Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145526.roa
File: AS145526.roa (raw, json)
Hash identifier: +pcsA4kbsflpIKJk2CVLfSdWdHd0SfSQ6+q8rU0xyw0=
Subject key identifier: 7A:64:F7:A1:34:B5:9E:31:2D:E9:09:DE:B4:01:85:C8:E4:0B:8B:33
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0804BF43AC943FE4290250779BBB5F17B2984A43
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145526.roa
Signing time: Mon 25 May 2026 01:38:26 +0000
ROA not before: Mon 25 May 2026 01:33:26 +0000
ROA not after: Mon 24 May 2027 01:38:26 +0000
asID: 145526
IP address blocks: 240a:ab3c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:04:bf:43:ac:94:3f:e4:29:02:50:77:9b:bb:5f:17:b2:98:4a:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:26 2026 GMT
Not After : May 24 01:38:26 2027 GMT
Subject: CN=7A64F7A134B59E312DE909DEB40185C8E40B8B33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:57:af:75:8e:44:5e:cc:7e:b6:97:c8:87:66:
a1:6e:39:a0:ef:44:f5:78:42:d1:a8:3d:bb:3a:e3:
9d:d1:5b:83:b7:7d:89:31:d9:c2:ce:51:92:30:a8:
3d:23:a1:fb:20:4e:79:34:73:54:1b:4a:c4:f8:53:
dd:db:73:3d:2f:cf:8e:c7:ae:a3:b5:b6:cf:a0:f7:
43:bd:50:d3:ca:6e:bb:23:a7:ac:aa:73:f7:fd:48:
be:f8:8e:de:20:2b:a5:26:17:f2:1b:3a:26:4d:44:
6f:10:37:e5:cd:c4:7a:8a:1c:90:06:9c:85:51:0c:
e0:11:90:a6:db:3f:6e:a5:46:e1:dd:f8:f8:8d:76:
2d:30:c0:a7:d7:c6:f0:a5:a1:05:86:f3:f3:35:b4:
8e:89:7e:a7:3a:80:40:7d:52:ee:29:18:b2:88:0a:
0d:52:27:cf:12:e4:51:92:6d:3b:c9:e2:30:69:eb:
89:3e:18:1e:c1:af:11:51:b3:b2:bb:00:12:10:5c:
47:14:5f:ff:b7:3e:7d:09:79:57:39:84:94:77:5d:
b7:25:a5:d0:d2:4a:36:cf:61:d3:bc:d0:ac:88:aa:
fc:27:c2:f0:dc:6d:0a:73:97:a8:6f:a0:41:16:5f:
1a:c0:22:52:d6:2b:54:da:09:5f:2d:6e:36:05:71:
fa:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:64:F7:A1:34:B5:9E:31:2D:E9:09:DE:B4:01:85:C8:E4:0B:8B:33
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145526.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ab3c::/32
Signature Algorithm: sha256WithRSAEncryption
b9:3a:c5:16:d4:8d:8f:fd:8f:d5:7e:62:92:e9:c3:b0:e8:24:
ae:64:d0:fa:83:e6:e8:3e:f6:41:6a:73:79:b1:dd:17:59:fd:
55:b1:87:fe:72:07:c5:69:9d:bc:a7:6f:5d:b0:85:88:f3:f1:
26:ec:59:11:70:d1:71:b0:e8:5d:44:6f:a3:a0:ab:d4:e9:57:
a7:ee:23:0c:be:c1:95:32:97:ca:7b:fc:34:23:12:f7:d9:46:
f6:d2:55:bd:94:e1:a0:db:cc:e1:e2:cf:a2:63:d0:ea:e1:65:
fb:67:17:32:d6:46:9f:7c:9e:6b:c9:aa:6e:c7:f0:ff:73:9a:
b4:fa:34:bd:fe:04:e8:35:69:2b:a5:1a:0f:54:8f:29:b2:0a:
ac:54:8b:a9:24:54:0a:7d:f9:e5:b9:6e:0e:7c:77:9a:2b:51:
72:fc:28:4e:5b:70:94:5f:f3:60:23:63:bc:f1:e4:c1:e1:fa:
15:92:ce:d2:32:64:fe:61:97:dd:0b:3f:30:7c:38:4c:72:6a:
12:b6:15:7a:65:df:14:95:23:fb:83:c6:28:1c:b2:fe:28:17:
7a:67:e6:91:ac:a3:26:37:d5:6b:9f:ba:4d:2c:52:e2:bb:da:
b1:cb:61:ac:bf:eb:1c:cf:ce:06:bf:88:86:a8:cf:7a:cd:a2:
f0:e1:ba:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:05 2026 by rpki-client