Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145224.roa
File: AS145224.roa (raw, json)
Hash identifier: rKTL5s69FdqhBGuWGCr8XOyqN2oJlmqMVAFdPCO29X0=
Subject key identifier: 5B:D2:85:47:3D:BB:F3:7D:34:BE:80:65:3C:87:4C:25:92:6A:69:14
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 241AA21003934AE9EE094F1CB69E93B0261E7751
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145224.roa
Signing time: Fri 22 May 2026 06:58:51 +0000
ROA not before: Fri 22 May 2026 06:53:51 +0000
ROA not after: Fri 21 May 2027 06:58:51 +0000
asID: 145224
IP address blocks: 240a:aa0e::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:1a:a2:10:03:93:4a:e9:ee:09:4f:1c:b6:9e:93:b0:26:1e:77:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:51 2026 GMT
Not After : May 21 06:58:51 2027 GMT
Subject: CN=5BD285473DBBF37D34BE80653C874C25926A6914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bf:23:a7:df:cc:68:e1:22:11:6d:30:c1:ee:
cd:0c:07:77:9f:a4:22:a8:52:ad:e7:50:e3:4b:4e:
94:76:49:95:6a:1f:03:6a:70:dc:91:d5:77:7a:f8:
10:5f:aa:25:18:3e:8d:41:9d:b4:57:dc:72:6f:1a:
65:31:8b:1d:ac:92:b3:96:18:d2:f3:da:9e:d3:e7:
82:a3:8c:26:21:3b:20:6a:33:a3:ba:34:f8:7a:ae:
b2:00:6a:02:97:a7:63:7a:3f:ed:87:e9:f1:7d:54:
7a:ac:ab:19:47:ce:0c:80:50:e4:c4:04:c3:79:04:
6f:9a:ee:10:3f:b3:65:8a:38:a7:21:a8:7b:91:b7:
01:a2:21:fd:43:03:63:21:77:56:87:23:ff:d5:a6:
f8:9b:a7:05:bc:87:b0:8f:78:09:e7:8d:6f:8e:d7:
0f:06:71:61:7a:76:bf:a9:ec:d7:ef:a8:5e:18:fd:
a8:6b:e7:28:b3:b2:be:7f:c1:66:ad:34:8f:c8:ef:
32:0b:1a:8c:51:1c:10:24:19:ee:bf:00:cb:2d:e2:
6a:da:72:d8:19:ba:de:40:68:7b:e4:8f:71:0a:84:
43:0e:a7:c9:c6:9e:81:66:00:aa:82:1d:8d:c4:f1:
3d:33:64:90:9e:72:d4:92:44:ae:ce:96:e1:92:35:
91:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:D2:85:47:3D:BB:F3:7D:34:BE:80:65:3C:87:4C:25:92:6A:69:14
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145224.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa0e::/32
Signature Algorithm: sha256WithRSAEncryption
55:be:6b:14:3b:10:64:30:65:e5:c8:96:fe:8a:fa:f4:5a:d0:
01:37:45:df:3d:5e:bc:a4:76:22:13:de:cd:f6:ea:a5:18:52:
6e:6a:9c:b4:59:f8:70:b7:a6:35:0b:49:a1:86:60:ac:9c:1e:
a1:c6:3b:63:a4:26:ed:00:c9:10:25:86:2a:f1:a7:d5:40:15:
ac:44:8e:ca:9f:1b:38:8e:c2:6b:25:0f:14:52:69:a0:b6:fb:
94:3a:a4:d4:2f:1f:b1:59:7a:a9:e0:56:34:37:fd:44:76:aa:
08:21:3b:22:cd:3e:28:70:e5:08:e5:89:1e:76:ed:bf:47:01:
59:cd:82:06:6f:34:f4:2f:87:9b:34:86:8f:0f:13:c6:ff:8f:
c4:93:13:69:cd:e7:65:02:df:40:25:27:3a:65:1e:78:36:08:
82:bc:6a:31:a9:a7:99:0d:69:b9:bc:ca:be:9f:df:99:60:47:
3d:02:8a:a3:d2:93:9c:00:fa:3e:9f:8f:94:7f:14:b9:8a:24:
7f:8e:13:7d:1e:c5:13:9d:42:96:fc:bc:cd:8a:40:fb:ab:dc:
13:2f:dd:19:89:c9:63:cf:a7:bf:6c:60:f4:af:51:6d:d2:53:
f3:c2:02:96:25:88:6c:a3:f0:3f:5d:6f:39:91:9c:ef:e4:92:
d6:47:73:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:01 2026 by rpki-client