Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145205.roa
File: AS145205.roa (raw, json)
Hash identifier: CZF8iXKXc2fT9VzmmmSAoOIcCnWBpGRtGzW82pKceNU=
Subject key identifier: 09:EC:02:C4:1C:FD:67:6E:B6:18:66:EF:EF:AE:E2:1C:53:0A:D0:A9
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3D104B5993806D05548C4DC167B9BE892EEBB56E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145205.roa
Signing time: Fri 22 May 2026 06:28:03 +0000
ROA not before: Fri 22 May 2026 06:23:03 +0000
ROA not after: Fri 21 May 2027 06:28:03 +0000
asID: 145205
IP address blocks: 240a:a9fb::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:10:4b:59:93:80:6d:05:54:8c:4d:c1:67:b9:be:89:2e:eb:b5:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:23:03 2026 GMT
Not After : May 21 06:28:03 2027 GMT
Subject: CN=09EC02C41CFD676EB61866EFEFAEE21C530AD0A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:bb:9f:77:8a:e6:94:a6:0a:58:c1:60:3c:bf:
08:5c:a4:11:28:1f:23:62:fc:08:91:8e:a0:bf:8d:
80:23:43:ec:f9:40:bf:41:8a:fb:23:5b:ec:74:52:
cf:bc:33:15:51:2e:da:d9:b3:54:6a:16:40:d4:40:
7a:be:3f:92:ad:a5:3d:42:1e:7b:60:b8:a4:22:86:
3e:f5:06:b8:24:bd:c4:52:78:93:ff:78:c0:ba:c6:
c3:ae:ce:ed:ba:84:c7:4f:6a:65:aa:22:29:55:3c:
f4:96:2a:b7:d0:5b:49:44:75:4f:68:9c:98:ef:0a:
e8:18:23:b0:73:79:52:f7:b0:7f:c7:86:97:e7:3f:
a0:d4:fb:c3:85:1e:85:bc:7f:42:b4:a6:19:97:2d:
a9:24:38:f7:21:a0:7b:0d:06:de:5d:88:96:dc:95:
66:b7:9e:19:7f:92:b8:2b:0b:a2:e2:be:84:b8:5f:
22:b2:71:43:28:fd:01:9f:af:be:25:ff:fc:00:74:
d8:3b:c9:77:ec:75:b1:ec:f4:13:83:2e:77:8c:e4:
3d:fa:29:96:2b:e4:4f:d1:f0:53:b1:d8:2e:31:89:
f7:f8:da:43:b6:26:97:6a:d0:31:bb:16:c1:51:96:
79:f8:fc:e2:b5:11:7f:77:92:4f:95:40:3d:51:0f:
e4:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:EC:02:C4:1C:FD:67:6E:B6:18:66:EF:EF:AE:E2:1C:53:0A:D0:A9
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145205.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a9fb::/32
Signature Algorithm: sha256WithRSAEncryption
5c:36:eb:1b:0e:06:90:7c:7f:c3:99:10:76:5f:f1:c0:0a:09:
4a:8a:e9:e1:14:3a:b3:2a:47:2c:5e:62:bd:3c:b1:06:96:27:
b7:13:ed:78:79:f6:e5:4f:b7:4e:6f:52:ef:01:7b:ad:d1:ae:
69:71:84:56:eb:26:53:77:15:8e:ba:d3:30:a1:60:b3:a2:1c:
64:7c:e5:85:13:71:62:e3:67:90:11:3a:be:e4:c3:6b:5a:c1:
bc:39:8d:6c:57:d3:de:e2:b9:38:cb:e3:3d:6d:13:c0:08:cc:
c9:ef:81:51:ce:b5:9d:07:b2:4f:bf:52:40:b4:55:82:ef:e8:
5d:80:43:6e:f0:34:f7:9c:f5:ff:f9:ac:a8:25:35:3b:6c:aa:
da:45:9b:e4:69:30:76:2e:6c:55:2f:fc:37:93:79:57:59:d8:
23:37:36:8b:94:9d:c2:63:0e:b6:5d:4f:8b:91:08:51:91:88:
8d:f2:cc:1d:95:dd:58:af:e3:ac:00:8f:f5:f6:e9:e2:7d:0f:
08:c3:91:bd:fc:b3:b1:ad:83:10:45:bd:bd:06:77:5f:3f:5a:
47:de:27:b1:1b:aa:c3:9a:3c:b5:8d:fd:0b:79:f7:fe:06:82:
c2:ee:e7:04:7a:b2:b2:4c:20:cb:86:df:fb:e1:26:1a:83:b9:
14:0c:ea:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:18 2026 by rpki-client