Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145724.roa
File: AS145724.roa (raw, json)
Hash identifier: a0RLO8L9bc4h2OWdP0owJNQuk0M9aDXXNRUbthdnlKQ=
Subject key identifier: 12:4A:B0:8F:0C:3A:E0:0C:D1:F0:4D:3B:D0:A6:C5:8E:31:4B:E7:5F
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 27D5763F751F32239C973843B6DA5E3D6A876EC5
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145724.roa
Signing time: Fri 22 May 2026 07:25:04 +0000
ROA not before: Fri 22 May 2026 07:20:04 +0000
ROA not after: Fri 21 May 2027 07:25:04 +0000
asID: 145724
IP address blocks: 240a:ac02::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:d5:76:3f:75:1f:32:23:9c:97:38:43:b6:da:5e:3d:6a:87:6e:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:20:04 2026 GMT
Not After : May 21 07:25:04 2027 GMT
Subject: CN=124AB08F0C3AE00CD1F04D3BD0A6C58E314BE75F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3b:be:2e:f2:9e:c4:3c:b2:d6:a7:75:2b:6c:
2d:2d:6d:a1:5d:83:24:de:ad:9f:16:d0:e3:b9:b7:
4d:ec:02:f5:e3:ba:74:7d:40:55:30:99:44:2b:c1:
aa:22:62:36:76:21:f3:4f:ae:37:9c:f5:19:00:1d:
7c:f7:9a:66:3a:63:e3:19:8f:53:de:79:5b:6b:f9:
61:57:be:a5:6a:4c:37:c5:bc:b9:b5:95:14:1c:c0:
3f:49:9c:71:61:86:ae:99:b3:e6:9e:be:5b:0e:35:
93:ca:52:16:c6:33:4b:8e:5e:e3:91:fb:53:7b:c5:
31:bc:e3:52:75:87:85:65:b7:27:d6:77:43:8e:3d:
cd:5d:58:f8:a1:f8:be:e9:eb:c3:dd:a6:93:76:f6:
75:f1:6a:37:30:4d:59:d6:3d:d3:e9:59:44:b6:28:
7b:b0:c8:c0:d1:e9:dc:d0:ff:36:71:6c:d5:e1:d8:
d6:ba:d7:33:88:ce:b2:cb:6c:f2:17:c5:fa:bb:d9:
19:6b:37:09:6f:9e:b2:96:f2:e8:d5:2a:2f:4d:bd:
11:b6:97:0b:ec:b2:4b:e7:5f:89:50:54:54:c0:d0:
70:c2:56:d5:13:06:0d:bf:6e:86:cc:4e:a6:f7:c7:
15:82:7b:84:07:26:d5:99:f9:55:98:85:c1:4a:f2:
c1:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:4A:B0:8F:0C:3A:E0:0C:D1:F0:4D:3B:D0:A6:C5:8E:31:4B:E7:5F
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145724.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ac02::/32
Signature Algorithm: sha256WithRSAEncryption
33:a4:18:a9:a2:74:ce:07:a2:3e:00:cb:d8:51:ff:f9:41:fd:
ce:77:b7:fc:4f:5b:a5:5e:a3:81:91:30:a4:0f:c3:98:c2:be:
94:cd:08:c3:0e:d6:67:18:f3:25:80:c8:08:20:d4:88:dd:be:
f0:be:1e:fd:61:97:0c:ac:b7:e1:76:0b:a9:a3:d7:70:ca:de:
32:a0:9d:d7:f7:57:3c:a0:24:ae:ea:9f:0c:76:be:5a:3d:a0:
68:b1:bb:6e:55:f9:9f:38:12:34:d9:02:5e:6a:60:32:4f:2b:
2a:54:64:2d:a1:50:23:3b:32:58:6a:c4:4f:f4:71:66:10:da:
a9:3a:eb:d6:ab:e3:f3:21:d5:3a:b5:e7:e2:21:a5:a4:1a:91:
cf:80:da:5d:13:4e:cc:a1:2a:06:c7:41:02:de:a3:d8:c6:3e:
ed:f1:ad:1e:3e:89:3e:c0:d5:7b:19:75:6e:e1:ad:1d:ab:14:
c4:c6:31:ac:4b:1d:04:fb:1b:0b:b7:7a:99:c9:a5:e6:56:e6:
f1:71:c6:0f:4e:b9:be:c2:e9:21:8c:a6:2c:51:ec:66:ab:fe:
ea:2e:dc:fe:aa:af:f7:a1:ec:78:f2:37:d4:80:b3:28:e6:e0:
e8:1e:1b:c6:7e:fb:2d:bd:3a:8a:1c:9e:a8:74:29:f7:2d:b1:
09:b7:60:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:03 2026 by rpki-client