Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145239.roa
File: AS145239.roa (raw, json)
Hash identifier: QLAyXG86/YbGmD0SqPU4y1L8JvTBbSqqTnUvAlTWfl4=
Subject key identifier: 31:45:CB:23:61:E0:67:8B:22:88:18:E9:60:D4:90:B0:3A:A7:9A:A6
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2A73D497D88B4E12233EB3C7279E0E33B5110C83
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145239.roa
Signing time: Mon 25 May 2026 02:22:35 +0000
ROA not before: Mon 25 May 2026 02:17:35 +0000
ROA not after: Mon 24 May 2027 02:22:35 +0000
asID: 145239
IP address blocks: 240a:aa1d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:73:d4:97:d8:8b:4e:12:23:3e:b3:c7:27:9e:0e:33:b5:11:0c:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:35 2026 GMT
Not After : May 24 02:22:35 2027 GMT
Subject: CN=3145CB2361E0678B228818E960D490B03AA79AA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6b:43:a8:eb:1a:cb:47:b4:63:9b:5f:d6:b6:
6e:ad:20:e5:38:80:e5:c4:9f:df:0e:cf:8e:00:b5:
57:af:18:93:e5:78:32:0e:d5:2e:cb:b4:ce:7b:42:
42:c4:d5:48:95:5f:4b:08:81:8d:1b:2a:b2:8e:59:
c2:86:70:13:9b:f7:26:5a:59:8d:a4:68:25:58:70:
c3:d9:3c:89:19:18:55:3d:95:ee:2f:ca:8e:c1:64:
14:56:13:25:1a:a9:10:de:e6:10:71:36:db:e0:c5:
31:47:1e:f6:23:29:02:46:2d:c9:3d:a8:41:44:ac:
e6:42:48:9e:89:9a:04:2a:f6:ca:27:b2:56:db:6f:
56:e4:b9:1e:e7:ed:9a:58:c6:89:7e:df:b4:5b:3c:
a0:e5:07:ce:ac:d7:38:e8:76:98:f1:5f:65:bf:63:
ac:2b:db:20:02:2a:b2:67:0a:b8:b3:c7:65:41:21:
e1:b3:a7:45:c9:10:d7:20:c6:8d:38:d4:2d:f8:da:
ba:62:fd:92:41:ee:69:bc:cc:af:08:60:2a:51:2c:
d0:9e:61:89:ad:c4:c5:5a:4b:c5:a1:3d:60:1d:f4:
eb:4f:1f:b2:14:a8:3b:69:a7:9e:76:de:e4:a3:c2:
b2:48:f8:2c:45:ea:ce:c2:66:9e:a8:db:e2:7a:ef:
bc:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:45:CB:23:61:E0:67:8B:22:88:18:E9:60:D4:90:B0:3A:A7:9A:A6
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145239.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa1d::/32
Signature Algorithm: sha256WithRSAEncryption
47:34:d5:ee:fe:0a:e2:b6:85:29:ff:80:0f:73:4c:c6:a9:44:
ba:5c:a7:a6:5f:fb:0a:c4:ce:dd:1f:b0:6b:e1:05:5f:60:3a:
8f:bb:d5:49:01:94:3b:b5:6d:b5:1a:b5:57:61:89:2c:8d:5b:
f8:23:a0:28:0e:76:61:24:65:c7:23:a4:fc:38:69:aa:79:20:
1a:64:e6:cc:e9:78:17:8f:09:4c:b7:8e:ae:c7:6f:3d:f5:de:
c8:6d:cc:49:d0:72:69:ab:04:24:85:dd:fa:bc:18:60:9c:05:
d2:fc:19:ee:ab:13:29:97:e9:3c:89:41:25:01:bf:99:3e:07:
1a:d4:6f:bf:19:02:86:07:03:0b:f8:6a:61:ac:f1:ec:c5:26:
8a:46:83:a9:94:7d:cc:d0:72:3a:84:2b:3f:dc:36:24:29:9c:
be:84:9e:89:2c:b5:ee:be:3a:c3:0f:08:79:ff:5b:89:75:f4:
3d:2f:05:c5:14:97:ad:8f:84:43:7a:c0:86:19:32:81:79:0f:
3f:ae:96:d7:b2:89:46:fd:6b:a7:2c:9c:64:e8:e6:fd:89:33:
6c:f4:81:fa:1d:8e:71:8b:3b:3e:28:b0:a6:1a:2f:d4:dc:73:
ac:4e:60:b8:d2:a6:87:95:0e:90:d0:be:79:56:f4:1b:3b:1a:
c9:ec:60:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:23 2026 by rpki-client