Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145206.roa
File: AS145206.roa (raw, json)
Hash identifier: ZwQmjsfdjgAKg9ggFjhuflUfY3DNZv3kSMD3b0G9HSY=
Subject key identifier: 62:3D:1F:77:F8:67:25:DD:98:D5:44:8D:E9:F5:6B:15:BF:06:AF:48
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3C57867ABF46BD5EB2125F049448F8371E381AC6
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145206.roa
Signing time: Tue 26 May 2026 08:52:57 +0000
ROA not before: Tue 26 May 2026 08:47:57 +0000
ROA not after: Tue 25 May 2027 08:52:57 +0000
asID: 145206
IP address blocks: 240a:a9fc::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:57:86:7a:bf:46:bd:5e:b2:12:5f:04:94:48:f8:37:1e:38:1a:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 08:47:57 2026 GMT
Not After : May 25 08:52:57 2027 GMT
Subject: CN=623D1F77F86725DD98D5448DE9F56B15BF06AF48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:5d:f5:13:4c:e3:f3:dc:23:a1:01:fc:aa:5d:
73:ae:71:ab:72:fd:ec:9a:16:14:fb:bd:f3:d9:50:
a5:52:5e:5c:ba:fe:36:df:4f:b8:41:ac:a8:18:36:
1f:cc:23:be:2c:a1:83:60:31:0b:70:00:9c:3a:c9:
d5:84:59:7c:57:82:20:80:5b:38:a9:d3:7b:6f:d1:
d5:b4:8c:fc:38:61:ea:ca:d7:de:06:4f:71:a3:0e:
a1:88:3f:b4:bd:62:ab:9d:e6:9e:fa:8e:d8:f7:e1:
c1:0d:00:ca:0d:f6:f5:1e:6c:01:e7:90:b0:c2:35:
0a:7f:c2:12:4d:7e:24:45:38:72:87:1d:56:67:4b:
4d:32:70:28:dd:15:af:cd:46:bb:ec:14:b6:6c:e3:
66:8d:a0:ce:84:41:1d:e7:7c:0a:a1:95:8b:b5:8f:
90:1a:19:95:14:2f:1e:53:b6:1c:14:58:ee:fe:97:
64:a1:8c:75:cc:8f:e7:29:07:31:a7:18:be:67:c7:
b6:64:0f:4f:c5:12:35:6a:83:8b:71:7f:21:9b:ce:
22:a5:f2:64:11:89:6d:46:47:a4:b5:31:cd:8f:2d:
04:eb:08:a1:20:bb:e4:cb:c3:3c:42:68:d0:3f:ac:
44:ce:7a:e9:7f:e0:af:d5:34:66:96:e8:05:1c:64:
a6:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:3D:1F:77:F8:67:25:DD:98:D5:44:8D:E9:F5:6B:15:BF:06:AF:48
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145206.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a9fc::/32
Signature Algorithm: sha256WithRSAEncryption
14:69:40:46:ea:44:32:69:03:1f:e2:f5:ef:78:91:5a:51:49:
a3:13:d1:38:93:86:29:a7:d2:d9:a2:31:ec:eb:e0:ac:c2:bc:
c5:ac:e9:6a:45:1d:05:ba:dc:42:6b:a5:18:49:f5:2c:0e:45:
3b:17:e4:50:25:80:f5:de:0b:67:c0:f5:45:43:9b:0d:1c:ac:
45:45:2f:57:bf:3f:dc:b5:89:f1:9a:17:13:2c:34:e7:b1:c5:
af:f4:28:05:05:8c:8c:27:76:a5:38:40:c1:bc:ba:2b:e6:8b:
09:bc:dd:04:be:20:93:d4:c1:75:6f:c6:45:16:72:22:bd:3d:
80:81:56:1f:b9:e3:be:6a:4c:01:23:88:da:29:32:ad:69:f9:
fc:25:41:aa:04:9a:3d:93:86:64:c5:0f:06:41:ec:14:5d:1d:
dd:3d:7a:1a:04:4e:65:fd:8b:e2:58:5f:f1:81:d2:20:ef:6b:
52:2d:cd:a6:e2:01:98:65:4a:48:04:e2:49:a8:47:3d:67:5c:
14:85:a8:30:c5:27:d3:30:21:32:cd:87:20:9b:5c:71:94:5c:
ce:c1:19:81:12:73:5a:61:66:ea:49:6d:b3:8d:ae:0b:89:4e:
46:4a:96:77:40:a0:50:28:b3:da:72:cd:69:08:74:20:12:f2:
06:f0:4d:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:30 2026 by rpki-client