Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145232.roa
File: AS145232.roa (raw, json)
Hash identifier: mGEwPa0Ydu6nOTSQVTa24Yb7HjxLknT1g7B/2uUNi4U=
Subject key identifier: 67:85:3E:69:18:90:08:3C:12:D0:58:8A:C3:FC:6A:33:23:1C:BA:E5
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6413C0D9AC26C88517B4C5FEC17B9624160D7390
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145232.roa
Signing time: Tue 26 May 2026 02:34:58 +0000
ROA not before: Tue 26 May 2026 02:29:58 +0000
ROA not after: Tue 25 May 2027 02:34:58 +0000
asID: 145232
IP address blocks: 240a:aa16::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:13:c0:d9:ac:26:c8:85:17:b4:c5:fe:c1:7b:96:24:16:0d:73:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:29:58 2026 GMT
Not After : May 25 02:34:58 2027 GMT
Subject: CN=67853E691890083C12D0588AC3FC6A33231CBAE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b7:c7:1b:6e:32:09:ec:e8:15:76:5c:2d:56:
ee:82:1f:25:2f:f5:2e:82:37:a8:24:45:9c:2f:ce:
e9:08:87:39:53:e3:df:bd:4d:89:e2:1f:ab:77:e6:
b3:e9:6f:28:3a:5f:73:c9:08:47:59:72:4a:92:3a:
59:81:ae:fd:e6:62:3a:5a:26:40:65:23:d2:70:20:
6a:0f:54:28:11:19:9f:0d:0a:96:27:9b:02:22:34:
8f:db:99:85:d6:cb:22:9b:6d:a0:5a:35:44:9e:ff:
d2:41:e4:93:b2:0c:1b:95:5a:c7:1b:cf:42:c9:4b:
e8:7b:e7:3c:9d:f4:0d:2d:29:89:de:fa:1b:97:73:
1e:16:2a:fb:42:fe:62:de:92:af:9e:e2:95:e9:e2:
58:00:8f:b9:e1:c4:9c:2a:17:25:5f:58:44:70:0e:
bc:20:e3:16:fc:62:a3:8b:2a:f5:ec:7f:b6:0b:32:
7c:e3:e3:97:15:93:59:eb:63:ca:6a:f7:7b:14:78:
2c:da:5b:40:a9:37:cb:bf:e3:24:bb:76:37:ca:bd:
4c:4b:44:c7:31:7f:85:12:16:44:87:5f:ba:01:fe:
e6:d6:93:08:0e:b9:4c:b4:67:2a:79:92:3e:ec:db:
aa:80:df:1b:9f:58:fc:ff:d9:8b:e1:18:1c:d8:35:
37:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:85:3E:69:18:90:08:3C:12:D0:58:8A:C3:FC:6A:33:23:1C:BA:E5
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145232.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa16::/32
Signature Algorithm: sha256WithRSAEncryption
6f:f2:d5:be:23:43:ac:5a:21:73:0d:2e:70:6e:dd:04:34:be:
4f:01:77:e2:40:ec:c3:bd:55:85:25:e6:ce:5a:f2:a0:30:43:
63:81:76:a7:bd:0e:22:3d:d9:8f:d9:7f:08:46:91:21:9e:29:
9b:02:d0:4a:57:35:b0:9f:1d:6a:0b:33:83:cd:3e:01:2c:3b:
34:0a:50:86:a9:62:ee:45:2e:94:b4:51:98:01:fc:11:6d:33:
01:de:72:72:9a:3c:b7:ff:66:70:54:c7:8c:c8:7e:54:cc:af:
fb:03:2a:12:d1:d2:84:94:7a:16:63:3a:4f:83:24:00:df:35:
74:a3:ef:f8:7b:e8:28:db:5e:84:ed:ce:a2:f2:44:42:8b:e8:
e8:88:a2:bd:47:c3:71:c8:ce:da:e7:80:41:6f:5d:45:9b:fd:
0c:32:0d:1a:a6:f8:c4:a3:ef:e1:e4:69:22:4d:f5:1d:f8:ab:
ee:e7:87:e0:73:03:82:36:e7:96:91:72:2e:a9:5c:a1:77:3b:
b2:0f:7d:c9:27:71:33:24:64:f5:88:f2:52:ab:3e:58:2a:8f:
18:2f:82:7e:26:3f:20:37:ae:a8:0d:2b:5c:d9:40:3b:76:6e:
84:86:48:3d:29:85:c4:25:43:0f:f8:91:aa:f5:8a:07:04:b6:
4b:c3:cf:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:58 2026 by rpki-client