Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145209.roa
File: AS145209.roa (raw, json)
Hash identifier: ZAQecSKUNcpCPysd88rrWy9mkw2kkcpB/okV/zmFI94=
Subject key identifier: 09:03:9B:B9:F7:7A:16:9C:8C:DA:26:F0:1F:BF:53:9E:14:55:EA:AC
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5A0FF4E42053EAF1C9EC637DA24A2308CD30E740
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145209.roa
Signing time: Mon 25 May 2026 06:49:06 +0000
ROA not before: Mon 25 May 2026 06:44:06 +0000
ROA not after: Mon 24 May 2027 06:49:06 +0000
asID: 145209
IP address blocks: 240a:a9ff::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:0f:f4:e4:20:53:ea:f1:c9:ec:63:7d:a2:4a:23:08:cd:30:e7:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:44:06 2026 GMT
Not After : May 24 06:49:06 2027 GMT
Subject: CN=09039BB9F77A169C8CDA26F01FBF539E1455EAAC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:44:7e:38:a6:f6:03:48:5e:ee:69:4d:cd:41:
a9:40:cb:39:ac:2e:cb:0d:e0:13:10:21:00:79:cb:
58:6f:e5:67:78:be:d8:0e:43:23:18:35:54:90:f8:
45:b1:9e:60:d0:31:76:9d:e4:86:6c:1e:9d:d3:0a:
44:74:98:f5:d5:fc:ed:04:af:78:b2:2f:62:d3:91:
ad:18:c0:57:94:ac:72:c6:11:21:05:38:cf:50:43:
7b:98:f5:8b:ce:aa:22:e0:1c:6f:16:3a:ee:73:6b:
e6:f1:99:05:11:b7:38:f6:0b:5d:c7:7e:9b:4e:9b:
d7:55:fb:3e:05:52:2e:92:d4:5a:ad:8c:ac:85:e7:
72:d5:cf:ee:13:96:97:44:b7:dd:73:d6:ff:df:45:
14:18:f3:a6:81:37:c7:ff:60:a8:ae:c7:c1:f4:41:
6e:7e:8e:8d:0b:4c:45:e2:16:1f:fb:01:74:bb:66:
b7:dd:8b:a8:39:00:dc:e7:e1:cf:bc:b3:d0:bb:04:
3b:c7:d9:59:2d:a0:c6:81:29:90:aa:af:89:37:5a:
5b:97:02:ed:da:14:84:4f:36:68:5d:12:ee:63:20:
44:63:a2:b6:bd:0d:36:6b:44:1f:43:5a:9d:ba:de:
c5:27:a1:69:c2:f0:0b:0e:9f:a7:69:2a:5f:3f:f7:
95:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:03:9B:B9:F7:7A:16:9C:8C:DA:26:F0:1F:BF:53:9E:14:55:EA:AC
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145209.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a9ff::/32
Signature Algorithm: sha256WithRSAEncryption
57:f2:8c:bf:23:9f:7d:b9:c4:c6:5e:0f:ec:f9:c3:97:59:f1:
43:e8:8f:a8:63:8f:8d:1d:be:a3:77:9d:e0:bb:ea:82:8b:33:
19:8d:a9:e6:fb:6e:a0:3e:aa:65:ed:8f:b2:2c:4e:f2:a0:ac:
cc:61:23:53:3a:ec:69:d6:2d:4e:c9:92:4a:cc:3c:a2:4c:96:
f8:65:58:5a:6f:0d:29:cf:de:e6:65:07:25:8f:aa:a8:1f:dc:
8f:e7:cc:f3:72:bb:09:c3:57:5d:0c:a8:fe:d3:f7:4e:19:27:
9f:19:df:03:11:fa:21:60:91:d9:20:b1:21:6d:34:9d:c5:28:
42:6c:97:24:86:42:d4:67:d1:d8:47:46:3f:ec:57:67:cf:3e:
b2:72:ad:4f:4b:f1:be:ed:c7:88:6e:0a:9b:b8:c9:88:23:66:
35:07:bb:f5:4a:bc:7d:27:cc:34:73:d8:9f:78:39:a6:a5:9f:
8b:cf:78:c3:02:c4:88:88:fd:1b:87:e5:7b:13:ce:20:bc:f9:
a4:19:2a:1f:cc:2f:60:d2:93:ec:b0:cf:01:c4:f8:24:77:55:
d2:2b:8e:92:b0:3b:86:b6:df:05:ee:23:fa:38:72:56:70:62:
d2:99:43:f8:34:08:1d:b9:02:cb:75:b4:a4:a5:29:fd:5d:79:
b9:ab:cf:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:44 2026 by rpki-client