Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145192.roa
File: AS145192.roa (raw, json)
Hash identifier: Y+7XluKYchCOt9eKecTq2/ly4CgypeHdpHEQP6jzb1s=
Subject key identifier: B5:6A:F7:C5:B6:B4:DA:C6:DA:EE:24:C5:45:2E:D8:90:C2:A0:47:20
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2FBDB342B06372C52697CEAD84549E81A6F17E80
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145192.roa
Signing time: Mon 25 May 2026 03:19:24 +0000
ROA not before: Mon 25 May 2026 03:14:24 +0000
ROA not after: Mon 24 May 2027 03:19:24 +0000
asID: 145192
IP address blocks: 240a:a9ee::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:bd:b3:42:b0:63:72:c5:26:97:ce:ad:84:54:9e:81:a6:f1:7e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:24 2026 GMT
Not After : May 24 03:19:24 2027 GMT
Subject: CN=B56AF7C5B6B4DAC6DAEE24C5452ED890C2A04720
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:a2:81:9a:19:f5:48:fc:9b:4b:71:e7:a0:27:
88:d2:37:50:03:b7:15:21:1a:92:70:9a:73:d1:fd:
86:00:83:6f:ae:13:ec:dc:12:b6:0c:25:8c:35:e4:
1a:98:e0:73:2c:55:51:19:70:4a:39:61:a9:9b:66:
93:07:12:9e:19:86:a5:04:e3:65:fd:eb:61:ab:c7:
0f:14:a5:41:cc:f8:38:60:11:56:80:22:da:7b:87:
27:a8:66:a8:c0:b9:12:63:14:f1:bb:79:93:a4:f3:
b0:f3:dc:2e:37:14:52:2d:b3:dd:d2:22:58:ac:46:
7d:57:92:e6:f4:a0:6d:c5:fa:f8:71:cb:16:53:86:
6b:21:f5:c8:63:f7:68:dc:79:b0:cd:bf:85:2d:f1:
10:42:d7:be:07:ac:0d:e6:b3:00:e8:2f:b6:38:17:
f1:86:04:93:d5:d3:ab:d2:9d:31:84:76:5c:dd:1f:
41:e7:1c:8d:c9:4e:70:51:c4:57:34:2d:1f:33:e6:
ab:50:67:ca:ca:41:56:c4:c4:be:30:5d:82:48:d2:
f6:45:9f:d7:9b:64:78:22:f7:19:6a:69:5c:cc:5e:
11:d1:71:44:b5:2b:cb:e0:0b:cf:98:54:d0:d1:84:
cc:16:6b:cc:a2:6a:54:7f:8f:0f:11:25:d0:63:37:
1e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:6A:F7:C5:B6:B4:DA:C6:DA:EE:24:C5:45:2E:D8:90:C2:A0:47:20
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145192.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a9ee::/32
Signature Algorithm: sha256WithRSAEncryption
97:9d:8c:6d:7e:48:4e:55:9e:97:11:c6:d2:5e:1e:fa:44:6c:
5f:ed:e9:a0:13:7b:ac:c5:0a:db:6c:39:f6:3b:f4:08:8b:67:
8a:31:51:2d:4d:dc:25:a3:ce:6f:e5:9b:4b:0d:eb:39:d3:fd:
85:c1:ac:bf:5e:e8:f2:61:fc:e5:2e:23:0a:15:11:fb:01:94:
13:e9:75:4d:b2:3a:72:22:07:c1:2c:07:48:02:95:45:6e:eb:
dc:89:c3:68:1a:29:bf:8c:22:be:69:cd:2d:f9:89:c1:b2:41:
23:f9:07:79:99:0f:09:68:ff:30:ef:1c:5c:b5:28:7e:1b:fa:
de:d6:53:c4:24:92:14:e5:17:56:9b:68:37:30:6f:f9:bf:05:
38:1a:4a:3d:6e:4c:8d:37:b9:49:8c:e8:2e:26:c2:af:fa:9a:
19:17:5a:1b:3d:9f:7a:f6:0d:15:52:3c:b0:4d:3d:7d:fa:9c:
e8:af:9d:0c:8e:4f:68:fc:a6:3b:88:db:72:ac:33:10:cd:56:
6f:06:5b:cb:7b:fe:f2:32:26:69:e9:f0:95:0c:b9:42:eb:87:
a3:70:cc:21:04:46:51:73:b1:a5:aa:a6:0c:fa:c1:7f:c8:c8:
e3:fa:37:1f:24:64:08:26:e8:b7:14:b9:51:e8:e9:5d:b0:7a:
4e:49:cc:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:21 2026 by rpki-client