Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145432.roa
File: AS145432.roa (raw, json)
Hash identifier: LP/FImY6fIJHgxDJfNgK6d2jre/SZTL2oSAI2i92s+0=
Subject key identifier: 74:D0:29:9C:A9:6C:36:11:E2:D5:50:E2:A5:57:3B:4E:6A:7A:FC:80
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4831512532A391E30A2B85ABAA37DE9F231BE8C4
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145432.roa
Signing time: Fri 22 May 2026 01:50:12 +0000
ROA not before: Fri 22 May 2026 01:45:12 +0000
ROA not after: Fri 21 May 2027 01:50:12 +0000
asID: 145432
IP address blocks: 240a:aade::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:31:51:25:32:a3:91:e3:0a:2b:85:ab:aa:37:de:9f:23:1b:e8:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:12 2026 GMT
Not After : May 21 01:50:12 2027 GMT
Subject: CN=74D0299CA96C3611E2D550E2A5573B4E6A7AFC80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fd:8e:93:06:10:ec:f3:56:0f:e3:73:49:a4:34:
76:45:3d:40:83:25:34:2d:9c:9a:38:35:d4:f2:58:
f7:83:5c:46:f9:3e:33:3c:90:e5:fe:8c:7e:86:e1:
35:7f:1a:bb:8e:e5:77:f5:3f:0d:c6:08:a7:89:81:
ba:fb:ed:9d:e0:28:58:f6:12:d7:a4:57:fe:6d:f6:
3d:cd:70:e6:37:8b:09:2d:fc:c7:81:6d:a9:75:bb:
8a:68:25:15:f3:4e:4b:25:12:d1:b6:e3:81:ff:ef:
15:c3:01:57:78:c6:18:9b:9b:1d:28:c0:ac:8c:89:
03:b6:13:5c:c6:75:b6:97:4c:de:2f:99:e7:37:9a:
66:91:e5:ba:12:78:68:5a:c6:8c:37:1e:b0:ca:a8:
56:09:42:0c:f1:ae:42:b7:7a:9e:ec:63:51:1c:18:
6b:72:78:96:7e:b4:9d:db:a7:ea:34:64:ca:f8:25:
7a:60:5f:f0:5d:6f:e5:cb:d8:b9:99:be:02:63:0f:
2c:5e:a9:07:06:9e:8e:18:c0:ae:a7:75:f2:71:81:
bf:3e:65:c5:c7:53:cc:1d:66:43:a6:d7:db:d1:18:
84:6d:3a:3f:d1:5d:71:19:3a:8f:f4:39:45:20:ae:
b8:d6:0b:f5:16:3a:d7:8d:e6:82:f3:ae:86:e4:cb:
4f:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D0:29:9C:A9:6C:36:11:E2:D5:50:E2:A5:57:3B:4E:6A:7A:FC:80
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145432.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aade::/32
Signature Algorithm: sha256WithRSAEncryption
00:f2:01:32:e6:87:ca:a5:ed:71:fb:0b:a9:d4:7f:1b:a8:92:
98:c1:d9:fc:56:0c:d9:cb:54:e0:0c:20:dc:6b:fc:e7:a3:dc:
78:a7:2d:6c:be:d2:61:f4:ca:dd:d1:c7:6c:51:f2:b5:23:f0:
6e:9c:1a:86:13:bf:83:75:f8:c9:f3:25:71:d7:0a:c0:46:d2:
05:97:d5:91:64:94:65:43:c0:8e:2e:20:84:62:90:6c:8b:4f:
1e:a3:a6:6f:bd:8b:66:3d:8c:7c:71:5f:02:36:e2:dd:39:cc:
01:4b:bf:8b:37:04:b1:a8:83:a7:f2:8a:ed:cd:2e:8c:01:c4:
0d:b8:f1:5b:a3:34:a2:92:e4:9b:e6:d8:7f:1e:76:02:e3:36:
30:67:05:2a:62:7a:e4:80:98:48:67:2c:b0:a0:26:77:67:27:
63:a0:3d:94:0e:5f:23:ca:79:8c:33:f9:ed:94:b5:16:0a:21:
e1:1d:cd:d3:ba:b4:e7:03:0f:a3:40:5c:40:38:55:29:fa:fe:
15:34:0d:a0:cc:a8:cd:64:9f:80:b6:96:7e:d4:ae:a4:cb:88:
b6:84:47:4d:3e:6f:03:1c:10:ef:57:fd:b5:16:49:1f:51:c4:
f3:ee:23:0c:e3:21:6e:59:fd:8a:2c:9b:1f:43:17:b9:7b:5e:
75:99:52:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:07 2026 by rpki-client