Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145802.roa
File: AS145802.roa (raw, json)
Hash identifier: kAeUjhfLPIu/9a36EeTHL0nUtt6+x1J2vuxqSeICDcY=
Subject key identifier: 4A:72:54:8D:80:3D:19:5C:81:EA:F3:3B:E8:6C:4C:86:F5:B8:49:F9
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3EF10129C4B5802D7E8AF3C2351ED2935DB5E8B1
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145802.roa
Signing time: Tue 26 May 2026 06:13:03 +0000
ROA not before: Tue 26 May 2026 06:08:03 +0000
ROA not after: Tue 25 May 2027 06:13:03 +0000
asID: 145802
IP address blocks: 240a:ac50::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:f1:01:29:c4:b5:80:2d:7e:8a:f3:c2:35:1e:d2:93:5d:b5:e8:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:08:03 2026 GMT
Not After : May 25 06:13:03 2027 GMT
Subject: CN=4A72548D803D195C81EAF33BE86C4C86F5B849F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f7:57:3d:0f:bc:91:0c:3a:cf:7f:3e:71:03:
51:a3:70:b0:47:3b:a9:ba:15:06:c8:b3:dd:43:2b:
7f:dc:a0:81:45:8d:d7:b2:d2:21:24:07:53:1f:82:
a6:27:48:35:e1:1b:f9:28:ba:0e:3f:e1:e6:3a:89:
6d:8e:6f:5a:6a:84:20:2a:b1:be:e8:e6:78:0d:fb:
39:48:41:dd:a2:33:54:9d:78:28:2b:f0:6e:f9:72:
f5:46:40:88:d1:28:37:81:39:db:0a:4b:ba:4d:1d:
f0:19:84:52:92:c8:75:7e:b4:e9:00:09:09:ec:6d:
4d:c8:ef:f5:cb:e4:56:ca:56:01:82:dc:bf:01:48:
34:90:0a:9b:0b:af:07:5d:76:b8:0c:11:4d:a0:26:
df:60:26:35:7a:82:19:90:a1:1b:61:5e:5a:6d:75:
4f:79:31:1b:87:49:94:20:e9:22:8e:bd:86:bb:07:
c0:ff:59:e9:ac:85:65:9c:a9:80:c1:8d:6b:1c:1b:
4c:7d:03:5e:fb:9c:06:16:cf:28:02:34:e4:22:09:
35:fa:10:00:24:93:d8:1a:a3:50:d2:2a:7a:9d:4d:
d5:cb:10:18:ab:09:36:de:50:f4:13:1d:28:d0:e0:
49:8e:ab:34:74:57:8f:68:8b:8d:fa:55:f4:c4:24:
9d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:72:54:8D:80:3D:19:5C:81:EA:F3:3B:E8:6C:4C:86:F5:B8:49:F9
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145802.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ac50::/32
Signature Algorithm: sha256WithRSAEncryption
69:02:f1:9c:bc:62:34:7a:b7:63:62:03:5a:a6:81:60:54:aa:
ee:6d:06:c4:31:aa:17:98:96:64:b7:cc:20:b4:a3:86:a1:7f:
54:fd:a4:6b:04:6e:ad:0e:61:c6:c1:64:28:56:27:ff:94:ab:
31:f0:18:9b:00:67:0b:78:9f:ba:1b:ef:b9:96:95:fd:b9:8d:
90:55:56:83:fb:7a:9a:af:20:03:dc:db:fb:a5:17:90:18:f5:
ea:d7:4b:82:9b:ab:59:ef:89:aa:77:a8:a8:7b:92:f1:ef:e2:
5d:bf:4c:6a:d5:84:45:22:ea:02:89:ae:b0:fb:77:89:a6:cf:
a7:16:ce:ad:40:e7:2d:5f:5f:de:22:f2:b0:e2:a9:8a:68:1b:
02:f1:8d:d4:83:f3:bc:f3:91:86:e1:22:fe:65:6e:86:48:a8:
40:90:90:5b:be:10:94:15:ec:0f:20:5a:83:cd:b2:d5:b5:9a:
98:7b:50:da:2f:19:16:22:8d:39:76:21:45:f2:aa:08:3c:25:
b7:68:2d:8c:0f:dd:15:09:5c:f7:52:cf:c8:ac:0e:46:47:27:
ff:6b:e7:43:c1:35:6d:f7:31:d6:f5:8c:69:f3:40:6c:20:31:
87:c9:47:e7:f0:02:ee:69:d1:13:50:7b:4a:26:f2:3e:7f:7f:
8a:72:6e:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:00 2026 by rpki-client