Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145237.roa
File: AS145237.roa (raw, json)
Hash identifier: Qu3rbhv3UodO0wSEHB6qQqTwApl5dQeMOvCzpLL8sYQ=
Subject key identifier: 31:72:42:6F:30:8A:7C:01:13:41:A0:26:A3:7B:96:49:30:4E:A3:ED
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 070DA274B7937ECD17D513CBAD2B5112437BFF46
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145237.roa
Signing time: Mon 25 May 2026 01:51:30 +0000
ROA not before: Mon 25 May 2026 01:46:30 +0000
ROA not after: Mon 24 May 2027 01:51:30 +0000
asID: 145237
IP address blocks: 240a:aa1b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:0d:a2:74:b7:93:7e:cd:17:d5:13:cb:ad:2b:51:12:43:7b:ff:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:46:30 2026 GMT
Not After : May 24 01:51:30 2027 GMT
Subject: CN=3172426F308A7C011341A026A37B9649304EA3ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:4d:96:14:22:fc:76:da:9e:48:7a:e2:cb:52:
ad:ab:54:a3:17:25:5b:52:06:21:8b:ce:ea:96:3c:
b5:a7:52:f7:c7:e9:3b:b8:47:73:98:6c:8d:fc:26:
e9:b0:84:61:06:46:1e:ef:a3:a7:eb:13:5d:c4:ad:
a7:33:d7:a1:93:0e:44:b5:b2:f6:0f:6c:cb:d4:d4:
02:de:56:77:e9:c8:45:17:92:6a:2d:d8:f1:2e:0c:
dc:e4:a8:cc:0e:1e:a3:55:34:43:63:61:5c:e0:ad:
34:c5:d9:6a:79:80:db:e9:e5:af:e4:31:b6:4d:37:
4f:91:70:c7:4b:7d:1f:5d:93:6e:3b:9d:34:e8:14:
9f:48:ba:fb:89:46:53:1f:0b:92:75:c6:f7:23:6a:
82:70:a8:ee:2e:a4:76:91:2c:85:48:27:96:02:af:
32:b5:49:b0:06:43:7a:78:b6:fc:62:f9:7a:c5:0e:
5e:3b:cd:69:da:14:42:c9:22:68:57:0f:c2:af:f4:
5b:f1:5c:92:62:78:04:0f:0f:31:45:d0:47:2f:85:
53:4d:82:9c:45:29:81:10:9c:5f:40:74:f9:24:87:
29:d9:b0:a9:80:7b:92:af:2a:eb:79:37:d6:13:90:
5b:58:9f:11:28:4f:10:ec:39:f0:d1:76:5f:74:d8:
a1:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:72:42:6F:30:8A:7C:01:13:41:A0:26:A3:7B:96:49:30:4E:A3:ED
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa1b::/32
Signature Algorithm: sha256WithRSAEncryption
16:4b:21:a7:10:cb:9a:36:91:33:39:1a:4c:2b:85:aa:1b:e6:
5c:40:12:37:72:22:43:c2:f4:f4:0f:f1:96:fb:13:56:20:ad:
6b:b3:66:22:f4:78:50:c6:5e:0c:1f:0d:88:15:38:c9:ea:d8:
b1:a4:98:e9:d2:66:b1:85:eb:65:81:37:d2:d5:13:e0:b9:ae:
6b:16:2b:af:35:d2:85:5d:a7:c8:b2:28:4c:cc:f3:66:64:f3:
8d:97:8d:45:99:2a:47:e4:e3:21:4e:27:83:0a:b7:39:58:0e:
11:5a:b3:24:87:ce:af:34:a9:60:75:53:5f:6c:05:09:aa:d9:
22:55:22:33:17:e3:5f:87:52:e2:73:d7:52:cd:e0:33:80:30:
99:f6:1b:46:16:02:93:46:54:51:5b:dd:4d:62:62:27:68:82:
31:de:5e:46:42:f6:92:94:36:ce:2e:89:93:7c:8e:97:dc:f6:
cf:53:bb:43:e9:8b:cf:32:b8:e7:41:ee:4d:cf:37:5d:ca:43:
ae:54:68:5d:b7:5f:c3:7f:62:33:79:91:cf:15:67:db:51:da:
8d:b9:84:7c:c4:93:3a:df:bb:50:c1:ad:c0:ec:7f:36:8e:ec:
07:7e:e7:fd:9d:b0:5d:d6:41:c5:7b:27:97:a2:3e:a9:67:65:
05:38:ee:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:24 2026 by rpki-client