
Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145202.roa
File: AS145202.roa (raw, json)
Hash identifier: y56/wfaf4LJkb7wgr6h4crYV0PZc0nS/fxkSbAjjxJ0=
Subject key identifier: 7F:52:3C:B1:0F:F5:B0:ED:C1:CB:10:10:87:38:E7:8B:9D:DE:AE:F2
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0C57965A1FFBF67182968FE29D87FB2D4F4EE57E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145202.roa
Signing time: Fri 22 May 2026 02:47:30 +0000
ROA not before: Fri 22 May 2026 02:42:30 +0000
ROA not after: Fri 21 May 2027 02:47:30 +0000
asID: 145202
IP address blocks: 240a:a9f8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:57:96:5a:1f:fb:f6:71:82:96:8f:e2:9d:87:fb:2d:4f:4e:e5:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:42:30 2026 GMT
Not After : May 21 02:47:30 2027 GMT
Subject: CN=7F523CB10FF5B0EDC1CB10108738E78B9DDEAEF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9c:69:ed:80:2b:a2:7e:c7:a7:3f:c9:52:d0:
3d:ce:dd:6c:7f:3a:dd:d8:42:67:c4:13:7a:42:68:
38:ab:d7:f7:49:dc:63:63:73:ff:26:31:52:6f:db:
ca:d8:fd:f8:d1:a8:19:1b:05:78:f4:85:0f:1e:1f:
56:b7:62:b9:c8:f0:3a:e8:12:ee:2b:9b:3e:ae:25:
81:ad:66:f6:bd:06:29:a8:fc:2b:4b:41:56:4e:bb:
b0:e2:ff:17:4e:38:33:0c:ef:a0:b3:cf:88:78:4e:
4f:b2:29:3d:47:56:24:88:bb:07:5d:d3:ea:ea:f1:
1d:98:30:b2:9f:a6:93:7d:70:1c:6d:9c:e0:29:f2:
51:c7:19:00:02:a1:50:d4:3b:4b:ca:22:69:03:23:
11:eb:cb:e7:b0:d8:0e:5a:42:e7:13:59:ac:09:e6:
6f:52:20:0d:b9:25:69:8c:9d:01:be:c7:9f:18:5c:
12:af:6f:cb:c1:85:36:fb:b1:72:a6:1b:d4:e7:66:
45:73:a5:8d:be:ae:20:e9:b2:94:44:45:b5:82:a6:
14:4d:d7:b9:bb:85:fc:0e:6c:24:98:50:64:ee:ac:
14:aa:a7:d5:da:75:76:41:49:52:b3:8a:df:2a:3a:
cd:ab:bc:ba:dc:c4:46:8b:41:a3:1f:67:79:0b:76:
28:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:52:3C:B1:0F:F5:B0:ED:C1:CB:10:10:87:38:E7:8B:9D:DE:AE:F2
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145202.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a9f8::/32
Signature Algorithm: sha256WithRSAEncryption
99:5d:34:24:d5:97:9d:b4:9b:e8:bb:a2:c1:cf:01:7f:3e:4d:
5c:02:a2:c2:ec:00:1b:95:db:37:83:d7:7e:34:ca:9d:36:77:
6a:8f:92:be:cd:05:e5:26:2f:f7:94:ec:aa:87:b8:38:27:de:
02:09:c4:50:8d:af:0b:06:7f:e4:c3:78:62:11:34:3c:1a:ea:
a2:68:cb:31:86:26:b5:d2:37:77:e2:86:d2:2e:8a:c0:76:b8:
76:ed:f7:96:73:3b:58:b9:7a:1f:0a:e3:07:a7:a6:76:fa:1c:
c1:36:33:a9:8e:2d:08:9e:56:57:f8:e6:ae:e9:48:17:72:10:
ee:29:be:96:39:fa:63:9f:4d:54:97:c9:b7:5d:06:34:35:7d:
65:13:3c:23:82:94:bd:4e:76:fd:4d:f4:bb:b2:86:e2:ba:15:
37:54:c4:f5:4b:db:64:7e:24:b7:a7:8a:48:c4:66:66:1e:02:
a8:50:92:ed:0c:e8:45:f8:e6:88:9d:52:39:b9:33:a5:20:c6:
88:67:3b:55:72:2c:51:bb:2a:3c:f3:d0:bc:c1:df:4a:04:13:
06:b1:ef:d1:6a:73:e3:5e:a8:3b:9c:a6:fe:c2:76:1e:08:86:
43:61:e5:2e:0a:e4:98:ef:e3:00:d3:57:2d:8c:ae:b3:ed:fc:
b8:64:3a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:51 2026 by rpki-client