Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145522.roa
File: AS145522.roa (raw, json)
Hash identifier: dtWsxwDQQjbnQGKJ4OH5mwTMMSFTQXQO76Xmz21tIqg=
Subject key identifier: 1B:48:BF:98:D9:2F:19:74:49:04:7F:9F:AF:3A:4A:92:3F:B8:28:66
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 07DE7DA28BC7480F57FC8DFC9A0C10C0AAFDD164
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145522.roa
Signing time: Fri 22 May 2026 07:09:09 +0000
ROA not before: Fri 22 May 2026 07:04:09 +0000
ROA not after: Fri 21 May 2027 07:09:09 +0000
asID: 145522
IP address blocks: 240a:ab38::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:de:7d:a2:8b:c7:48:0f:57:fc:8d:fc:9a:0c:10:c0:aa:fd:d1:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:04:09 2026 GMT
Not After : May 21 07:09:09 2027 GMT
Subject: CN=1B48BF98D92F197449047F9FAF3A4A923FB82866
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8f:93:7c:61:ed:ec:2c:57:dd:89:65:45:a8:
a5:4c:e4:35:af:ae:d7:4a:d6:31:96:58:7d:eb:89:
2b:ef:e1:47:18:3e:a5:13:f1:bb:2c:4d:cc:a3:37:
e4:64:07:ad:fe:66:42:7b:17:31:5e:dd:e2:38:ac:
fc:2c:9f:16:25:ce:f5:bf:9e:2e:5a:da:29:ae:56:
aa:f3:13:78:6f:4c:9f:9f:71:fb:86:e3:02:14:15:
d6:31:9b:b7:35:d2:27:58:08:65:54:64:23:df:cf:
01:ba:a9:c0:f9:6a:5b:8a:9d:f8:0d:8b:50:9a:bb:
13:e8:4c:f6:16:64:28:89:26:b9:bd:c7:f0:51:d9:
30:b8:65:00:30:3f:7a:82:79:dc:88:14:56:39:27:
1d:31:7d:59:5f:46:2a:fe:ba:ab:a5:64:f9:c1:47:
92:9c:f1:4e:cd:0e:85:64:80:94:e1:d7:d1:ef:ea:
82:69:ae:34:22:48:ef:6b:36:a8:dd:79:4c:55:e8:
dd:5c:05:92:9a:92:8b:ea:da:6a:fe:91:bd:22:36:
28:bf:74:37:03:82:41:53:6f:9b:5a:84:aa:27:b8:
80:4d:6c:60:6b:29:c8:1a:d0:51:3d:a8:c7:be:f0:
34:64:2d:04:33:1b:b8:74:5b:41:07:56:72:db:99:
19:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:48:BF:98:D9:2F:19:74:49:04:7F:9F:AF:3A:4A:92:3F:B8:28:66
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145522.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ab38::/32
Signature Algorithm: sha256WithRSAEncryption
97:eb:24:4d:79:57:d1:05:15:6d:37:ca:c9:f6:a0:dd:9f:58:
3d:5e:06:3c:b1:9a:98:0e:e4:36:9c:03:62:d1:90:ba:e0:df:
d1:a8:80:9d:aa:08:bf:e1:e8:d9:70:4d:23:11:01:18:4e:88:
7a:84:ae:4b:87:d6:73:df:13:78:62:5e:e3:53:c3:fe:ee:8f:
f2:5d:01:11:84:f9:da:0b:6e:85:0d:19:d0:34:1c:7f:3c:e4:
43:35:77:2f:f1:81:d6:41:0b:46:04:f0:8e:f6:b2:de:ea:29:
6c:47:b3:fc:00:46:ee:f1:18:63:bf:f4:3e:d9:88:9e:25:08:
9c:cd:98:de:4e:bd:74:f5:1c:ae:09:5d:f0:fd:c8:94:52:1a:
73:32:50:91:55:c1:53:e6:d0:7d:94:c3:cc:9d:95:e7:b5:4a:
51:21:46:7c:4c:85:e0:63:b4:1a:f6:3e:b4:fb:35:7e:a1:88:
d9:5b:82:77:18:72:95:4c:a0:7b:bb:84:e5:f4:b1:bf:8e:ac:
9b:22:f4:c3:cc:cd:0c:c2:0f:e6:5f:d5:95:52:f6:20:02:90:
a8:26:2d:1a:e4:ec:60:cd:e4:d4:54:b6:77:dc:98:7d:d8:08:
2e:46:a7:2d:c4:36:6e:a7:7f:0e:6e:1c:64:f6:28:08:ba:71:
c7:a5:43:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:51 2026 by rpki-client