Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145454.roa
File: AS145454.roa (raw, json)
Hash identifier: azgOjxPSvE/u4AMa/10lUYBGwwY2T1+R6ceAkpb0Feg=
Subject key identifier: EF:22:F2:FD:8B:11:19:31:1A:64:5E:36:42:EC:C3:A6:76:C8:38:F8
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4B3297ECEFA32A019A2C661A88FC5291553CF673
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145454.roa
Signing time: Fri 22 May 2026 04:27:04 +0000
ROA not before: Fri 22 May 2026 04:22:04 +0000
ROA not after: Fri 21 May 2027 04:27:04 +0000
asID: 145454
IP address blocks: 240a:aaf4::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:32:97:ec:ef:a3:2a:01:9a:2c:66:1a:88:fc:52:91:55:3c:f6:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:22:04 2026 GMT
Not After : May 21 04:27:04 2027 GMT
Subject: CN=EF22F2FD8B1119311A645E3642ECC3A676C838F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:66:bf:c6:4f:93:a2:c6:0c:b4:b7:e6:86:77:
62:dd:fa:5a:01:ae:aa:cc:e7:a3:ff:3b:93:a1:ce:
09:45:58:d2:53:94:75:23:af:eb:de:99:0c:5c:8e:
f9:8a:dc:ed:9c:92:a9:ac:bf:37:51:c7:8c:8a:25:
b0:2f:81:7f:3f:4a:d7:85:93:b2:f5:de:14:20:d5:
26:24:43:91:09:11:18:11:18:9c:00:b4:1a:12:3f:
31:ad:f7:d2:70:6f:42:be:dc:19:fc:de:da:7c:7a:
00:26:ea:7b:71:4b:43:4f:30:9d:37:e5:af:c3:ba:
a2:f0:7a:77:1d:1f:9e:7d:84:a3:57:1f:f5:ec:80:
ce:79:ff:1a:87:17:09:c7:d2:63:6d:ab:21:13:7b:
33:cc:4e:da:d8:b4:92:d0:be:8f:8d:5f:05:0d:0f:
12:4d:8f:f6:a5:d2:47:5a:07:71:22:0b:bc:f2:02:
83:dc:4c:c9:64:1b:78:01:ba:38:74:b2:e4:c2:69:
e3:b1:06:96:ca:e8:b9:37:74:84:86:43:77:66:2c:
9e:80:32:02:76:50:b1:ef:d9:f1:8a:d5:ff:ee:71:
f0:2e:67:1c:a7:0f:61:9f:29:19:b8:00:78:40:5c:
a9:cd:b6:f9:0c:ff:41:05:07:61:41:5e:03:ce:e4:
e4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:22:F2:FD:8B:11:19:31:1A:64:5E:36:42:EC:C3:A6:76:C8:38:F8
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145454.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aaf4::/32
Signature Algorithm: sha256WithRSAEncryption
b3:34:d4:d0:20:75:19:d6:d1:26:af:a3:7d:17:af:77:ef:a2:
38:c0:1a:72:a1:06:2f:3b:0f:06:1f:75:e9:50:5b:3e:ae:f8:
b0:fa:cf:a2:17:30:7f:6a:c7:2c:60:11:e8:f9:ab:21:74:f8:
28:6f:27:67:7e:8a:7f:e9:c6:cd:a0:59:9f:9b:ea:21:ee:98:
d1:94:9b:3d:92:2b:39:18:63:65:c1:9a:86:f8:00:01:28:a4:
6e:b5:8e:da:f4:2f:2d:3c:ef:67:39:d2:0d:41:ee:b2:66:d3:
c2:70:89:c2:fd:9e:63:08:b9:71:b6:7d:2d:ec:aa:6a:9d:0c:
dd:a9:29:fd:51:75:81:5d:6d:5c:cf:4e:dc:db:4e:b3:1b:90:
15:47:08:6c:4f:58:54:e7:58:e8:e6:e3:c0:aa:9c:cf:88:54:
0c:66:72:d4:db:63:76:61:4d:4e:fe:17:b1:06:2d:d3:f3:ba:
fc:5b:fa:2d:71:57:5e:c4:06:fc:28:d2:7b:50:9b:52:52:b1:
df:ed:20:62:dd:b2:21:bc:d4:90:cf:ec:76:b1:ab:30:26:39:
b2:bd:80:e1:f0:d6:d2:a0:08:40:97:3d:2c:04:91:90:51:77:
ad:28:7b:3b:1d:9a:42:3a:86:79:15:fd:9b:9d:1a:ee:55:fc:
27:79:63:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:22 2026 by rpki-client