Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145216.roa
File: AS145216.roa (raw, json)
Hash identifier: /6U59Y7NnGSjM6u+tw60JzmS3mQMEf6jxk/vQqz8UzQ=
Subject key identifier: A2:65:7F:56:EB:7D:9E:F1:14:A9:6C:BA:BF:7A:62:4D:03:BE:FA:12
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1B7FEB426117E60879C68552C26733267A1A7843
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145216.roa
Signing time: Mon 25 May 2026 06:28:28 +0000
ROA not before: Mon 25 May 2026 06:23:28 +0000
ROA not after: Mon 24 May 2027 06:28:28 +0000
asID: 145216
IP address blocks: 240a:aa06::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:7f:eb:42:61:17:e6:08:79:c6:85:52:c2:67:33:26:7a:1a:78:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:28 2026 GMT
Not After : May 24 06:28:28 2027 GMT
Subject: CN=A2657F56EB7D9EF114A96CBABF7A624D03BEFA12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b4:75:f8:7b:03:ce:d7:5d:a3:15:3b:5e:71:
4b:ee:c9:33:f1:9f:5c:15:6c:2e:48:66:fe:19:2b:
fd:df:74:71:64:fc:2b:46:cc:02:17:02:1f:b0:97:
a1:2f:ef:ea:45:93:06:4e:09:30:c0:29:c5:33:e8:
8c:e4:18:a3:c9:00:f8:c6:be:2f:44:5d:07:c9:65:
95:03:a0:4d:3d:35:d5:2e:65:ee:90:77:e1:da:70:
51:eb:f2:38:b9:9d:cd:a0:60:dd:2d:32:4a:0f:13:
84:04:68:7a:39:d3:d1:3f:dc:ee:e4:bc:f0:0a:f3:
da:d5:3a:6b:b9:6c:e4:c2:a9:5a:22:03:25:3d:6d:
24:86:17:be:80:7f:ba:03:db:6c:07:46:77:bd:bf:
21:46:62:01:80:5d:a2:81:91:4a:bf:7b:24:90:51:
8f:e1:04:67:c1:6c:ad:3b:7c:11:63:e6:01:84:3e:
bf:66:ef:d2:74:56:6f:da:bc:00:75:c1:1f:21:7d:
29:1b:6c:b7:c9:76:26:1d:e0:fb:23:63:09:eb:ce:
15:b4:18:bf:54:63:45:2f:2d:fd:87:d6:c1:97:0e:
4c:3e:fc:47:54:21:d5:81:e0:7c:e2:c6:4d:67:dd:
52:af:89:b3:03:ba:d1:ac:dd:57:4f:dd:6e:ad:1d:
05:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:65:7F:56:EB:7D:9E:F1:14:A9:6C:BA:BF:7A:62:4D:03:BE:FA:12
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145216.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa06::/32
Signature Algorithm: sha256WithRSAEncryption
5c:d5:33:bf:33:fb:f1:6c:5e:24:8a:7f:9f:6e:b2:34:2c:68:
a6:51:61:c5:71:b4:5d:75:4d:28:f3:01:a4:0b:69:05:f2:f6:
dc:4a:b9:ef:53:55:8c:bc:fa:cb:3a:f7:09:cf:c8:79:bd:0c:
ef:9a:74:e4:ab:17:9d:d7:fa:c4:61:1e:13:70:d3:25:cb:57:
1d:77:b7:ef:d8:dc:60:1b:9f:d8:c4:3f:8b:7e:b6:e3:42:4c:
79:2a:52:6f:00:ee:b7:af:71:30:c9:79:f8:98:1a:e8:a7:18:
cb:c8:6e:a2:1e:02:84:55:44:c5:80:b5:42:00:d9:0e:0b:89:
26:9f:14:a0:48:59:0b:f5:5c:99:13:99:37:72:a0:1f:40:6a:
da:80:08:36:cc:a2:23:92:16:0a:0d:0b:26:26:75:01:a7:08:
d6:4b:e2:bd:f8:eb:d8:61:7a:31:bb:1b:fb:db:cf:cd:d8:bf:
58:7c:a2:fd:54:91:9a:46:47:c7:84:1c:fd:b4:25:07:1d:d5:
f1:de:f4:30:34:eb:c5:8f:69:af:3d:4b:0b:ef:db:37:c5:f7:
76:11:8d:eb:10:6a:b7:78:d2:c4:42:71:d1:72:7f:90:9e:8c:
2d:eb:2b:48:a6:48:7d:00:de:79:65:06:bc:e9:b4:5e:57:35:
23:8e:83:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:26 2026 by rpki-client