Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145122.roa
File: AS145122.roa (raw, json)
Hash identifier: X3JDLY92QTWfW3Q7L+RVIJ7lm+SgK2jKMs2a5PfGEVs=
Subject key identifier: 22:26:B9:52:C6:5B:2B:70:70:52:49:3E:DE:B0:4A:E8:44:04:47:D1
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7CF570FED9A05A5EAD7E5B53FE16D3B5D86C07B9
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145122.roa
Signing time: Mon 25 May 2026 01:38:33 +0000
ROA not before: Mon 25 May 2026 01:33:33 +0000
ROA not after: Mon 24 May 2027 01:38:33 +0000
asID: 145122
IP address blocks: 240a:a9a8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:f5:70:fe:d9:a0:5a:5e:ad:7e:5b:53:fe:16:d3:b5:d8:6c:07:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:33 2026 GMT
Not After : May 24 01:38:33 2027 GMT
Subject: CN=2226B952C65B2B707052493EDEB04AE8440447D1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:cd:e7:af:fd:98:9f:10:4b:58:33:90:6d:76:
35:45:06:c4:b5:35:1b:2f:5e:ed:f3:9b:73:0d:20:
fa:72:a0:94:e7:0e:b6:1b:45:cd:dc:37:16:75:39:
40:8b:c0:db:c6:0e:8f:41:46:ec:25:d4:0d:c2:8d:
d9:89:6d:4f:55:a9:89:54:1f:2f:13:0b:94:c6:ad:
3b:e0:1b:b3:e2:ae:94:57:b9:0e:c5:39:a7:b8:ee:
9c:b5:c7:a1:ce:ec:73:27:29:4c:61:b6:05:3b:2d:
03:2c:c4:f0:b8:f1:f2:f4:83:f4:d6:c2:2a:a9:73:
9b:69:53:3f:60:de:fa:33:11:8a:8d:8b:50:29:f8:
e9:dc:da:33:c1:98:34:31:74:f2:c9:bc:5b:2c:a7:
c7:f8:07:c6:c0:b1:d9:3f:5e:ee:8a:90:3b:34:d4:
af:05:d4:fa:0c:3e:52:a7:41:f2:97:ca:fc:d5:d8:
62:dd:fa:c4:a3:68:3b:b7:e1:ec:24:4d:c2:b2:c6:
ca:65:c7:18:32:0d:7c:e7:4c:04:bd:05:f0:ae:4a:
81:7c:4e:c3:56:89:06:98:a9:33:97:67:a6:15:2b:
1b:5f:7b:3e:95:16:6f:ab:35:43:eb:93:1e:b0:e8:
55:52:63:1a:30:ab:21:7a:81:dc:b3:9c:f6:89:33:
c2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:26:B9:52:C6:5B:2B:70:70:52:49:3E:DE:B0:4A:E8:44:04:47:D1
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145122.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a9a8::/32
Signature Algorithm: sha256WithRSAEncryption
15:c3:7b:1d:37:63:39:02:a8:06:a1:00:ef:15:58:8e:28:68:
e6:84:28:6c:a0:1a:21:c3:27:0d:b5:e1:64:68:08:cc:65:c5:
56:98:fe:73:40:99:9a:11:03:49:ca:3f:94:76:16:07:bc:ad:
49:52:3a:4c:55:dc:18:e2:21:08:ff:e4:8c:77:d6:b4:ee:eb:
3f:e1:dc:93:91:f5:ae:15:81:de:fb:fd:56:e0:fe:d7:0b:b5:
38:ef:2a:16:aa:7b:b5:85:c0:07:35:2b:56:8f:9c:cc:3e:cd:
01:49:ac:fe:d1:78:b1:79:15:50:39:02:71:b3:34:a3:d8:18:
79:37:97:4b:2e:f1:f2:18:97:ef:55:e1:c5:e3:c7:0e:43:6a:
70:ad:c4:50:b8:a3:93:a9:2a:ac:11:d8:c6:eb:95:3a:19:8b:
cf:8d:4a:71:7c:7e:46:70:58:38:0c:1c:02:a9:5e:20:78:f3:
b6:7b:5d:b9:26:4d:be:a8:34:7f:97:b1:e5:09:22:01:67:94:
67:2e:97:9c:ef:18:5e:c7:60:41:bc:fc:4b:38:b4:fd:74:21:
d6:1f:ca:b9:86:d5:0b:01:db:09:c1:00:9b:41:13:50:4f:94:
71:49:34:b6:48:ef:dd:c8:ba:85:e5:c8:ef:23:be:50:32:59:
1b:da:5a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:47 2026 by rpki-client