Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145324.roa
File: AS145324.roa (raw, json)
Hash identifier: JZhZa1Jquc5GsnNXLIQ7RKvxoLwBQLK9CCciiMUemko=
Subject key identifier: 16:B4:A0:3D:99:D6:DC:AE:83:99:2B:D6:A1:36:D4:48:82:B0:24:02
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 75E1EE4F2B5D3F92BBDC06040E9FF53B19802F4E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145324.roa
Signing time: Fri 22 May 2026 07:09:17 +0000
ROA not before: Fri 22 May 2026 07:04:17 +0000
ROA not after: Fri 21 May 2027 07:09:17 +0000
asID: 145324
IP address blocks: 240a:aa72::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:e1:ee:4f:2b:5d:3f:92:bb:dc:06:04:0e:9f:f5:3b:19:80:2f:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:04:17 2026 GMT
Not After : May 21 07:09:17 2027 GMT
Subject: CN=16B4A03D99D6DCAE83992BD6A136D44882B02402
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f3:c7:d4:86:7d:58:cd:d0:f0:05:84:07:de:
7e:73:52:96:a0:2b:91:e1:a3:bd:bb:6a:39:21:ef:
27:86:29:a8:06:df:5e:79:43:74:2e:26:e3:20:f5:
fd:3d:1b:90:4d:ef:65:4e:4c:76:6a:ab:f7:c6:67:
5a:12:7b:90:59:68:4c:59:cf:0f:76:7c:13:50:d3:
eb:70:86:ba:dc:0c:e5:44:03:3a:5a:df:c9:9f:35:
56:db:fd:75:f8:06:f0:a5:e6:2a:95:ba:ad:38:9e:
9b:8c:f0:7f:6d:36:af:d3:8e:a9:a1:d5:0f:d3:6c:
42:dc:72:8b:85:3a:db:b0:24:4a:c2:88:2d:ef:42:
8b:15:d5:81:2b:a4:4f:db:33:bd:36:31:44:bd:d6:
f5:49:19:c0:c4:77:0d:16:85:6b:49:66:cb:c1:9e:
eb:03:09:78:18:fa:85:7b:30:2c:14:40:94:41:c6:
f8:16:0c:d3:5a:54:9c:e2:c9:38:68:fb:2b:36:ca:
9b:5a:1d:95:c1:dc:3e:79:f3:23:86:57:55:1b:10:
fa:ba:85:be:ff:58:1e:bf:ca:b7:57:ed:f8:be:0a:
2f:f2:39:df:37:af:9e:dd:6e:2c:87:e4:eb:7b:85:
b9:b3:6b:5b:5f:7b:e6:4d:51:59:03:d5:21:96:0c:
53:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:B4:A0:3D:99:D6:DC:AE:83:99:2B:D6:A1:36:D4:48:82:B0:24:02
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145324.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa72::/32
Signature Algorithm: sha256WithRSAEncryption
9e:85:c1:18:79:2f:6a:87:f3:57:ff:f9:ac:5c:68:39:9b:73:
06:cd:a4:cf:39:4f:1b:d3:ad:16:48:07:42:c3:53:63:62:ef:
3f:e1:20:f8:6b:b6:1a:13:ce:46:2e:55:ea:60:e6:d6:ef:d7:
e3:51:d7:86:10:f2:60:f3:f0:75:60:74:19:4d:84:c5:bb:e1:
2b:e4:9e:7a:57:6a:08:ba:de:86:dd:da:85:5a:81:b9:08:0f:
ac:ef:72:43:8b:0f:ec:5c:68:18:e7:cd:26:8c:dd:6f:df:6a:
1b:dc:47:a3:fa:0f:ee:2c:23:cf:39:ad:b1:01:21:2f:30:4a:
9b:44:f2:90:eb:16:85:e5:89:ca:b2:0d:17:c4:a1:d7:8a:ff:
d2:a0:5e:33:6b:54:e8:08:f5:62:32:5c:e6:e0:e2:19:1f:13:
17:5c:45:1a:49:60:81:61:49:41:52:6c:40:4a:30:b5:3e:6b:
c7:34:b8:2e:9c:b7:6d:90:1b:75:f8:53:bc:ac:41:88:56:d8:
61:fd:15:f1:0c:f9:24:88:92:54:3a:e5:7c:2f:d8:fe:e9:31:
a3:fa:58:3c:47:3f:5c:05:23:fd:fd:63:5e:03:c8:37:be:a0:
80:0f:9a:7c:11:b2:f3:de:02:46:08:24:5e:3d:3f:07:45:9d:
e9:fc:2e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:00 2026 by rpki-client