Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145512.roa
File: AS145512.roa (raw, json)
Hash identifier: Ty5Fhhjv37g+uyQhiVb5fRdVFwFfJZHUFm9rfyEPMwA=
Subject key identifier: B3:00:91:19:1D:51:77:87:10:1F:B0:65:52:83:23:3D:A3:E6:EC:F0
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4B188071306DED3C98E3A19086265B715AF9F6F0
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145512.roa
Signing time: Tue 26 May 2026 01:13:02 +0000
ROA not before: Tue 26 May 2026 01:08:02 +0000
ROA not after: Tue 25 May 2027 01:13:02 +0000
asID: 145512
IP address blocks: 240a:ab2e::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:18:80:71:30:6d:ed:3c:98:e3:a1:90:86:26:5b:71:5a:f9:f6:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:08:02 2026 GMT
Not After : May 25 01:13:02 2027 GMT
Subject: CN=B30091191D517787101FB0655283233DA3E6ECF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1a:bd:91:8e:07:52:33:65:85:9d:1d:95:7e:
d6:31:c6:9f:27:ce:44:44:57:47:5d:4d:16:51:75:
4c:44:69:f4:a5:16:98:83:99:ed:8f:53:d2:5e:e3:
9e:99:8e:1a:76:b7:bf:71:b4:15:fb:c0:80:30:8c:
b6:0a:5c:94:4e:35:09:17:b8:20:6d:04:b9:62:68:
2b:e3:af:f5:f0:be:57:b3:92:bf:df:54:e1:e3:73:
f5:cc:60:86:07:47:41:89:b7:e5:da:6c:10:2a:9a:
9a:c9:6f:39:88:82:30:1c:f0:3e:60:8d:2a:fd:f2:
93:46:54:c2:4c:fc:46:3c:05:6d:97:52:ff:6b:5f:
df:67:bc:69:7f:d9:2c:d9:08:32:cc:5a:a0:45:00:
05:1d:63:c4:0a:c0:d1:8c:5d:52:d5:d5:0d:2f:ee:
72:21:34:33:70:87:85:36:8d:ca:55:35:8e:70:37:
d3:34:d3:32:63:93:95:ad:c4:3d:5f:83:a8:ca:db:
25:5f:43:af:e3:0c:5f:c8:e7:25:31:28:b1:e6:e7:
a7:27:07:8d:b5:62:3a:09:00:2f:ac:06:77:ba:2a:
a1:86:d8:ae:0c:71:6a:ad:b6:0f:e6:66:8d:d3:72:
4b:b9:f3:7e:4a:cd:ed:ea:62:f1:4f:16:e5:30:e6:
cf:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:00:91:19:1D:51:77:87:10:1F:B0:65:52:83:23:3D:A3:E6:EC:F0
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145512.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ab2e::/32
Signature Algorithm: sha256WithRSAEncryption
1f:cf:dd:3a:57:f3:25:62:9d:c5:51:f8:9f:4e:99:64:b6:cd:
69:ff:2a:86:ed:17:15:79:f2:65:36:e3:00:1a:77:8e:11:2c:
89:24:3f:06:d3:d7:e5:91:d7:01:4b:84:7a:83:37:90:98:5c:
a3:2a:92:b1:ef:71:bf:80:00:db:da:39:25:14:86:68:e0:74:
ed:e1:6e:c4:90:1e:17:78:1f:07:3a:c1:18:41:10:e2:0d:76:
c1:1f:fc:82:7f:75:5c:94:5f:86:56:40:75:ea:46:2e:75:dc:
05:3f:e3:d7:92:e5:d7:b7:96:c8:67:6f:aa:1b:22:58:b7:7c:
15:57:37:ca:5c:97:03:a7:2d:4d:30:8e:08:e1:55:27:1c:17:
59:03:4f:2c:b8:78:4a:ab:b0:be:16:a0:23:54:c5:e6:ff:5c:
e5:fb:81:2a:65:66:34:64:53:09:a2:0d:bc:37:13:64:20:5f:
71:c9:99:05:fc:10:f9:4b:35:24:d5:f0:11:17:f4:d1:a4:4f:
fa:a5:e0:f3:1f:ca:8b:4d:4f:e8:f2:59:a9:ac:25:c5:f5:24:
dd:30:75:bd:53:fb:c0:6a:d3:28:af:98:df:8b:24:11:3b:63:
a6:b6:76:40:1e:00:87:16:85:06:92:69:3a:97:59:cd:79:e2:
fd:4c:eb:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:50 2026 by rpki-client