Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145538.roa
File: AS145538.roa (raw, json)
Hash identifier: QKTKkIKhBJfKf6Basny5GDEVItZSvHMfanYKpYtgkUc=
Subject key identifier: 13:C3:A3:B6:F5:41:BB:B0:F6:06:96:E5:7B:20:B0:BB:C0:9A:D1:DA
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6E9579BEF93EE4B90F0802EE8E85FAFBA8BF9C82
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145538.roa
Signing time: Mon 25 May 2026 06:28:33 +0000
ROA not before: Mon 25 May 2026 06:23:33 +0000
ROA not after: Mon 24 May 2027 06:28:33 +0000
asID: 145538
IP address blocks: 240a:ab48::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:95:79:be:f9:3e:e4:b9:0f:08:02:ee:8e:85:fa:fb:a8:bf:9c:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:33 2026 GMT
Not After : May 24 06:28:33 2027 GMT
Subject: CN=13C3A3B6F541BBB0F60696E57B20B0BBC09AD1DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f6:1d:e7:ce:da:13:30:25:d5:ad:10:67:02:
1d:da:7d:c2:00:98:6a:7d:0b:d0:f9:17:c3:bc:95:
2b:6a:22:66:8a:d2:0e:ac:7f:85:1a:da:f6:96:9d:
14:04:3a:36:da:e0:98:5a:00:ef:ac:19:80:af:a5:
57:cd:26:c2:6a:ca:b2:fb:9e:d9:2d:b8:b6:50:ad:
73:ea:0a:e4:c4:5a:85:a9:9a:60:a4:f6:cf:99:13:
35:4c:01:15:9d:ff:9a:22:bd:21:89:a8:34:2e:4b:
53:8f:71:07:b2:33:78:8f:d0:98:58:5a:f5:b3:03:
f5:17:4c:b2:59:92:02:c6:26:7e:e1:bf:e4:68:d6:
13:08:b1:20:3c:95:a9:73:c9:fd:2b:30:7b:9c:69:
a4:e2:0a:81:7c:59:24:03:ef:e5:1e:59:74:a4:cf:
c4:ee:19:51:68:6e:c0:c9:78:50:62:71:d9:03:80:
a5:65:c5:77:64:1c:1e:14:f0:52:6e:49:f6:40:91:
92:92:92:08:36:70:40:75:b4:44:b0:7b:33:95:c9:
5b:e8:fa:ea:7f:15:3f:c1:cf:62:bc:34:37:d9:4c:
6c:38:6c:61:b8:2f:9c:4f:8d:3e:14:60:b1:b9:0b:
0a:e3:cd:73:6b:96:55:2d:e2:9d:13:2a:72:6b:75:
35:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:C3:A3:B6:F5:41:BB:B0:F6:06:96:E5:7B:20:B0:BB:C0:9A:D1:DA
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145538.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ab48::/32
Signature Algorithm: sha256WithRSAEncryption
52:82:33:c0:ba:95:9d:64:da:03:dd:65:e0:74:05:7f:2c:22:
e6:00:8a:4c:eb:d4:a8:00:d4:a6:d4:e4:c8:24:8b:65:2d:90:
da:1e:45:5e:9b:c9:de:4e:89:2e:ec:00:ef:95:25:4f:ba:92:
02:e7:db:d6:82:fb:65:23:9e:37:c0:b6:cb:db:ea:3b:f9:81:
18:4a:74:a3:53:07:e7:20:b0:99:44:0a:ed:e8:5e:05:38:3e:
26:17:84:c0:2d:1f:0b:e0:24:67:ee:51:37:95:7c:3e:66:35:
b9:0d:71:17:c3:31:29:f1:58:5b:25:ef:72:b6:8e:8a:b3:be:
44:77:6c:6c:69:69:17:4b:35:6c:b4:dc:87:eb:b6:21:1a:c7:
29:b7:4d:a0:23:fe:23:93:43:96:f3:ad:98:01:79:75:0a:36:
e9:7b:49:b4:db:ec:7e:e5:eb:ea:00:65:fe:9e:86:68:85:37:
0f:78:ba:70:f7:b0:19:78:d9:47:18:83:a8:2d:ee:15:11:df:
fb:cb:2e:c4:2e:69:4d:9c:74:74:5f:53:b7:5e:8e:52:e3:72:
ae:74:7a:a2:0c:b6:42:db:9b:f2:ad:d1:81:d9:63:9c:98:42:
b0:50:84:9e:df:b2:a0:6f:d2:74:68:7c:81:2c:a5:56:b7:65:
ca:39:35:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:24:29 2026 by rpki-client