Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145240.roa
File: AS145240.roa (raw, json)
Hash identifier: AbIEEiRsdc09tJOESxrlZPC6Ky1y9AlkDEbuJdhUdeM=
Subject key identifier: 58:62:35:F3:1D:9C:A8:CC:8B:55:84:A0:D3:44:93:A9:69:BB:54:17
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 73A029B5092C5AE7183EB6728E1E6F45DE21B6C4
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145240.roa
Signing time: Tue 26 May 2026 06:30:50 +0000
ROA not before: Tue 26 May 2026 06:25:50 +0000
ROA not after: Tue 25 May 2027 06:30:50 +0000
asID: 145240
IP address blocks: 240a:aa1e::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:a0:29:b5:09:2c:5a:e7:18:3e:b6:72:8e:1e:6f:45:de:21:b6:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:25:50 2026 GMT
Not After : May 25 06:30:50 2027 GMT
Subject: CN=586235F31D9CA8CC8B5584A0D34493A969BB5417
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:1c:7c:41:d9:a8:93:e6:5e:e7:91:7c:9b:7d:
9a:f3:fa:62:0b:88:72:56:14:72:66:6c:db:bf:18:
16:ba:ef:59:c9:12:36:8d:1e:8a:07:35:dc:10:d3:
00:ec:1b:a5:cf:6c:f9:91:08:17:f8:7f:ce:b6:4a:
36:ab:50:6d:e8:79:16:84:1c:93:a3:f2:4d:f3:ac:
40:50:33:16:15:07:f9:34:ff:89:bb:e2:31:08:3f:
6d:e1:6a:8a:b8:68:6a:e5:0f:cd:db:5d:85:55:71:
30:da:53:02:59:9b:2a:be:f5:db:1e:e9:64:c3:fd:
e5:e5:e9:f9:a5:8e:19:ad:b1:0a:97:4d:4d:5c:02:
65:69:ac:e0:ea:bd:ca:89:d0:bf:05:24:54:4a:74:
9b:28:48:81:39:54:7e:a9:bc:e5:38:29:4e:2a:67:
dc:b3:ed:b7:da:9d:22:ab:2b:ad:5e:36:fc:5b:ed:
7a:60:ec:ec:34:91:38:5c:7e:37:95:d3:e8:bd:c7:
71:fd:80:b5:19:84:34:0b:15:9d:78:aa:59:66:c1:
6a:9a:0e:41:a0:ab:17:6e:48:0d:2e:5d:05:24:f0:
28:91:4b:a0:f8:76:04:61:68:d8:51:24:32:0c:58:
ea:13:fb:ba:c6:4e:87:23:9f:fb:34:51:dc:34:9d:
4a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:62:35:F3:1D:9C:A8:CC:8B:55:84:A0:D3:44:93:A9:69:BB:54:17
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145240.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa1e::/32
Signature Algorithm: sha256WithRSAEncryption
44:9d:0f:a7:06:d8:c8:9f:d8:a4:c8:8a:55:39:21:2c:b4:05:
28:df:a3:4f:12:a7:1a:a8:93:0b:55:4c:7a:5f:79:f7:f4:ec:
99:ef:0e:57:69:2f:94:f6:16:ca:bc:bd:4a:22:55:32:91:d1:
ce:42:b3:e6:7d:a0:00:b6:c1:2a:27:2b:67:f4:25:4a:42:22:
5b:8e:3b:9e:35:be:4c:5c:a8:27:e3:59:af:51:3f:2e:19:d0:
e3:78:bf:1b:e0:12:1b:5e:fd:d3:8e:d6:1d:94:88:33:4e:28:
16:63:29:83:3d:0b:91:95:d5:78:59:c3:96:70:73:55:17:60:
f7:45:f1:b4:3c:df:19:33:dd:03:b0:f4:db:a2:07:00:47:ee:
f5:9b:9b:83:b3:eb:6d:31:1c:08:3b:19:5a:38:db:a5:a8:13:
4f:63:7c:11:f9:db:40:5f:48:27:2e:47:3a:07:9a:1e:4a:19:
5b:f8:63:fb:90:bc:d3:77:cd:e8:ed:aa:7a:54:5d:d4:5b:ac:
b6:6d:70:9f:4b:42:16:69:af:51:0d:31:9c:b0:2c:37:5a:7b:
45:cf:ad:cb:3d:b0:92:6d:c9:48:b7:a9:49:1e:07:6e:30:3a:
a2:4e:c2:2a:ef:c8:59:4a:b2:88:68:89:00:96:8e:27:98:48:
15:fc:ac:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:40 2026 by rpki-client