Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145252.roa
File: AS145252.roa (raw, json)
Hash identifier: BJIf/StMWC/6xHD8Vp3RhVKsb4YMIIwx/sTzmYTQd18=
Subject key identifier: C9:05:CD:50:A6:9D:03:BD:F8:32:0B:56:62:3B:8F:F1:60:B3:DA:4B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4B373094561D3883C476A20365906B13C3758078
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145252.roa
Signing time: Mon 25 May 2026 06:28:43 +0000
ROA not before: Mon 25 May 2026 06:23:43 +0000
ROA not after: Mon 24 May 2027 06:28:43 +0000
asID: 145252
IP address blocks: 240a:aa2a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:37:30:94:56:1d:38:83:c4:76:a2:03:65:90:6b:13:c3:75:80:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:43 2026 GMT
Not After : May 24 06:28:43 2027 GMT
Subject: CN=C905CD50A69D03BDF8320B56623B8FF160B3DA4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:77:4e:bb:55:e8:84:2a:05:35:ed:a8:eb:4d:
aa:8b:3d:b7:d4:f7:6f:2b:4e:a0:8f:d0:c0:13:2e:
07:ba:61:c3:74:5d:6d:8f:72:9b:ef:a7:77:53:9f:
4e:43:d2:f0:d4:31:f6:af:bb:8b:40:fc:0b:b2:90:
e1:fe:67:a5:38:6e:1b:89:c5:3e:43:a6:04:4b:3f:
01:64:6f:51:05:c1:37:b9:da:1b:1e:77:5d:8c:c0:
30:db:a1:32:46:9e:53:8d:e1:78:5f:7a:6b:8f:69:
77:02:95:92:24:35:fc:e8:f0:f6:53:3a:ee:ea:cc:
8d:bc:b2:ac:63:13:d3:7b:2a:04:62:46:6f:9f:e6:
db:8b:dc:8d:ba:00:c1:b8:a1:30:5f:b4:cb:b4:4a:
b9:86:77:f3:15:18:4c:d3:b7:d3:7e:cf:8f:09:70:
2f:4f:cd:06:bd:78:8a:3b:4a:b1:74:82:6f:78:c8:
54:80:76:d2:ef:54:3a:d4:1e:af:a5:49:9f:9a:c2:
7d:81:c8:3f:28:e2:59:54:d8:21:b0:ec:1d:12:0c:
fd:7c:31:c2:98:b2:aa:93:1f:72:d4:8c:35:f9:3c:
9f:b7:6c:dc:d6:6d:7a:62:2e:d3:28:92:e2:92:73:
fb:dc:58:99:9b:2c:25:6a:82:86:ff:0f:1f:79:08:
52:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:05:CD:50:A6:9D:03:BD:F8:32:0B:56:62:3B:8F:F1:60:B3:DA:4B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145252.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa2a::/32
Signature Algorithm: sha256WithRSAEncryption
25:17:bf:14:15:e2:7b:fd:25:e6:a1:32:bd:24:52:8a:8f:f8:
b6:e7:d9:41:d5:39:40:43:15:20:f3:1e:2f:00:35:ad:e8:1f:
3f:3b:09:6f:32:69:8b:89:25:dc:68:22:a6:c2:4f:4e:33:9d:
2e:f9:21:43:9e:a9:c0:ef:17:ae:32:63:22:2d:60:2c:41:bd:
7e:34:1e:5f:bd:56:de:bb:0b:97:fc:0b:77:c5:fe:90:62:61:
78:9c:cb:28:8e:46:bd:c0:04:c2:9c:76:d7:72:e3:6e:5b:93:
7b:d9:0d:e5:be:f9:d9:7a:ba:fe:55:4e:c2:68:a4:dc:c1:a3:
97:4b:c6:a2:83:de:d0:5e:af:da:eb:b7:69:38:ff:c1:f3:40:
d6:cb:09:b1:b6:9c:d6:07:9a:69:bd:20:04:94:05:eb:25:70:
47:73:b7:38:ac:c2:e2:99:58:14:52:b2:93:4f:99:3b:ab:bb:
2f:8a:c7:f6:ae:fc:1f:24:c3:6a:0b:73:ab:89:ae:98:e0:88:
f2:5d:73:33:2c:3f:07:30:b0:0b:ef:4b:ca:0d:2f:f8:08:4c:
6b:7e:db:8b:07:5a:1b:b4:bb:3b:79:c1:df:14:4b:53:8b:df:
5e:42:f4:8b:22:9a:3b:d9:e6:2a:e7:dd:00:b9:fb:fd:b1:d1:
f9:97:35:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:49 2026 by rpki-client