Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145021.roa
File: AS145021.roa (raw, json)
Hash identifier: IRzD/SPg1RpfTFwjnPF/41AxOZ43jDeHz7mqhfgj4Gw=
Subject key identifier: 32:52:E0:92:5F:CF:D4:87:CF:87:DB:4C:85:6B:36:B1:B3:EE:2B:51
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0754183DE2CE8A8406AD654E8A43F7627B03A003
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145021.roa
Signing time: Fri 22 May 2026 07:24:36 +0000
ROA not before: Fri 22 May 2026 07:19:36 +0000
ROA not after: Fri 21 May 2027 07:24:36 +0000
asID: 145021
IP address blocks: 240a:a943::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:54:18:3d:e2:ce:8a:84:06:ad:65:4e:8a:43:f7:62:7b:03:a0:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:19:36 2026 GMT
Not After : May 21 07:24:36 2027 GMT
Subject: CN=3252E0925FCFD487CF87DB4C856B36B1B3EE2B51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:e8:74:4a:ab:ae:e3:b6:79:40:d7:84:9f:4e:
1d:86:1b:30:7d:58:78:b3:24:ae:07:f4:e2:79:55:
af:8f:75:98:35:cd:5d:f1:44:79:94:b9:8f:1c:68:
59:df:e1:4f:fa:a0:f8:8b:cf:18:a6:f7:11:9b:bd:
63:30:f0:76:ff:82:bf:b1:59:f1:89:2d:f6:92:43:
8d:a2:ec:48:ee:fc:fb:4b:72:6e:99:3b:46:78:80:
7b:54:26:fd:d5:8f:8a:8d:a7:4e:e6:79:24:0f:c6:
26:78:54:27:bb:42:cd:5a:85:75:69:20:f8:00:c5:
b0:62:cf:b0:61:c3:8b:4a:1d:7c:7f:ac:6b:f6:82:
fd:d4:74:59:8e:4c:8d:6b:61:29:15:31:dd:aa:9a:
9e:d9:69:c3:b3:91:d4:12:06:18:9a:af:e2:8f:1d:
87:1a:3e:75:92:1f:b4:43:aa:c8:c6:34:e0:e2:a6:
ef:3c:35:00:9b:93:df:4a:41:0f:1a:be:e9:5d:cd:
c6:23:5e:cb:0e:20:f4:85:16:f4:31:50:6a:7d:1d:
14:ce:80:30:67:ba:9d:86:3b:ba:b4:06:8a:4c:e5:
c8:7c:ae:b1:57:63:2d:44:c2:fc:07:31:a8:ca:1c:
47:d0:a7:b8:37:a1:52:76:af:27:89:80:24:58:4e:
67:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:52:E0:92:5F:CF:D4:87:CF:87:DB:4C:85:6B:36:B1:B3:EE:2B:51
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145021.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a943::/32
Signature Algorithm: sha256WithRSAEncryption
0e:27:53:d5:bf:5b:2b:09:ed:25:b4:91:1a:9c:61:02:9c:5d:
fd:5e:34:43:65:f2:f0:28:6f:22:16:8b:5a:8e:a0:1e:51:d7:
fe:1c:e7:45:b6:ea:b9:83:cc:a3:10:a4:86:5d:db:f3:cf:ed:
be:7e:09:aa:5c:2d:b7:44:c8:99:dd:0e:79:b5:f8:7e:20:28:
06:00:b3:0e:f4:4d:5d:2b:2c:f8:c9:dd:c2:00:87:d8:94:22:
cc:d1:fb:4a:80:47:9e:dd:fa:d4:04:2a:77:b9:09:fc:b8:ab:
dc:5d:38:b7:63:75:a3:b7:76:6f:c0:fb:2f:d6:09:93:3a:48:
9d:34:37:87:da:e5:92:48:9c:e2:a6:fe:b5:4a:31:9b:ea:67:
ea:c1:8c:c9:dd:72:62:2b:d6:fc:d8:be:37:12:c7:a2:57:c9:
21:0b:b6:15:83:57:a1:73:24:ff:e7:97:24:b4:e0:dd:d3:1c:
49:4d:19:f8:e1:e4:16:bf:c6:48:11:67:f9:a8:b4:40:78:83:
41:e3:f0:23:e5:c5:da:1f:4c:86:a2:f9:6d:ee:5b:88:fa:12:
6f:06:a7:cb:06:c5:8b:2f:64:a9:a6:8b:d1:bf:0d:1b:fd:94:
07:21:28:c9:80:d9:42:95:c6:90:5a:e4:3d:0c:ff:b2:49:35:
df:83:65:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:58 2026 by rpki-client