Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145472.roa
File: AS145472.roa (raw, json)
Hash identifier: 1Rse3bmPb/WVRtvJcKGCJC1nhrwExMdkgsj252yt2CI=
Subject key identifier: 40:28:FA:12:A9:B1:DE:4C:7C:1B:6D:57:0B:DA:39:79:D8:97:77:8C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 454B4B0CF23443F6990A41813A491A0909C3E781
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145472.roa
Signing time: Tue 26 May 2026 02:35:09 +0000
ROA not before: Tue 26 May 2026 02:30:09 +0000
ROA not after: Tue 25 May 2027 02:35:09 +0000
asID: 145472
IP address blocks: 240a:ab06::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:4b:4b:0c:f2:34:43:f6:99:0a:41:81:3a:49:1a:09:09:c3:e7:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:30:09 2026 GMT
Not After : May 25 02:35:09 2027 GMT
Subject: CN=4028FA12A9B1DE4C7C1B6D570BDA3979D897778C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3c:0b:da:2b:ab:95:c4:3a:ad:ed:31:d2:22:
92:73:2c:6c:ea:5a:6d:55:be:5a:e7:23:09:b4:40:
25:b6:e0:87:bf:3f:be:7e:10:ad:39:ee:43:20:6b:
a1:13:2a:46:14:e8:9a:51:40:b9:10:3c:cd:2c:2c:
85:1a:4c:0f:98:4f:ba:b9:e5:40:2d:b7:dc:2a:9c:
88:bf:aa:fa:43:d9:b7:9b:72:4c:77:50:48:0d:10:
19:9b:97:9a:b5:3a:05:d5:02:19:57:d6:b9:95:30:
40:08:b2:bf:dc:24:11:d1:a4:b7:b1:15:cb:9d:6a:
9c:8f:1d:ae:03:0c:d7:6d:ba:76:2c:6a:59:d3:4a:
35:64:4b:b5:c0:9b:1c:dd:5d:77:77:f8:78:cb:df:
b6:25:fd:c2:df:8b:ec:f6:1e:db:cb:a5:fe:41:64:
ed:2c:ce:57:23:d2:10:75:a2:d6:2d:1b:28:fe:2a:
dd:bb:bc:38:db:be:e0:fe:fa:8c:17:89:5b:4d:7b:
d0:63:b7:d9:4f:25:1f:36:3e:af:32:c3:87:7a:30:
90:51:58:d9:97:6f:79:67:b0:dd:80:fe:b4:1b:93:
7b:c0:be:5f:09:ad:1d:52:ea:cc:21:71:9b:ab:4a:
1f:8c:2f:2c:3e:5c:1b:c9:74:ec:e1:ba:ec:86:f5:
27:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:28:FA:12:A9:B1:DE:4C:7C:1B:6D:57:0B:DA:39:79:D8:97:77:8C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145472.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ab06::/32
Signature Algorithm: sha256WithRSAEncryption
9f:ab:0e:20:a8:6c:9e:1e:98:ee:a0:09:23:ef:82:9d:b4:54:
64:10:1c:1f:1d:99:4c:37:46:17:90:fb:f1:c0:5c:9a:9b:af:
b8:3f:e2:6e:28:1c:d6:be:a5:05:ae:88:ec:25:84:62:3f:31:
19:ce:76:87:71:78:ec:5f:a7:c0:3e:0f:73:e1:7a:77:61:83:
26:11:bd:b9:a0:10:ba:6a:d0:88:b1:0c:be:30:c6:86:8f:13:
85:e8:f4:17:7c:c1:bc:db:0b:84:2d:a2:8a:da:ee:ed:8f:14:
9f:fb:b4:5b:89:f0:cc:f6:cb:ff:b5:4e:d5:4d:11:10:d8:19:
50:0a:61:10:78:8c:5e:83:a7:e3:07:da:df:5c:24:55:93:ec:
7d:ea:38:89:da:61:f2:7b:bd:a4:e0:cb:3a:d0:14:b2:66:9b:
a0:0a:44:6d:bd:ec:86:3a:a1:1a:ea:ab:44:ef:ed:4b:53:02:
3b:d5:51:98:70:c9:33:3c:89:fa:57:d8:94:14:b0:11:a6:14:
5f:dc:ee:68:ee:1d:12:77:34:ed:53:74:6b:18:c1:a4:6f:af:
58:eb:ca:3a:29:68:96:c1:f0:22:52:10:29:b5:b4:89:ba:ed:
14:f4:a6:bf:08:c9:cc:87:2b:56:69:77:b4:7b:1c:5b:28:24:
61:7b:fa:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:39 2026 by rpki-client