Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145132.roa
File: AS145132.roa (raw, json)
Hash identifier: IpcFaN1lz+csJIaK16W+2D9Ns0H9MwAFMdgxFyNyDy0=
Subject key identifier: EB:CD:CB:36:A4:F1:E9:28:B5:B4:68:7A:C1:9C:7D:D2:C5:FB:D6:41
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 10B43B8417DD30D3C8FBDED5603B91EE1BCD9650
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145132.roa
Signing time: Fri 22 May 2026 07:32:16 +0000
ROA not before: Fri 22 May 2026 07:27:16 +0000
ROA not after: Fri 21 May 2027 07:32:16 +0000
asID: 145132
IP address blocks: 240a:a9b2::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:b4:3b:84:17:dd:30:d3:c8:fb:de:d5:60:3b:91:ee:1b:cd:96:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:27:16 2026 GMT
Not After : May 21 07:32:16 2027 GMT
Subject: CN=EBCDCB36A4F1E928B5B4687AC19C7DD2C5FBD641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6d:b8:30:19:7d:38:df:be:8c:10:4f:66:ff:
a7:3d:23:a2:1a:30:ea:31:40:da:4c:aa:52:a0:59:
79:00:51:f8:13:9e:69:58:3f:3a:d5:87:e2:5d:c3:
59:c2:f5:a5:8b:09:65:35:5b:bf:2c:31:64:19:f9:
ae:80:c0:e0:50:67:0d:c3:68:1e:71:df:00:1f:83:
96:a6:45:7c:a4:c6:b4:7c:99:1d:1c:27:81:e1:bc:
17:29:15:48:7a:bc:96:4f:54:74:95:01:76:ac:ea:
57:a3:7d:9f:5a:1c:2c:c8:54:10:4c:a3:f6:e1:89:
ac:6c:32:4d:43:c2:6b:03:30:bb:4c:7d:8f:fa:26:
f8:66:1c:97:0a:3e:8a:25:66:5d:ad:ea:90:25:4d:
ca:bc:5c:2c:8a:9d:af:e0:d6:7e:2a:5d:a3:11:b1:
87:17:bb:08:da:af:a5:40:f4:5c:8f:e2:29:ad:94:
97:e0:06:88:2d:00:50:dc:8e:72:fd:49:59:69:9f:
ef:7b:48:7f:cf:b0:a5:95:1d:0d:a1:8a:37:dc:ee:
af:11:77:8c:23:b9:26:e1:4a:fa:d8:ab:f2:40:34:
c7:13:d2:9c:3e:90:81:a6:8d:a2:9c:c0:5b:c2:5c:
0d:dc:5f:02:65:e7:e0:d5:8f:63:91:92:d0:a5:50:
06:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:CD:CB:36:A4:F1:E9:28:B5:B4:68:7A:C1:9C:7D:D2:C5:FB:D6:41
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145132.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a9b2::/32
Signature Algorithm: sha256WithRSAEncryption
25:a0:ef:84:2a:9a:fc:ae:3e:77:07:c3:0e:68:02:51:dd:4e:
24:bc:1b:b3:dd:4f:2a:18:5e:d5:70:82:92:72:1f:01:d8:c2:
8f:6e:4e:01:dd:d7:bc:0c:4c:43:47:aa:5b:b9:1b:58:5c:62:
f2:f2:15:01:94:fa:22:2d:d9:b7:bd:f8:f9:56:f9:81:9c:35:
c6:43:00:63:7f:7f:08:3d:89:dc:6a:d1:3a:1b:3c:c3:69:5d:
8b:92:a8:e6:89:0d:78:23:99:07:b0:4b:ae:14:06:4d:28:f9:
c5:fa:cb:5e:33:d1:e3:03:88:bb:44:c1:39:e3:96:fd:09:d3:
6a:4e:de:2a:b3:a9:16:81:03:a6:81:4e:64:bf:e5:d4:9d:22:
6b:51:f9:b4:10:61:98:dd:78:d1:02:5b:20:5e:67:8a:2c:cd:
59:9b:cf:9b:aa:e3:2f:10:6d:10:55:00:bd:68:d6:01:66:f1:
63:81:4e:02:f5:b0:f8:16:bc:01:c6:35:cb:6d:28:a3:aa:82:
aa:20:56:f2:03:47:57:e2:d4:f2:b7:c7:e8:56:d2:bd:5a:88:
7a:8b:e5:80:c8:7e:fb:18:a7:26:9b:ab:26:e5:f9:37:ae:03:
c1:67:97:b4:90:61:46:42:66:ac:2b:ff:a3:b7:bc:91:4f:59:
44:08:99:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:18 2026 by rpki-client