Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145212.roa
File: AS145212.roa (raw, json)
Hash identifier: M48O+8v77qd8TgkphuQfde0qvL9ZVO9vKuQWDCgHYJc=
Subject key identifier: 1D:85:9F:EA:D3:7A:78:A9:11:0E:E6:6F:59:E9:45:EB:B9:87:30:2B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 02EA71314FE02B3E351378FB4F2E2E026A8D42F5
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145212.roa
Signing time: Tue 26 May 2026 02:35:04 +0000
ROA not before: Tue 26 May 2026 02:30:04 +0000
ROA not after: Tue 25 May 2027 02:35:04 +0000
asID: 145212
IP address blocks: 240a:aa02::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:ea:71:31:4f:e0:2b:3e:35:13:78:fb:4f:2e:2e:02:6a:8d:42:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:30:04 2026 GMT
Not After : May 25 02:35:04 2027 GMT
Subject: CN=1D859FEAD37A78A9110EE66F59E945EBB987302B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:70:28:7c:f9:5b:23:9e:ab:e2:fa:d1:e9:b0:
b2:e5:04:9a:e0:63:71:26:8c:69:a7:ac:56:fa:f8:
ce:06:79:5f:c1:d3:4e:2a:98:a7:48:8f:28:26:cd:
a0:f7:1d:3c:a4:a1:5e:c4:bb:26:cc:c9:bd:18:bd:
0d:02:a9:94:e8:61:45:db:bb:40:48:6b:9b:48:66:
84:f0:7a:12:69:36:31:c6:f4:58:4f:26:56:76:73:
ab:2f:3e:10:4f:17:a9:2b:aa:f8:c0:be:6f:b6:06:
1f:d9:8d:07:ec:c5:e8:64:06:04:0a:77:e0:db:30:
b9:4d:da:ad:2f:59:21:69:53:98:56:55:ba:6d:7d:
ab:99:9c:04:fa:49:e5:fb:9b:f3:8e:88:5f:c1:b8:
92:3f:c6:4f:bd:4a:91:83:53:b3:b9:ae:b3:7f:2e:
f3:80:f4:24:2b:c6:93:a6:2e:40:c3:12:a9:b4:53:
e0:e8:29:d7:6c:9e:f8:68:12:0b:ce:91:b8:e8:e9:
bd:f9:12:e8:4d:7e:10:4c:53:89:df:1e:1e:db:f2:
5b:4e:1a:1c:c9:bf:b7:bc:75:74:19:3e:47:18:6a:
53:89:ea:2c:d6:c8:f9:dc:4c:29:9f:b9:35:93:be:
5a:bf:1f:7d:9b:f0:83:ea:f8:e7:3a:ef:2a:00:4e:
71:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:85:9F:EA:D3:7A:78:A9:11:0E:E6:6F:59:E9:45:EB:B9:87:30:2B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145212.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa02::/32
Signature Algorithm: sha256WithRSAEncryption
b2:0f:07:70:5a:c2:9a:02:b2:61:70:28:ee:d7:35:3c:1c:d6:
ec:27:4d:0c:46:c1:79:1e:24:3e:76:a8:44:be:e6:6c:ac:82:
93:64:e5:fd:5c:19:2a:f7:a2:ad:f1:a4:d9:c0:c9:d0:7d:e1:
b7:c0:bc:b8:58:53:a3:40:ac:3e:fd:5c:41:f5:f5:56:6a:c6:
dc:fc:00:02:37:44:53:8d:0e:59:84:d9:8f:c4:01:46:4b:b0:
65:9d:22:f6:8d:5d:2e:50:9c:f6:2d:de:92:04:69:a5:cf:ce:
9b:f6:8e:36:d0:24:42:a5:cd:a0:e3:a6:a3:ab:92:76:44:b7:
2a:ab:81:f9:eb:f2:cb:0b:8f:29:2b:53:20:54:30:d0:88:63:
3a:81:c5:f1:c7:61:3d:bb:a6:f6:a9:82:33:72:c1:ec:16:de:
32:15:75:db:b4:89:b3:1d:a4:18:5a:b4:3d:2d:95:dc:e1:19:
93:fa:96:14:f4:6d:90:dc:41:14:d5:19:ab:22:15:b8:c1:e0:
52:e1:85:03:84:98:68:ca:72:2b:93:ca:fc:71:9a:d6:08:53:
51:dc:36:28:ef:d9:b7:37:46:51:a6:a1:0e:1c:55:b2:1b:48:
3b:77:54:7e:d9:c7:d7:04:cd:e3:30:95:a9:85:e0:1c:a7:a7:
9d:d8:b3:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:30 2026 by rpki-client