Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145004.roa
File: AS145004.roa (raw, json)
Hash identifier: 11iaTAQ5mfAhxk42YTcHKmaJEAA8PG96TqkaSETCVr0=
Subject key identifier: CA:84:85:A4:F7:DD:2E:EE:50:6A:00:24:B8:20:B7:80:28:6B:3F:00
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7923DF5CA2A7E266EA7FF9E2C7731A38BAC98E71
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145004.roa
Signing time: Mon 25 May 2026 03:19:50 +0000
ROA not before: Mon 25 May 2026 03:14:50 +0000
ROA not after: Mon 24 May 2027 03:19:50 +0000
asID: 145004
IP address blocks: 240a:a932::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:23:df:5c:a2:a7:e2:66:ea:7f:f9:e2:c7:73:1a:38:ba:c9:8e:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:50 2026 GMT
Not After : May 24 03:19:50 2027 GMT
Subject: CN=CA8485A4F7DD2EEE506A0024B820B780286B3F00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a6:93:b1:29:75:cc:02:13:36:d5:92:85:f3:
cc:99:41:97:96:0c:15:96:47:61:fa:85:97:2a:5a:
e8:cb:80:b4:65:3a:0b:b3:2a:a1:e7:d0:71:54:86:
2b:5a:fe:ec:de:64:1b:d1:1a:fe:1b:c1:96:7b:f3:
f1:fa:0f:79:d1:91:c2:68:6a:97:f3:4a:f3:ee:d4:
aa:32:b2:5f:7e:3d:1b:ad:f3:a2:aa:c9:91:74:d2:
4a:24:02:07:27:4d:15:3b:a1:64:bb:16:21:3b:89:
f2:59:23:93:e9:9a:e8:bf:90:77:51:8f:6d:a5:af:
a2:6e:52:86:e6:c4:7a:4e:80:13:db:2b:26:16:e0:
89:f3:81:10:ca:ba:a3:87:78:83:cb:ae:fa:f0:4d:
d3:3f:a5:d8:44:b7:b7:63:f6:00:46:2c:b9:91:10:
b0:8d:31:4b:58:10:cb:26:d8:81:a0:5a:88:4e:2a:
c5:16:5e:53:2f:8f:f7:89:b7:d7:41:de:53:32:b5:
d2:3b:30:9a:15:6c:a5:f9:32:85:90:73:fd:3f:a9:
7c:44:86:23:7a:2a:60:0a:05:65:3e:dc:00:38:98:
f2:c1:b8:72:27:f2:3b:5f:96:3e:75:f8:8b:3d:5a:
c5:32:ad:4e:32:24:7d:44:45:c7:43:e2:e2:80:3d:
de:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:84:85:A4:F7:DD:2E:EE:50:6A:00:24:B8:20:B7:80:28:6B:3F:00
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145004.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a932::/32
Signature Algorithm: sha256WithRSAEncryption
30:f0:dd:ed:19:10:80:e1:85:92:87:28:ef:63:30:c7:7f:82:
c6:82:4a:c9:5e:5d:0b:12:f8:d6:9a:4f:71:de:66:03:0f:0b:
9f:13:e6:52:af:e6:14:d3:b0:58:a1:61:be:10:64:ba:c4:eb:
86:e2:4f:fa:72:e4:bd:01:e8:05:8a:2e:f8:2e:2f:23:bd:55:
d6:d5:2a:37:37:61:56:52:ed:51:10:c6:85:9c:10:3a:15:66:
1f:c2:8c:ba:4f:83:c2:d0:85:18:93:79:54:3b:f8:ec:2c:97:
e8:c0:98:b8:03:55:77:05:06:26:1e:41:80:e0:a0:48:8d:26:
13:40:af:3f:db:36:60:38:c2:97:40:66:be:f0:28:32:f1:29:
d9:2d:d1:92:30:ec:2a:e1:76:26:c5:81:7d:94:bd:08:2c:02:
fd:a8:79:7c:b0:00:39:ab:80:da:61:70:fa:ca:df:26:e6:35:
8a:9c:7b:18:5b:b2:b2:09:5d:86:06:77:96:b3:13:46:18:76:
e7:93:bd:ea:e1:43:4e:57:2a:68:96:73:55:d7:db:62:b3:06:
b3:5c:92:d3:9f:18:4a:37:7b:7e:1d:13:e0:f8:cb:07:ed:33:
64:fd:c5:a9:03:20:51:8a:7a:90:4d:e7:bc:a1:8f:3d:c6:ca:
b8:9d:75:e4
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUeSPfXKKn4mbqf/nix3MaOLrJjnEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMzE0NTBaFw0yNzA1MjQwMzE5NTBaMDMxMTAvBgNV
BAMTKENBODQ4NUE0RjdERDJFRUU1MDZBMDAyNEI4MjBCNzgwMjg2QjNGMDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3ppOxKXXMAhM21ZKF88yZQZeW
DBWWR2H6hZcqWujLgLRlOguzKqHn0HFUhita/uzeZBvRGv4bwZZ78/H6D3nRkcJo
apfzSvPu1Koysl9+PRut86KqyZF00kokAgcnTRU7oWS7FiE7ifJZI5Ppmui/kHdR
j22lr6JuUobmxHpOgBPbKyYW4InzgRDKuqOHeIPLrvrwTdM/pdhEt7dj9gBGLLmR
ELCNMUtYEMsm2IGgWohOKsUWXlMvj/eJt9dB3lMytdI7MJoVbKX5MoWQc/0/qXxE
hiN6KmAKBWU+3AA4mPLBuHIn8jtflj51+Is9WsUyrU4yJH1ERcdD4uKAPd5dAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUyoSFpPfdLu5QagAkuCC3gChrPwAwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1MDA0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqpMjANBgkqhkiG9w0BAQsFAAOCAQEAMPDd
7RkQgOGFkoco72Mwx3+CxoJKyV5dCxL41ppPcd5mAw8LnxPmUq/mFNOwWKFhvhBk
usTrhuJP+nLkvQHoBYou+C4vI71V1tUqNzdhVlLtURDGhZwQOhVmH8KMuk+DwtCF
GJN5VDv47CyX6MCYuANVdwUGJh5BgOCgSI0mE0CvP9s2YDjCl0BmvvAoMvEp2S3R
kjDsKuF2JsWBfZS9CCwC/ah5fLAAOauA2mFw+srfJuY1ipx7GFuysgldhgZ3lrMT
Rhh255O96uFDTlcqaJZzVdfbYrMGs1yS058YSjd7fh0T4PjLB+0zZP3FqQMgUYp6
kE3nvKGPPcbKuJ115A==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:27 2026 by rpki-client