Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145233.roa
File: AS145233.roa (raw, json)
Hash identifier: GIYlibA2J5t81v/wBGvSwx8gGkuHsUgApCCyFGqDB50=
Subject key identifier: A1:9A:47:7B:4B:5E:94:91:29:A5:B9:8D:15:A9:90:88:38:20:B3:EA
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 55D3F12D88B8AF2D14F66B2F4539CD42618CBF11
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145233.roa
Signing time: Mon 25 May 2026 02:22:36 +0000
ROA not before: Mon 25 May 2026 02:17:36 +0000
ROA not after: Mon 24 May 2027 02:22:36 +0000
asID: 145233
IP address blocks: 240a:aa17::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:d3:f1:2d:88:b8:af:2d:14:f6:6b:2f:45:39:cd:42:61:8c:bf:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:36 2026 GMT
Not After : May 24 02:22:36 2027 GMT
Subject: CN=A19A477B4B5E949129A5B98D15A990883820B3EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ed:d9:83:4e:8c:5e:21:43:30:fd:3b:f1:9f:
e5:06:78:9f:09:ff:ff:eb:5d:d8:65:6b:e9:6e:14:
d9:36:59:88:9b:fd:4a:57:92:d6:98:c3:30:c8:44:
f4:1c:53:03:0a:12:13:46:85:3d:8f:67:53:56:e6:
e4:3f:70:14:1f:07:b7:8a:d2:07:69:26:86:47:17:
f2:18:6d:49:4c:bd:e9:8b:49:1b:79:81:97:98:af:
36:ce:5c:1b:33:90:92:61:f2:0e:6b:22:16:50:30:
64:58:60:95:bf:2c:62:45:4c:08:35:40:2d:10:6f:
97:64:e5:80:26:f5:5f:69:e7:55:65:d4:bd:f3:f5:
cd:fe:6b:99:c6:4a:b1:c3:c9:86:87:b2:34:cc:85:
48:90:11:ca:f2:2a:28:6b:33:bb:7e:f0:57:33:1a:
4e:26:60:00:7b:2d:89:49:af:f7:74:ae:5c:c3:ac:
7b:19:1f:0b:e8:ce:0d:d1:ea:1a:c1:c9:7b:61:b5:
46:76:c2:b9:18:93:fd:a0:3b:63:1f:29:aa:f0:cd:
a8:8e:3c:09:d3:9a:f8:3a:26:72:7b:06:eb:da:4f:
7f:db:57:4a:1c:51:6c:7e:db:32:f9:a9:82:5c:3d:
e6:ee:18:a3:76:c3:9f:61:e4:c9:1f:d4:bf:24:4e:
20:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:9A:47:7B:4B:5E:94:91:29:A5:B9:8D:15:A9:90:88:38:20:B3:EA
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145233.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa17::/32
Signature Algorithm: sha256WithRSAEncryption
05:7a:1d:e3:6d:9d:77:5d:7d:0e:96:10:9e:33:f3:57:f7:a7:
df:23:30:57:4c:43:1b:33:ce:eb:5f:a9:fd:8e:7f:36:d3:a1:
fe:4b:dc:a9:d6:4a:a8:0d:e9:5e:25:10:26:a0:dd:19:fc:5a:
b4:fb:06:8e:a9:b6:ac:bf:54:97:bb:f1:df:a7:27:2d:2c:d0:
aa:f3:04:cd:7a:54:97:79:84:9f:a5:c6:ed:3f:5e:bb:31:27:
0b:fd:62:33:15:74:01:12:b4:55:57:5b:ce:e1:d8:9a:a2:bc:
e2:2c:40:4d:a1:98:e7:b8:3d:99:28:f9:ab:2f:92:a4:d4:be:
09:92:42:45:90:e8:69:54:12:a6:86:9a:fa:2b:0c:19:b4:69:
52:b2:f9:43:bc:36:46:8b:b8:2c:ba:94:59:23:90:7c:68:e5:
b0:c8:8e:f8:66:ba:9a:40:a2:a4:5d:09:d0:47:00:ff:29:f4:
72:27:21:aa:69:6e:74:d1:83:1d:16:56:ed:f4:17:3f:c0:87:
b2:99:1d:83:86:6a:4a:f5:1c:58:7f:d7:ef:d9:80:01:91:ac:
82:bb:35:d4:ef:e6:6f:e7:b9:13:8e:62:cc:75:9e:fa:6a:96:
ee:de:c2:59:1e:8c:09:01:90:3a:fd:97:a3:8a:d6:88:65:c7:
51:d4:78:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:43 2026 by rpki-client