Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145234.roa
File: AS145234.roa (raw, json)
Hash identifier: k9zEhldPZp4AzXuyD1uDvEcoqr+jEnEJPPKvpQLj+zM=
Subject key identifier: 66:34:57:49:22:D8:A2:4F:50:99:59:13:D7:44:FF:DA:8F:1E:92:10
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 642FE336B109751DC1A0E418DAA38285A2BE3B53
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145234.roa
Signing time: Mon 25 May 2026 01:50:56 +0000
ROA not before: Mon 25 May 2026 01:45:56 +0000
ROA not after: Mon 24 May 2027 01:50:56 +0000
asID: 145234
IP address blocks: 240a:aa18::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:2f:e3:36:b1:09:75:1d:c1:a0:e4:18:da:a3:82:85:a2:be:3b:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:45:56 2026 GMT
Not After : May 24 01:50:56 2027 GMT
Subject: CN=6634574922D8A24F50995913D744FFDA8F1E9210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ff:e5:5e:b5:66:80:c4:e5:eb:36:51:18:75:
01:a4:a1:99:82:01:4a:1a:47:af:17:91:24:db:0c:
b8:bc:c9:0d:f6:b3:a5:84:09:a3:50:95:59:01:61:
42:b6:cb:05:54:e8:1d:d3:61:c6:30:c8:84:17:06:
e1:c4:13:1e:a4:bd:d6:92:36:c5:67:39:eb:bd:4d:
61:60:f1:de:fa:47:49:ed:0d:ba:5f:ca:fb:e9:09:
3a:76:78:75:e9:1c:f6:fd:ec:5d:0b:53:66:c5:8f:
01:34:65:f8:ad:7e:cc:a3:46:3e:0b:cc:07:d1:ae:
1e:fd:eb:49:e2:78:02:1f:2c:a2:5b:e3:09:94:0b:
f0:7c:70:d2:97:45:28:cc:2c:3f:f4:8e:a7:6a:91:
78:6b:8b:97:e0:dd:1c:a3:f8:4b:90:09:b3:e5:95:
f0:f3:62:ef:2e:a0:30:da:ee:c1:dd:ca:93:59:04:
45:7a:09:a4:c8:5b:e0:64:f7:37:3a:31:83:68:11:
c4:c5:ad:bf:40:70:6a:a0:65:db:c6:c5:19:96:01:
42:e3:5d:3c:18:20:7d:ca:b9:96:0d:cd:77:cd:70:
63:68:ae:d3:32:5a:16:91:88:c0:82:f3:cb:07:4e:
05:71:ca:8c:91:e6:50:18:d8:7c:99:a7:a4:9d:14:
b1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:34:57:49:22:D8:A2:4F:50:99:59:13:D7:44:FF:DA:8F:1E:92:10
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145234.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa18::/32
Signature Algorithm: sha256WithRSAEncryption
87:78:31:55:d5:ff:93:34:ed:9c:56:79:e6:24:42:68:c5:75:
00:49:dd:15:c2:a2:dc:bc:04:21:2e:37:7e:e8:70:2a:b3:89:
86:ce:0a:a2:d7:31:d3:ec:e0:d9:e6:b9:c3:ab:c8:96:0b:fa:
b3:aa:3a:cc:d6:8f:09:81:2d:fd:ce:2b:e8:1c:27:85:6c:f0:
91:6b:69:3a:16:d1:e5:e6:3d:83:79:77:27:99:c8:22:56:43:
30:ac:32:83:8e:75:30:26:58:a9:89:14:7c:96:5d:62:f9:ed:
69:e4:7b:4e:6d:57:43:b9:db:9b:1a:64:62:40:24:ac:f0:64:
8d:a3:84:a5:68:b8:e9:ae:37:78:f9:6c:88:30:6b:b0:ce:8c:
61:3f:3a:e5:20:35:37:c4:c7:b7:1e:b7:d2:41:21:12:00:85:
ff:ac:52:00:8e:f0:bd:74:31:fa:12:de:30:f4:a8:53:dd:22:
f1:f8:5d:3b:f0:1e:fd:a7:e4:c9:a5:01:5e:5a:9c:5d:e6:e2:
a6:1b:61:a7:4c:43:c3:14:83:8b:0c:8c:d7:1b:9a:29:0b:2c:
e9:01:b0:9b:b0:31:12:6c:a3:09:81:fc:40:8a:a5:54:8b:8e:
a5:11:db:2f:b4:88:aa:ee:8e:24:7e:36:c5:95:d3:ac:9f:6f:
18:71:46:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:13 2026 by rpki-client