Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145460.roa
File: AS145460.roa (raw, json)
Hash identifier: zhc+yeWBEar9kDsymhdEyqJCjyKPQ/g+KJRncgFzCE8=
Subject key identifier: 98:CA:87:47:FC:32:A7:BC:5E:80:80:C5:68:AF:14:B5:C8:74:06:B1
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 43BC6C7F7C7471BDF862DD3E2A65BDB031051CD2
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145460.roa
Signing time: Mon 25 May 2026 02:22:18 +0000
ROA not before: Mon 25 May 2026 02:17:18 +0000
ROA not after: Mon 24 May 2027 02:22:18 +0000
asID: 145460
IP address blocks: 240a:aafa::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:bc:6c:7f:7c:74:71:bd:f8:62:dd:3e:2a:65:bd:b0:31:05:1c:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:18 2026 GMT
Not After : May 24 02:22:18 2027 GMT
Subject: CN=98CA8747FC32A7BC5E8080C568AF14B5C87406B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d7:4a:30:a5:c6:96:5c:d1:37:0f:1d:4f:dc:
4e:ad:8e:90:e9:38:21:d3:fd:0e:82:95:9e:94:2e:
fa:41:c1:af:c3:fc:41:51:1e:c8:59:5f:92:a4:10:
da:59:52:3f:b4:81:a7:7f:28:81:83:ea:59:6f:59:
82:d1:a6:40:58:d7:3b:0d:f9:e5:3c:48:a0:2d:97:
cd:fb:97:4b:50:e4:13:67:6a:ca:81:ad:06:22:f8:
1b:65:9c:a4:0f:49:ef:8b:8f:55:c6:6d:68:37:20:
b6:74:20:6f:b5:69:c3:27:8c:51:51:f5:b6:43:1a:
e8:e6:ef:25:2e:cd:8a:09:9e:b3:aa:ea:3b:ef:a7:
bc:b8:b4:44:77:52:71:16:f7:2a:fe:51:9a:d2:8a:
3d:21:cc:13:fe:99:d8:ad:2d:a8:74:61:9e:ea:b6:
13:25:32:71:aa:ca:00:51:ec:08:f2:20:a9:20:ed:
af:f2:59:1c:ec:27:54:4f:2b:54:a6:b2:d3:05:f9:
be:31:84:6a:86:16:95:45:e0:f8:96:b5:27:c8:57:
df:c0:a0:44:02:73:45:3c:82:5f:a6:b6:d5:17:f5:
ed:33:61:36:e7:75:1f:a8:58:ce:d1:94:9c:f3:96:
7a:dd:da:f7:5e:52:f9:ac:ed:a9:63:7d:e4:e6:c7:
60:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:CA:87:47:FC:32:A7:BC:5E:80:80:C5:68:AF:14:B5:C8:74:06:B1
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145460.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aafa::/32
Signature Algorithm: sha256WithRSAEncryption
01:63:6c:df:ea:f1:71:e5:fc:7b:e6:54:2a:78:a5:49:a1:cf:
5c:be:62:a9:33:87:9b:a4:3e:77:b9:7e:2e:c1:68:20:46:6a:
2f:4d:c7:6c:f3:74:39:01:99:05:a1:bf:88:36:8c:ea:a4:d5:
c0:19:dc:be:7b:4e:88:9e:e0:cd:a7:68:7a:b1:c1:90:32:93:
f3:0d:4e:ff:45:e3:1b:6c:76:9c:9c:86:98:09:47:12:11:3f:
d1:91:cb:14:50:9f:32:8b:d0:cb:57:b4:88:98:71:05:54:ac:
39:11:e8:84:65:64:1a:80:64:b1:e9:41:c4:28:09:54:1f:bb:
bf:cc:a8:79:1d:90:3f:4a:67:5b:f0:46:c0:8a:a9:67:99:2f:
d6:ba:87:15:24:81:48:e4:e7:99:da:96:cc:88:d2:ee:6b:25:
fb:38:ba:d7:f0:e6:0b:5f:f7:d7:13:80:a0:20:5c:ff:1d:55:
fb:2a:50:6b:8e:42:5b:c3:0d:fd:dd:15:70:9f:2d:92:77:a9:
8e:fe:48:b0:1d:55:bc:4c:8f:72:ae:8e:ab:70:e9:df:86:3c:
15:44:82:50:cc:bf:b1:6f:57:ef:a1:cb:b3:4e:ec:62:99:a5:
cf:83:62:ac:dc:2f:a3:20:e4:7d:ae:27:af:c2:46:08:23:41:
d1:0a:51:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:20 2026 by rpki-client