Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145535.roa
File: AS145535.roa (raw, json)
Hash identifier: iDjRRnGTW8XW5Is+wKUipuSitGA6eXj9uv8TY1je+sA=
Subject key identifier: A8:A5:26:1B:F2:C7:50:9E:27:64:1C:BE:08:9B:69:E0:3C:04:16:71
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6C050572537CD1FAC225804116CADC32DFD67DE6
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145535.roa
Signing time: Tue 26 May 2026 01:13:33 +0000
ROA not before: Tue 26 May 2026 01:08:33 +0000
ROA not after: Tue 25 May 2027 01:13:33 +0000
asID: 145535
IP address blocks: 240a:ab45::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:05:05:72:53:7c:d1:fa:c2:25:80:41:16:ca:dc:32:df:d6:7d:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:08:33 2026 GMT
Not After : May 25 01:13:33 2027 GMT
Subject: CN=A8A5261BF2C7509E27641CBE089B69E03C041671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:bb:76:51:2d:ba:00:8e:03:1b:99:20:40:46:
33:43:70:e2:39:dc:6a:c8:ef:04:80:90:3d:58:c1:
79:4c:41:06:6d:0c:06:43:6f:b0:5c:6b:7b:c5:cc:
35:b5:cf:83:e1:60:40:8a:03:97:ef:10:e5:e5:36:
a1:c2:93:bf:d9:28:ee:5c:33:e8:3e:ee:4c:10:4f:
a1:1e:ad:c8:f8:12:64:db:21:68:ac:a1:25:c3:97:
cf:45:94:72:dc:c0:c6:03:cf:bb:bd:69:41:8b:a8:
4e:64:21:d3:45:33:b0:ce:33:d3:42:4f:3c:b0:85:
64:85:75:ea:a7:5f:06:30:75:2e:b4:a6:c3:cf:03:
b7:0b:98:cc:29:16:27:66:13:70:fd:43:d6:eb:cf:
a5:7e:a8:ff:70:22:9b:6b:28:d4:e7:de:bb:b4:b9:
9c:89:70:93:25:f8:f7:30:7c:15:14:54:a7:68:6e:
46:04:f7:03:c8:a9:ed:1b:48:5d:9d:4a:ff:99:3d:
67:ec:13:12:97:99:0a:ea:28:a6:b6:f1:48:52:4d:
71:b1:43:e0:5a:58:a1:34:35:30:3b:ee:ad:2f:20:
0c:65:4f:d7:2f:a9:2f:7e:29:ce:42:49:2c:e7:57:
34:5a:63:59:77:0f:f7:0d:12:0b:ef:2b:df:07:d1:
22:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A5:26:1B:F2:C7:50:9E:27:64:1C:BE:08:9B:69:E0:3C:04:16:71
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ab45::/32
Signature Algorithm: sha256WithRSAEncryption
ad:be:3c:01:7e:06:f8:18:3d:56:52:5b:60:75:6f:1f:4f:99:
8a:fa:d9:2f:63:4e:9e:32:c1:b4:ed:c3:8a:fc:95:e9:16:38:
18:fb:24:a6:42:30:06:f3:45:2f:fb:31:5d:dd:28:7c:d9:1a:
ea:4a:e2:ed:d2:a3:82:8a:e2:a0:0c:0b:98:85:8e:00:88:2d:
e4:01:72:b4:99:a6:29:b4:fe:86:52:04:e5:42:38:d3:35:34:
a1:fd:99:7b:d7:f7:d8:b9:0e:e2:67:8f:6b:7e:a7:10:1e:55:
0d:69:43:56:d6:46:55:26:d5:44:9a:5e:8c:18:e7:29:b0:2f:
f3:28:7f:8c:36:09:2a:da:88:b0:f8:22:f7:d5:01:29:61:bb:
a4:bf:b2:a5:1b:69:a2:f7:99:e4:ff:f7:f5:0c:88:c8:c0:34:
af:0e:c4:5c:8b:4d:53:5b:05:68:35:8f:10:ab:bf:23:94:55:
49:b1:0d:50:94:96:d9:4f:30:ca:42:22:4c:00:3a:8c:49:d2:
2a:cd:63:54:77:a1:44:97:5d:e4:65:31:39:65:de:29:bd:de:
35:25:cc:8c:a8:d4:e9:f8:41:ef:b6:d7:f9:87:77:fe:78:6a:
63:ce:df:23:e5:7d:f2:be:5c:5e:40:54:6b:23:5e:8d:21:50:
4c:03:54:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:35 2026 by rpki-client