Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145732.roa
File: AS145732.roa (raw, json)
Hash identifier: C4Dv9+FTuTKNA0pU5ftT9/ifJu6jKyDK+yxtHyNoR5k=
Subject key identifier: 67:61:B3:22:DD:20:C8:45:66:03:85:48:05:DA:F4:66:41:CE:7F:61
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6D7C573BF0A93A8F97154666068DE523EA788960
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145732.roa
Signing time: Fri 22 May 2026 06:27:41 +0000
ROA not before: Fri 22 May 2026 06:22:41 +0000
ROA not after: Fri 21 May 2027 06:27:41 +0000
asID: 145732
IP address blocks: 240a:ac0a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:7c:57:3b:f0:a9:3a:8f:97:15:46:66:06:8d:e5:23:ea:78:89:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:22:41 2026 GMT
Not After : May 21 06:27:41 2027 GMT
Subject: CN=6761B322DD20C8456603854805DAF46641CE7F61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:96:ee:8f:30:35:fd:67:61:df:63:92:a9:66:
8e:e1:91:c9:f2:a8:6f:28:eb:24:f2:ea:93:9c:9a:
67:7b:15:1b:41:b5:8e:11:ee:ff:2f:6d:95:59:da:
e8:3c:01:9d:c0:c0:99:d3:9a:ff:b8:a5:94:eb:4b:
69:d8:6a:bd:40:a0:5f:14:f4:ac:e3:96:51:09:03:
c4:f7:ee:fb:56:98:6d:88:e3:12:85:d9:28:1a:e2:
d7:47:6a:8f:60:77:55:93:ca:4c:bc:68:be:e9:8a:
60:65:5e:d3:14:e0:ac:a3:58:95:3e:b2:12:64:da:
a0:10:04:85:ed:7b:55:71:16:b4:97:49:0c:57:1c:
98:f0:94:8f:0b:40:a7:3e:cf:94:d8:5e:3a:0c:06:
c1:da:48:6c:b5:a9:ee:ab:07:a8:dd:4e:c8:cc:d4:
41:25:25:16:ce:c4:c8:90:1f:f5:8c:dc:1b:12:b0:
d4:8a:02:92:c4:db:17:b8:8e:11:d2:17:20:c9:39:
69:37:cb:c8:f9:50:2e:0d:6f:6b:cf:64:fd:17:40:
6f:f9:9a:dc:2e:03:00:a1:99:49:26:ba:63:ac:b4:
94:3b:f3:04:05:44:49:af:a9:2c:96:c7:93:5b:a0:
35:d0:14:2c:81:93:16:79:ed:be:1c:ea:73:44:f3:
9a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:61:B3:22:DD:20:C8:45:66:03:85:48:05:DA:F4:66:41:CE:7F:61
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ac0a::/32
Signature Algorithm: sha256WithRSAEncryption
9f:eb:a5:aa:d4:00:2a:13:fe:c8:01:d5:b0:e9:5b:aa:29:df:
a7:1b:6d:a9:96:f6:1b:77:e0:02:0a:87:6e:86:f0:df:71:e6:
3e:9d:57:b8:d2:91:b8:0f:fb:bb:ba:11:c8:a1:1c:20:af:7e:
a3:af:e9:e6:9c:1b:16:82:b8:62:bd:2d:09:b2:2a:49:b1:2f:
4b:06:5c:ce:4c:5a:ac:60:54:5c:09:68:5c:dd:ec:c5:0e:47:
27:46:6c:70:75:20:e1:e5:61:71:91:d1:19:61:ca:92:2f:24:
4d:d2:62:69:20:49:58:3c:b8:72:a2:ed:c5:b3:f0:e7:1a:73:
f5:25:c1:ed:f3:68:c1:b2:c5:ec:42:74:55:0f:93:c3:10:cf:
90:ae:5d:33:79:92:2a:37:d6:fe:c5:78:f7:55:ae:cf:c5:3c:
f7:e0:f4:0f:5f:7c:e7:86:9e:2e:b5:ae:a5:f0:47:68:b5:6d:
b0:a6:fb:3e:82:fb:39:70:78:44:6f:45:3d:7b:d5:16:4d:fc:
db:3e:2c:59:7d:b1:d8:21:39:9c:d3:fd:f2:98:33:e6:d3:d8:
d6:c6:b3:d8:7d:cb:59:dd:0d:01:f4:8e:58:41:91:ba:44:91:
95:f4:f1:22:46:b2:fa:83:29:20:dc:1d:cf:b3:1e:88:69:8a:
f4:54:01:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:40 2026 by rpki-client