:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:41:09 2026 GMT
Not After : May 21 06:46:09 2027 GMT
Subject: CN=1D8C9E553AAD8E8DCAB247425296612E7C5D5F68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:b3:ef:74:c0:d1:ca:6f:08:78:5c:6a:a6:f2:
7a:f8:d2:63:cc:a5:cc:46:13:7b:0e:55:47:0c:a9:
8a:cd:8f:f3:23:c2:bd:08:ef:d6:2c:57:c2:01:93:
ca:d0:95:4f:ae:57:7b:e2:30:a5:5e:67:8d:75:20:
e1:a5:95:b5:02:bc:71:84:1f:a5:af:67:6e:5d:40:
32:00:dd:2c:63:82:c9:c5:42:c5:41:35:63:1d:ba:
cc:84:c0:be:68:7b:3d:29:a4:43:d5:d8:39:e5:20:
10:47:f8:43:ef:e0:ec:a0:c0:71:21:96:f5:fd:c6:
82:20:04:ff:c3:8c:b4:20:03:5d:0d:3b:78:4a:6d:
63:6a:62:1a:27:ec:fa:62:a9:b8:0a:85:9b:6e:46:
fe:48:76:a6:af:46:82:ce:9a:48:cf:15:0b:f0:1b:
6a:40:c5:21:c5:d1:b4:5e:ca:b3:98:1d:04:24:8a:
cb:25:ce:77:37:2f:f2:44:2e:9f:28:94:e3:50:61:
9a:1d:0e:bc:b8:71:a5:81:ff:7e:33:67:05:a5:fe:
08:22:d7:78:15:d3:81:8b:fd:e4:10:ac:ea:72:68:
42:00:c7:d3:a2:97:13:a3:e4:3f:64:ef:fa:ac:e5:
63:75:2c:dd:5a:0f:bf:4a:a0:95:a1:e8:44:8a:26:
4a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:8C:9E:55:3A:AD:8E:8D:CA:B2:47:42:52:96:61:2E:7C:5D:5F:68
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145443.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aae9::/32
Signature Algorithm: sha256WithRSAEncryption
46:31:3a:b7:bd:9b:1d:ff:3d:c9:4d:d2:0b:ce:49:1e:41:7f:
9b:70:f9:e0:f5:d1:cd:d9:db:7e:8a:a6:08:12:af:2d:23:af:
47:0d:92:13:60:13:8b:11:d3:39:46:f7:54:33:15:5f:19:f5:
af:38:f6:29:63:2a:a8:8b:28:32:d6:69:f6:07:60:c4:e5:39:
95:cb:91:a2:3d:c5:dd:72:11:43:e4:78:f0:49:db:0f:0b:0d:
26:7b:5b:35:35:20:46:c9:ef:1d:4f:9d:5b:55:44:33:40:14:
db:a5:f7:dc:2b:a4:8c:78:b1:da:35:fe:b2:b0:62:e7:7c:de:
04:da:d8:fa:2f:97:aa:bd:03:b3:0e:88:2e:f7:8c:3f:92:fb:
73:3d:48:4f:e1:51:e0:c6:70:20:da:01:ff:3c:ef:a6:fe:da:
ce:67:af:1f:10:8a:6d:31:d0:36:23:50:18:60:d4:e9:5d:eb:
fd:82:fa:5d:28:8b:12:bb:ec:37:22:65:a4:91:b3:b4:e3:28:
60:24:e2:be:eb:e5:aa:ea:ca:b2:09:10:ca:98:7f:32:d9:2e:
af:65:ea:21:7b:f7:93:29:0d:a3:5f:6c:0b:78:5f:e8:98:cb:
3f:96:75:f5:41:0a:7c:51:98:31:7c:8e:5f:eb:1b:f3:2f:45:
00:6d:15:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:12 2026 by rpki-client