Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145502.roa
File: AS145502.roa (raw, json)
Hash identifier: i+PRp7ynfwUvosAKMp83w5MlRV+LlzldxojUwJ1YbfY=
Subject key identifier: 5E:7C:A8:9D:10:46:EB:09:B1:4F:DD:59:DF:E5:ED:63:5D:A3:EE:85
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 49315A3BBE3FFB7D9C8AF39ED2211A7599EDDE13
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145502.roa
Signing time: Fri 22 May 2026 07:41:07 +0000
ROA not before: Fri 22 May 2026 07:36:07 +0000
ROA not after: Fri 21 May 2027 07:41:07 +0000
asID: 145502
IP address blocks: 240a:ab24::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:31:5a:3b:be:3f:fb:7d:9c:8a:f3:9e:d2:21:1a:75:99:ed:de:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:36:07 2026 GMT
Not After : May 21 07:41:07 2027 GMT
Subject: CN=5E7CA89D1046EB09B14FDD59DFE5ED635DA3EE85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:99:59:e8:57:32:c1:12:e5:c0:37:ed:c4:4f:
a7:b3:99:e4:9d:21:7c:15:89:20:0a:25:82:a3:67:
5a:54:75:52:69:c9:69:6a:4f:85:6b:83:ed:dc:f8:
74:97:82:1a:32:7e:39:3f:48:42:80:5a:36:89:a5:
56:7a:ee:ac:46:71:65:33:44:22:aa:c9:37:33:10:
25:91:10:5e:e1:3e:1b:8d:06:ef:ea:a8:60:e1:62:
fb:d5:2c:83:4c:75:2d:33:dd:e7:df:d5:e6:a9:b1:
76:32:4a:8f:8d:b2:42:31:79:cc:4b:d7:65:bf:e0:
f0:ca:d6:f3:c7:19:1d:09:47:9f:2f:a8:8e:f9:64:
11:4c:c3:da:da:d6:cd:da:31:1f:5f:7b:1e:89:8e:
82:0c:98:7c:74:c8:50:cb:5c:5a:9c:02:bc:7f:e2:
78:86:a8:84:eb:2b:34:63:a5:75:ee:44:cc:92:83:
26:ed:3e:09:e9:e4:37:05:6e:c0:75:7c:47:ab:59:
fe:47:68:c7:3a:11:c7:cb:3a:8a:1f:2b:0c:1c:ef:
f9:14:1c:57:97:3e:6f:20:8b:c9:61:26:c9:8c:32:
a6:cb:3a:90:22:60:45:42:59:ac:09:43:0a:05:f2:
29:29:00:11:40:6a:8f:11:e3:00:65:75:ba:08:a5:
7b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:7C:A8:9D:10:46:EB:09:B1:4F:DD:59:DF:E5:ED:63:5D:A3:EE:85
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145502.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ab24::/32
Signature Algorithm: sha256WithRSAEncryption
44:c0:0b:e3:92:0d:ea:28:49:ce:52:b7:fa:a6:99:72:a5:20:
2a:9c:05:d4:1e:b0:7f:71:54:58:1c:3e:e0:43:7e:db:9b:89:
41:34:99:84:7e:df:99:61:77:27:78:65:e5:a1:ee:35:90:32:
33:b1:1f:ea:94:58:8f:be:d0:2b:c9:04:60:f3:98:96:ec:34:
d4:0b:88:d6:6a:59:ee:98:e8:47:a3:ab:e4:01:03:1e:05:a9:
e5:35:08:cc:93:90:b8:cd:4c:cc:38:8f:71:d7:71:e8:8f:02:
1a:5a:98:e2:59:a7:13:ae:4d:58:28:4d:09:8b:f3:6a:4e:69:
dd:5c:1d:56:9e:71:2b:49:59:01:c2:8d:ad:0b:a0:68:35:5d:
ef:2a:bb:62:c3:90:ec:e0:af:b5:b3:fb:b6:ac:47:5f:3a:e5:
8f:6e:52:f6:4b:38:54:19:20:d4:37:7d:4d:fa:cc:e7:e0:07:
a7:4c:54:9d:f1:1e:c5:4b:3e:89:08:9b:18:ec:cb:03:0b:62:
f7:6f:4e:c8:37:65:77:55:a8:90:29:e6:7f:a3:3e:2e:f1:53:
53:d2:5e:01:ea:87:c3:e5:a1:42:f3:31:95:28:24:25:39:21:
88:d1:a8:a7:5d:5a:52:43:6d:53:91:f1:a1:17:ca:a5:f6:e2:
f9:60:9e:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:32 2026 by rpki-client