Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145463.roa
File: AS145463.roa (raw, json)
Hash identifier: AX0ib8v1FBi92UdVGFvqdkb7CgXNFBmqgCDL7iYFkKQ=
Subject key identifier: 27:89:1D:34:C4:21:C3:48:0B:F0:51:96:C8:C6:3D:28:63:F2:25:22
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4D5B89A2AFC6617BAE26AFD862DC11743E5548E7
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145463.roa
Signing time: Fri 22 May 2026 06:58:36 +0000
ROA not before: Fri 22 May 2026 06:53:36 +0000
ROA not after: Fri 21 May 2027 06:58:36 +0000
asID: 145463
IP address blocks: 240a:aafd::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:5b:89:a2:af:c6:61:7b:ae:26:af:d8:62:dc:11:74:3e:55:48:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:36 2026 GMT
Not After : May 21 06:58:36 2027 GMT
Subject: CN=27891D34C421C3480BF05196C8C63D2863F22522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:40:80:62:7c:d1:2b:cf:ad:b4:8a:f6:5b:59:
9d:97:94:78:5c:d0:91:4b:b2:51:70:41:a2:c1:87:
9d:1e:a6:0e:04:24:f6:ca:47:79:7b:72:db:99:51:
5c:a1:57:c9:1c:7a:4e:7f:29:20:64:a8:4c:05:12:
5c:84:50:8c:a5:b1:09:17:d2:03:e8:ce:d8:84:f0:
6a:b2:f1:6d:fd:c0:df:79:8f:f2:1b:54:0e:19:58:
aa:3f:64:59:7d:29:7a:92:39:a4:1d:39:1f:b3:03:
20:80:33:89:ed:23:8f:db:a4:be:46:a7:18:5e:77:
e1:2f:3e:3d:07:83:19:f3:a6:c2:56:4a:b3:26:1c:
4a:58:49:26:30:7a:5d:9c:d6:74:fd:6b:b1:29:a9:
a2:f0:1f:74:28:5a:b4:1f:70:0c:f2:63:be:fe:79:
cd:bf:02:38:2e:5b:0a:4a:6e:b3:4c:31:95:29:45:
a1:80:96:d1:cc:4c:2c:35:d0:7f:60:d0:68:1a:52:
ad:91:29:73:eb:97:ed:9a:27:90:b2:66:5a:31:4c:
30:44:69:3f:46:e5:f8:c4:2e:ef:ba:ae:52:54:02:
e6:26:23:85:be:b9:aa:e1:91:be:53:3e:f3:91:fd:
8d:80:40:63:28:51:44:96:64:32:06:75:39:8a:40:
75:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:89:1D:34:C4:21:C3:48:0B:F0:51:96:C8:C6:3D:28:63:F2:25:22
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145463.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aafd::/32
Signature Algorithm: sha256WithRSAEncryption
ba:66:33:88:ca:a1:d9:db:83:22:da:fd:ed:b5:67:f7:27:85:
8c:54:ed:a1:f3:e2:98:16:37:5a:19:f0:d0:bd:a8:d9:3b:3e:
b3:9f:e9:f1:a3:32:8a:1e:70:3e:8e:ce:b9:b5:65:fe:8c:b7:
c4:1e:e5:ff:eb:51:ac:49:0f:07:39:96:6a:87:18:10:3c:4b:
23:37:76:59:51:9c:55:a2:97:d0:8c:41:0d:12:9c:32:19:2b:
dd:d6:16:51:ce:22:60:cb:67:0c:8c:31:e5:9f:00:5c:dc:f4:
f0:13:3e:96:54:e9:3f:4e:8b:2e:7d:3e:f7:64:da:9f:8b:bf:
3c:71:5b:e1:85:0a:50:d2:52:d1:ac:aa:92:bb:af:4e:21:10:
45:f5:58:a2:04:39:9f:47:84:86:4e:67:2d:3b:f5:85:a8:5c:
5d:11:97:03:47:8a:bd:b8:36:44:64:d8:3a:c4:7c:61:a6:b7:
80:37:53:62:7b:34:0b:5c:10:3b:99:62:b4:71:ab:50:8b:ab:
2a:2f:d5:72:0c:47:85:f8:6b:b9:f1:79:4f:ec:0e:be:eb:68:
1f:c5:8a:41:7e:a5:94:0d:5f:4a:4e:b3:81:61:7c:67:dc:da:
d6:63:05:51:12:c8:e7:36:23:11:2b:4b:4a:ae:20:85:d4:be:
3e:5d:35:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:17 2026 by rpki-client