Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145187.roa
File: AS145187.roa (raw, json)
Hash identifier: cJ0EA5TDDfgB2x8yOW+3/CkrYhyco6ZJxnNVbeWJC+I=
Subject key identifier: 17:7D:55:22:29:8F:E0:3E:F4:A8:62:A2:1A:B3:C6:1B:26:F2:1B:59
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3DA56F681BEDE2AC11F35776D2F60E85DC29D89A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145187.roa
Signing time: Tue 26 May 2026 06:30:26 +0000
ROA not before: Tue 26 May 2026 06:25:26 +0000
ROA not after: Tue 25 May 2027 06:30:26 +0000
asID: 145187
IP address blocks: 240a:a9e9::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:a5:6f:68:1b:ed:e2:ac:11:f3:57:76:d2:f6:0e:85:dc:29:d8:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:25:26 2026 GMT
Not After : May 25 06:30:26 2027 GMT
Subject: CN=177D5522298FE03EF4A862A21AB3C61B26F21B59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:92:0c:f0:7b:8f:63:d1:fb:b1:b8:e5:db:48:
b4:05:c5:3b:49:94:c6:8a:18:1f:3d:6b:e6:ac:f0:
2b:19:52:0a:94:bd:73:da:35:96:dd:9a:45:27:00:
20:74:ee:67:1f:f0:4b:7a:8c:a4:4a:a1:af:57:de:
75:4c:84:03:cc:c0:32:5b:df:4a:cf:fd:73:fc:87:
ef:1f:0d:49:ac:0e:1f:02:65:82:41:e8:81:46:74:
5a:d6:97:59:37:2a:f9:d2:9c:0e:02:16:5a:f6:70:
5e:0c:01:d2:ce:5a:79:6b:8c:31:3e:e3:fa:69:81:
02:36:5e:59:6a:2f:d6:5d:e0:95:60:40:48:15:ae:
16:17:0b:e5:3d:32:5c:35:ea:b6:cd:b0:b3:3f:16:
ac:55:42:eb:f6:a5:38:ff:ea:b3:b6:c6:62:ee:8f:
48:84:b2:8e:b6:f1:2d:06:0a:65:4f:2d:aa:4b:1e:
95:a2:65:46:90:ac:02:2f:91:94:2e:f3:eb:a5:90:
34:c5:d6:df:c4:8a:eb:47:b3:f0:b4:03:58:d2:b4:
e5:ac:3a:39:3b:55:f7:a2:aa:cf:25:de:f0:0d:19:
fb:13:0a:19:a6:24:f7:9d:f1:b1:f5:c4:8c:82:bc:
96:5c:1f:36:76:92:d4:b5:2f:17:d8:c5:50:bf:62:
13:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:7D:55:22:29:8F:E0:3E:F4:A8:62:A2:1A:B3:C6:1B:26:F2:1B:59
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145187.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a9e9::/32
Signature Algorithm: sha256WithRSAEncryption
4c:96:7b:52:cb:8f:d9:de:98:48:55:88:43:65:54:2c:43:61:
89:fc:c0:a1:1d:2d:6d:c9:d5:16:d9:9c:3e:9a:af:17:c7:a9:
5c:16:87:f2:26:8e:b8:48:88:92:3e:34:f0:50:3e:cd:9a:58:
7a:ef:45:37:0e:c1:f6:cf:ce:e9:de:70:20:a8:4a:7a:34:74:
32:fc:d0:71:a1:a8:f2:25:c2:53:23:9d:5a:20:f6:c3:cd:3c:
42:2e:ad:fb:63:86:85:54:d5:fe:e3:c6:0b:81:8a:bd:7c:45:
11:75:0c:17:d1:13:c2:4d:5f:dc:19:90:d1:d3:3b:cc:a9:17:
2b:86:8a:66:6c:2f:b4:59:31:04:1c:77:3d:4f:54:08:2d:8c:
1b:44:32:27:6a:91:b0:3b:2d:56:e0:c8:4a:f4:4f:d5:98:73:
d0:da:0d:7d:2c:2e:3e:71:26:07:05:af:21:e3:73:9f:1d:c9:
9d:47:03:3d:91:8f:1b:9c:44:b3:e9:a1:7f:e5:94:15:d5:ab:
d4:40:c9:8b:52:91:ab:b4:fb:13:33:32:7e:3a:d2:bc:20:7c:
61:fe:2e:1c:30:bd:9e:01:2f:31:6b:40:29:27:f3:b4:f6:54:
db:b8:11:5a:6c:a4:dc:88:d7:2a:6c:94:d6:60:09:d5:89:b2:
78:cd:6d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:56 2026 by rpki-client