Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145447.roa
File: AS145447.roa (raw, json)
Hash identifier: t1IrMC0qVVLelUfgyXweWr//pps774dcAYnMQrjjxco=
Subject key identifier: 11:46:7B:EC:93:A0:73:CD:3E:8A:B1:C3:51:F0:C0:E4:29:AC:8F:4C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 02859B1F2550CB61E928762711F8F5E24F9AF523
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145447.roa
Signing time: Fri 22 May 2026 04:27:13 +0000
ROA not before: Fri 22 May 2026 04:22:13 +0000
ROA not after: Fri 21 May 2027 04:27:13 +0000
asID: 145447
IP address blocks: 240a:aaed::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:85:9b:1f:25:50:cb:61:e9:28:76:27:11:f8:f5:e2:4f:9a:f5:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:22:13 2026 GMT
Not After : May 21 04:27:13 2027 GMT
Subject: CN=11467BEC93A073CD3E8AB1C351F0C0E429AC8F4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f0:6f:a1:1b:a0:7e:55:16:3c:ac:7f:85:60:
a3:c1:c7:44:54:a5:c1:f6:12:14:dc:a5:be:07:30:
1d:3f:2f:35:9e:57:37:aa:fa:63:fd:65:c9:16:f9:
c5:59:5f:84:b3:d7:0b:65:7d:c3:32:ba:a1:7f:bf:
14:cb:22:24:ce:df:f8:60:cb:4a:27:5d:2f:58:4e:
fc:75:91:b7:21:34:58:9d:fa:3a:61:6b:ca:34:ea:
cf:11:62:a6:3a:da:b6:48:93:bd:40:1c:f9:7c:d7:
49:fb:3f:fc:ce:b6:35:53:c4:5d:86:f2:8b:4e:02:
22:04:d8:52:ae:7b:d5:c9:c4:4f:09:dc:3e:42:1f:
c0:29:fb:e1:c2:91:f3:3c:09:ba:4c:38:c6:17:8f:
50:14:34:71:13:1b:e6:a9:67:e0:01:8b:19:44:65:
bd:6b:71:54:e7:26:e4:80:d2:14:2a:8c:9b:b0:4d:
24:ff:23:33:27:19:23:ac:f3:da:05:dd:f5:b8:0b:
e1:24:1d:df:cb:62:23:cf:a5:09:ee:87:77:c4:5c:
43:74:92:9f:e9:7e:78:b1:58:3d:6d:6a:46:62:5a:
83:db:8d:39:18:f1:23:d7:ed:94:e5:3e:df:d2:34:
17:44:76:55:79:a8:39:6d:89:2b:b6:13:20:37:02:
8a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:46:7B:EC:93:A0:73:CD:3E:8A:B1:C3:51:F0:C0:E4:29:AC:8F:4C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145447.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aaed::/32
Signature Algorithm: sha256WithRSAEncryption
b2:83:42:0b:4e:93:27:7e:1c:2b:a2:48:cc:71:b6:f6:28:d4:
45:50:3b:4b:98:d1:63:53:ea:38:f1:a0:87:e1:1f:25:26:dc:
74:f7:54:77:4d:a4:3b:5a:9f:d8:45:8d:3c:4a:c4:97:b1:cd:
d3:3f:d5:f9:fb:86:9f:13:f0:c7:07:07:ef:12:40:6a:7e:6f:
63:26:42:d9:5a:c0:34:0a:52:f9:17:af:59:60:f4:cc:06:69:
d4:2a:40:71:b7:bc:52:40:ca:be:c5:bf:e1:52:f6:28:96:95:
7c:68:43:ac:29:e9:98:f3:85:78:3f:cc:8e:f3:8d:62:6a:5a:
ea:9f:6e:06:7b:5b:d7:08:93:81:da:cc:ab:ce:8d:9a:74:da:
46:1b:f0:1a:4f:77:be:a8:f6:56:3b:6c:69:35:96:4c:69:60:
b2:4b:d7:53:7c:00:60:a7:ef:61:c5:51:fe:fb:4a:32:b7:f2:
88:c4:64:82:8c:75:8e:b1:50:f5:05:2b:f0:00:af:67:d1:82:
4d:67:28:a1:b5:71:7b:13:46:d4:0d:c6:ab:8a:ae:9c:ae:ee:
22:c2:c4:54:9f:c4:ea:ee:94:00:3f:ab:13:26:74:82:3e:86:
8c:91:7b:62:2b:b3:ad:b2:b9:7b:35:25:83:14:e9:c4:29:56:
e0:e0:ad:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:52 2026 by rpki-client