Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145024.roa
File: AS145024.roa (raw, json)
Hash identifier: u0UyTzuI50KjwcBDIjiniGiV08bGY2LJIjJfC4VGuDw=
Subject key identifier: 8F:E5:6C:DA:9A:48:4B:D3:D3:35:1B:DA:E2:60:8B:AB:74:68:05:9B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7EA72FDD0A6DCFAAE338F34D35ECEF57E2B9C8E7
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145024.roa
Signing time: Mon 25 May 2026 06:28:07 +0000
ROA not before: Mon 25 May 2026 06:23:07 +0000
ROA not after: Mon 24 May 2027 06:28:07 +0000
asID: 145024
IP address blocks: 240a:a946::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:a7:2f:dd:0a:6d:cf:aa:e3:38:f3:4d:35:ec:ef:57:e2:b9:c8:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:07 2026 GMT
Not After : May 24 06:28:07 2027 GMT
Subject: CN=8FE56CDA9A484BD3D3351BDAE2608BAB7468059B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:dc:77:bc:8c:d3:70:94:a6:17:50:5e:65:cf:
83:c6:49:b8:c5:b3:56:d6:a9:7a:d9:06:ff:55:f6:
1c:53:a8:02:d0:00:65:6f:d3:b1:11:56:a7:a7:68:
99:3d:39:b8:da:8f:f2:78:8a:9e:e6:91:a1:1f:12:
07:3a:05:4a:46:9b:df:b1:dd:73:21:78:b7:23:e7:
55:1d:fb:a1:8f:cb:f3:d4:55:7f:2e:16:df:41:e5:
63:a8:e0:aa:73:eb:1e:e0:95:a2:98:93:29:b0:ce:
bf:e1:55:d9:8d:38:eb:e9:6c:25:80:12:8a:6a:68:
bb:4b:80:fa:84:94:6a:43:45:3c:ac:9f:19:a9:1b:
1c:a0:2c:dd:4c:c2:e7:ef:72:f1:f4:79:28:4c:ab:
86:cb:04:27:d9:37:8b:a5:36:46:61:e9:75:30:33:
8a:7a:0d:64:1d:00:a5:31:05:4f:24:e6:36:43:ae:
87:f9:62:a2:13:b9:98:f9:7a:ae:75:2c:13:59:a4:
46:17:92:a1:3f:74:c5:00:36:f5:72:00:2f:5f:2b:
bc:cc:d7:27:88:9a:c8:b2:1d:c1:c4:bf:8d:1c:3d:
7b:f7:56:5a:d3:ef:05:12:96:48:ef:c6:72:1c:35:
87:36:d2:82:d1:2c:13:a6:4a:c4:b9:1f:8e:e2:a2:
85:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E5:6C:DA:9A:48:4B:D3:D3:35:1B:DA:E2:60:8B:AB:74:68:05:9B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145024.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a946::/32
Signature Algorithm: sha256WithRSAEncryption
49:27:27:df:01:09:94:f4:2b:23:c5:cb:5d:f1:18:98:57:32:
16:09:e5:f8:3a:20:c3:70:97:73:b5:b6:7e:a5:6a:85:f2:8e:
26:21:1c:5b:cc:70:3c:2a:5e:12:8d:c5:2c:11:14:ee:90:1d:
ed:ae:23:7a:07:20:f6:b3:8b:59:35:cf:cd:55:00:ec:4f:8b:
7e:02:a5:d8:0d:93:93:72:01:96:93:19:e4:1d:e1:2c:8d:5a:
bc:79:63:99:6f:c6:0a:09:57:85:a2:18:b5:99:b4:26:79:93:
67:d6:81:e0:f3:d1:4b:8e:08:1a:13:ce:5a:25:3b:4a:17:61:
be:31:e9:f7:b7:d2:d5:eb:a0:79:43:c0:61:33:bb:52:85:89:
cd:7c:17:09:ef:fb:f0:4e:7a:57:ea:b0:1e:70:f5:f0:6d:c2:
12:ab:90:9e:35:fb:ea:eb:bf:f9:88:fe:c4:52:f5:9c:ad:a7:
bc:ff:92:be:36:35:b2:f5:24:4f:c5:cc:2e:35:9c:fd:8b:f1:
1c:55:24:73:eb:20:ec:10:26:07:03:04:0d:9f:6d:ec:fe:0f:
8e:56:b3:d3:0c:54:c5:71:58:c6:d0:5d:23:d6:b0:a4:73:6d:
74:ba:96:63:0c:87:cb:b6:38:50:3f:97:ea:8e:99:fd:82:06:
b4:2c:42:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:07 2026 by rpki-client