Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145524.roa
File: AS145524.roa (raw, json)
Hash identifier: goRvzeaRYgIQlu42MZZA9gbIxgO54AhjrOMEYymhEZg=
Subject key identifier: 7F:F2:E5:21:3D:38:6E:B4:DC:06:3C:8E:27:5A:8E:75:22:7A:58:F2
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 45640E6D46771C18B936C00CB6C00F1CFA89CFEE
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145524.roa
Signing time: Mon 25 May 2026 06:28:32 +0000
ROA not before: Mon 25 May 2026 06:23:32 +0000
ROA not after: Mon 24 May 2027 06:28:32 +0000
asID: 145524
IP address blocks: 240a:ab3a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:64:0e:6d:46:77:1c:18:b9:36:c0:0c:b6:c0:0f:1c:fa:89:cf:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:32 2026 GMT
Not After : May 24 06:28:32 2027 GMT
Subject: CN=7FF2E5213D386EB4DC063C8E275A8E75227A58F2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:f4:14:d0:37:2f:67:47:01:40:cf:62:24:e6:
92:9f:e1:58:e0:3a:b7:7f:39:eb:4a:31:c9:71:49:
81:60:7d:fa:05:c6:9b:69:46:07:47:96:e3:1e:9b:
b5:51:fc:76:38:ca:c9:c1:69:33:ab:bb:12:4e:d8:
88:fb:c4:26:14:ac:1b:2d:fc:8a:81:f9:56:27:4a:
cc:c9:cb:d7:e7:b5:76:17:bb:c5:95:99:f0:61:93:
2c:89:a5:28:31:bf:88:d9:35:22:cd:15:b2:dc:b1:
4b:ef:79:07:73:79:ca:f2:40:c2:05:06:cf:87:f4:
56:a1:0f:87:92:89:04:36:f9:e4:a4:7f:51:a5:86:
26:f5:e4:a9:9b:31:c2:78:bf:1e:d5:5a:09:a7:31:
72:ef:37:ad:b5:f4:df:49:ac:d0:e6:d3:7d:d6:db:
42:67:ab:41:2b:eb:b1:af:6c:23:e6:5c:6f:10:b1:
6e:42:f8:3e:75:57:cc:1b:08:46:d7:73:2d:31:7f:
78:db:7e:5b:21:a9:6a:bc:12:f8:6f:ec:7c:dc:6a:
df:04:8f:d4:ff:61:c8:5a:b7:37:76:ba:53:cb:27:
d7:66:d8:98:e3:30:69:cf:e2:ab:b0:b7:65:a1:e5:
8c:37:3e:fd:d8:96:a8:27:3c:bf:19:73:1f:5d:2e:
68:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:F2:E5:21:3D:38:6E:B4:DC:06:3C:8E:27:5A:8E:75:22:7A:58:F2
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145524.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ab3a::/32
Signature Algorithm: sha256WithRSAEncryption
9f:c6:a0:23:80:8c:27:d4:61:a7:39:59:b2:f1:76:1a:fb:11:
b7:52:19:fb:4e:55:1b:cc:57:5e:88:86:53:a8:b6:d2:79:9a:
9c:88:b9:f4:e4:c5:b7:05:d7:48:8c:30:f9:78:0e:83:b3:be:
54:f2:3e:b0:37:7b:e3:5c:d5:4a:66:95:2b:ac:3e:8e:e8:c5:
67:aa:ef:fe:77:cf:c2:97:f4:8b:cf:3c:5c:9f:eb:e6:63:1a:
6e:24:f5:ef:f5:15:f0:29:87:d7:0d:92:87:6c:28:17:97:5c:
72:ff:b1:b0:59:8d:65:3b:60:05:0e:ca:15:67:18:fe:35:99:
c7:55:33:53:ae:1c:00:ca:60:d9:46:c4:40:f8:33:68:04:33:
ba:1b:ce:c8:d5:a1:fc:d4:d7:cd:7b:84:a9:d7:35:04:04:11:
ad:86:d5:18:68:1e:9d:e5:3b:e6:80:98:47:22:6c:70:36:24:
84:a1:46:cf:ff:eb:fc:b9:fd:4f:db:69:98:e2:42:f3:bc:aa:
db:37:08:43:be:1b:d2:c0:d7:bd:20:4c:b6:70:f5:6e:b7:df:
38:eb:f8:80:00:c9:55:99:db:d7:42:0f:70:d7:07:71:df:85:
1b:0c:a2:54:1f:0c:7b:1d:de:2c:0f:4e:36:53:5c:22:5f:0e:
4e:86:65:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:12 2026 by rpki-client