Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145180.roa
File: AS145180.roa (raw, json)
Hash identifier: loXD70AAsiPCEMf1uA9MG08AnPxCucaC3Hz4MFgr45g=
Subject key identifier: 71:25:49:39:D7:05:A8:76:E2:4E:14:9C:9B:DE:78:05:09:1D:4C:1C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1235D16902CD510ACF73BA2318D41E1376C6A25C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145180.roa
Signing time: Fri 22 May 2026 07:24:35 +0000
ROA not before: Fri 22 May 2026 07:19:35 +0000
ROA not after: Fri 21 May 2027 07:24:35 +0000
asID: 145180
IP address blocks: 240a:a9e2::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:35:d1:69:02:cd:51:0a:cf:73:ba:23:18:d4:1e:13:76:c6:a2:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:19:35 2026 GMT
Not After : May 21 07:24:35 2027 GMT
Subject: CN=71254939D705A876E24E149C9BDE7805091D4C1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:6c:3a:5c:67:9b:ef:90:7e:2c:09:4b:6c:53:
13:50:bb:0c:e5:2d:97:bd:46:1f:22:27:dc:cd:2f:
1c:2f:b0:96:b2:1c:2f:ba:9d:de:2d:57:4f:96:ed:
27:1b:c5:aa:33:6c:3d:81:c0:b0:4b:6d:e8:24:0e:
94:3b:0c:ac:cf:c6:ac:14:28:56:7e:37:78:54:62:
24:c6:ab:3e:78:a2:71:91:65:02:d7:0d:78:34:b5:
ac:71:c3:ef:12:27:e4:27:2a:bb:5e:ba:2b:a8:3a:
11:fb:8b:08:06:16:1d:e3:d3:89:f4:73:5e:e1:f7:
1f:b9:4a:43:0c:cf:a5:6c:6b:e6:2b:06:17:38:9c:
90:54:e7:1b:c0:5b:21:67:23:ed:67:6e:3c:33:19:
d1:8d:78:3e:57:1b:60:f6:d5:89:2c:bf:4b:2a:87:
92:7f:0f:b1:1d:5b:1f:76:0b:15:84:74:d4:81:89:
04:8d:53:3d:3b:cd:9c:25:a3:a2:ee:c8:b3:04:87:
d5:cd:7d:b8:17:1a:b1:a2:50:8c:d7:63:a5:0f:ee:
ca:83:16:9b:e5:91:c6:ee:a4:91:34:93:5c:b0:22:
de:33:20:dc:92:2e:75:db:fc:a4:4f:b4:a1:b3:61:
96:ec:78:5f:7b:bd:a0:27:55:b4:d7:5c:c6:40:2a:
28:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:25:49:39:D7:05:A8:76:E2:4E:14:9C:9B:DE:78:05:09:1D:4C:1C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145180.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a9e2::/32
Signature Algorithm: sha256WithRSAEncryption
64:4b:dd:a6:63:60:5a:21:20:ec:68:ab:6c:65:f8:b4:4b:c1:
47:3e:39:c4:9d:53:e7:0d:56:9f:02:21:ed:08:d8:bb:83:12:
d1:a5:be:1b:92:e2:bb:d9:59:fc:b3:f8:32:49:47:61:18:80:
51:71:85:5d:27:19:71:d5:51:05:ec:d2:16:4f:02:ad:ff:d9:
30:ab:99:77:4c:cb:c9:72:3f:61:26:1f:b2:89:66:a7:f0:2b:
f8:2b:24:ab:8f:a2:86:1f:e2:65:20:49:8d:85:0b:19:3c:f5:
3a:3b:cb:79:25:af:c5:aa:b4:78:8b:a6:5b:1a:99:54:83:0e:
38:d4:a2:cd:0a:98:5e:ee:7d:44:63:7e:d6:67:68:38:67:b8:
eb:8c:a3:57:9c:85:fa:bb:5c:26:ec:75:32:8b:81:69:08:02:
6a:52:30:32:3d:6e:36:fd:0e:c0:1d:9b:6d:28:35:88:dd:73:
b6:22:ae:39:3c:1d:5d:b1:7b:cf:6e:88:e3:d9:24:e3:9f:fc:
0f:63:5c:bd:fa:49:37:a0:46:30:fd:c9:39:53:94:91:fd:ad:
2f:a2:40:2a:3e:59:cf:5c:cb:36:83:a2:a4:0f:75:7a:22:93:
73:d7:6b:2f:64:3b:3f:d2:bf:bd:e9:f4:26:76:73:58:ae:9e:
88:93:f4:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:25 2026 by rpki-client