Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145505.roa
File: AS145505.roa (raw, json)
Hash identifier: GS24rpPGDmsUKUYdWjGZeE/DHDLNf9Sv9QQG+PZGSE0=
Subject key identifier: BF:E1:A3:38:2F:59:3C:9D:43:87:6F:D7:B8:36:96:49:C7:E8:63:3E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 378D7A95DDD9AF1AFA8C99A9C2138A8BF09F71E7
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145505.roa
Signing time: Fri 22 May 2026 04:08:26 +0000
ROA not before: Fri 22 May 2026 04:03:26 +0000
ROA not after: Fri 21 May 2027 04:08:26 +0000
asID: 145505
IP address blocks: 240a:ab27::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:8d:7a:95:dd:d9:af:1a:fa:8c:99:a9:c2:13:8a:8b:f0:9f:71:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:03:26 2026 GMT
Not After : May 21 04:08:26 2027 GMT
Subject: CN=BFE1A3382F593C9D43876FD7B8369649C7E8633E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cf:d4:ee:07:88:e0:08:d2:e8:58:11:ec:e4:
8c:d2:df:29:d5:03:30:d2:95:2d:6e:7c:73:cb:d5:
4a:9b:22:b9:87:8c:13:af:59:f9:58:77:05:69:e0:
74:ea:51:57:8f:5f:86:be:1d:5a:dd:b8:6b:c8:1f:
4d:81:26:1a:10:13:ab:5b:24:a8:af:ee:8f:ef:f2:
7e:26:1d:d9:f2:0a:fd:4e:80:d7:97:a2:b7:63:4b:
ad:12:00:18:14:2e:a7:1d:27:b4:fe:9c:53:dd:ae:
62:82:e9:97:65:51:da:29:1d:35:b7:df:e5:49:36:
05:80:7d:ef:d5:e4:3e:33:27:cc:02:4a:6d:01:2d:
d7:31:08:3c:a1:b0:78:54:2f:aa:b5:23:f6:ee:81:
04:99:6c:0a:db:4f:56:a6:8a:16:92:69:2e:f0:9b:
09:a5:92:2c:26:79:38:3b:ff:46:84:10:0a:47:c3:
3e:ff:74:1a:73:18:1e:7d:1e:09:2e:11:1a:67:7b:
cc:94:63:85:10:95:e1:8b:a2:cf:28:9f:94:be:c5:
af:34:1d:27:95:ed:7e:3d:44:f2:e0:37:3f:71:6a:
27:c4:1a:b1:bd:ad:86:7b:60:5e:2a:9c:77:3f:d7:
2a:ea:70:16:a9:5f:9d:ff:84:9a:96:47:03:28:2f:
35:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:E1:A3:38:2F:59:3C:9D:43:87:6F:D7:B8:36:96:49:C7:E8:63:3E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145505.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ab27::/32
Signature Algorithm: sha256WithRSAEncryption
83:7a:6e:d1:23:2c:97:2c:1a:cf:bb:ae:c4:db:a9:8f:5a:88:
ff:1f:3b:a2:7e:ec:fd:58:bf:08:b7:c5:f8:4b:25:2d:bb:17:
5b:0c:b8:3f:ad:00:d9:7c:c9:46:6b:34:30:9a:fb:92:98:d5:
ca:6c:8d:bf:30:2a:ab:f0:0a:32:3d:83:52:fe:43:c0:a5:15:
40:5b:2e:3f:1a:6a:e2:ce:df:6b:92:10:66:e0:5d:8d:02:5f:
b9:20:09:c7:8b:3c:ca:95:b6:f1:3f:de:02:e6:8a:5b:01:42:
57:cf:4d:c9:59:b2:0b:56:ae:2f:24:3e:6f:8f:30:53:e5:cc:
81:ac:2c:d3:b5:b9:f7:38:5f:16:b4:c6:b6:5b:47:e7:90:d5:
88:f4:79:9a:69:15:bb:24:a6:4d:1b:85:16:52:40:ba:8d:d7:
97:7e:7d:9b:60:1a:f9:26:72:ee:cc:16:35:9a:c9:00:0d:77:
6d:06:6b:ae:c2:d4:1d:6b:6f:c7:e2:36:09:1b:ae:5b:1a:5c:
03:95:1d:fe:d2:2b:96:57:1c:68:1d:ca:bb:95:27:30:2f:73:
6d:74:79:ef:2a:a0:72:ea:e0:bb:e3:c4:3c:44:ca:6e:c6:96:
87:a8:ba:55:73:e7:75:d9:70:6a:13:73:b8:ac:f2:cd:f1:30:
7c:0d:f3:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:52 2026 by rpki-client