Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145036.roa
File: AS145036.roa (raw, json)
Hash identifier: iOMcNZFL26Y3LY8D/l65wwESTdeAGMGg/hBYVgcm3fQ=
Subject key identifier: 75:E5:51:06:E6:B2:14:D5:1D:6C:0C:51:E1:1D:11:AE:6E:B2:A0:F9
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7676B611331908F4516A352660B5DDFAC96517EC
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145036.roa
Signing time: Tue 26 May 2026 06:30:42 +0000
ROA not before: Tue 26 May 2026 06:25:42 +0000
ROA not after: Tue 25 May 2027 06:30:42 +0000
asID: 145036
IP address blocks: 240a:a952::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:76:b6:11:33:19:08:f4:51:6a:35:26:60:b5:dd:fa:c9:65:17:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:25:42 2026 GMT
Not After : May 25 06:30:42 2027 GMT
Subject: CN=75E55106E6B214D51D6C0C51E11D11AE6EB2A0F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:29:b7:9b:d0:90:2c:0a:3c:0f:35:b3:d6:b3:
2b:1c:3c:1c:28:a1:3e:5c:79:37:91:a1:53:de:94:
89:4e:4d:c6:77:87:11:00:5f:c9:ab:85:3b:54:13:
54:d3:37:e6:07:ff:50:ad:3a:39:1a:49:82:ba:13:
5e:16:2a:a0:3c:05:0d:e8:48:9c:74:76:d8:67:51:
6e:67:70:27:90:e4:de:c1:00:59:73:25:4a:47:96:
db:a0:4a:6b:c7:ed:38:56:53:27:d0:aa:1a:25:02:
0f:32:e9:7c:94:bc:6c:26:d5:57:7f:d2:1b:b7:fc:
a9:f3:70:ac:8b:99:95:42:c3:f6:ad:c5:fb:2d:ca:
f5:62:7f:b3:ef:ee:17:7a:c3:a2:df:fc:4c:4b:f7:
fd:8b:a2:5a:b9:75:02:6d:dd:4b:09:12:ce:94:60:
f9:f4:f0:49:86:d6:dc:14:79:c7:6d:f8:3f:43:d6:
96:0b:07:6f:4c:4f:2f:21:75:b0:21:82:46:a3:59:
27:a8:3a:36:1b:2d:1c:b2:64:08:48:75:40:dc:e7:
a6:f6:09:68:80:80:e8:e4:96:07:a9:4b:94:7b:33:
9a:b7:55:a0:0e:36:17:62:cd:32:21:fb:70:35:2a:
97:88:bb:1d:38:a4:a7:70:7c:af:8f:91:dc:67:ad:
bf:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:E5:51:06:E6:B2:14:D5:1D:6C:0C:51:E1:1D:11:AE:6E:B2:A0:F9
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a952::/32
Signature Algorithm: sha256WithRSAEncryption
5c:17:49:53:d6:b4:82:93:82:b9:95:b9:03:9b:7c:52:35:1f:
78:f6:09:ee:05:b2:91:28:f6:03:87:a7:73:c6:e5:f3:28:33:
88:ea:27:ef:91:79:f4:85:c4:54:52:9e:50:05:10:44:5a:c7:
50:4a:2f:75:3c:ee:80:94:9b:ba:dd:13:bf:b4:db:7e:ff:25:
05:d3:e6:46:cb:28:8d:54:cd:34:10:60:37:27:c0:f6:be:d5:
de:09:c8:e2:ca:dc:0a:f8:f3:e0:cc:58:50:df:88:6c:23:87:
68:52:a2:30:b9:b4:99:48:4c:be:96:b2:29:d1:5d:b3:2a:4f:
69:04:c0:e9:28:a4:19:08:21:29:78:fc:f2:ac:4d:87:fe:98:
67:12:a3:5c:bf:fd:16:fc:27:64:72:cd:e9:c8:d6:df:2e:fd:
0f:cc:df:9b:55:33:c8:07:29:f1:46:54:b3:1f:25:e8:0b:41:
d7:0e:e9:8b:dd:c3:0a:2b:78:e3:17:45:92:60:dd:7e:6d:8f:
c4:df:cf:91:e7:92:25:ff:e1:4f:24:db:d5:3a:57:18:05:50:
e6:ab:14:72:06:b1:d2:5f:d4:e3:09:af:0c:2c:fb:9f:31:b9:
53:d7:57:71:93:1a:5f:41:3f:0e:a5:41:cd:79:78:de:a6:41:
fe:be:cf:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:24 2026 by rpki-client