Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145011.roa
File: AS145011.roa (raw, json)
Hash identifier: BQftWsc7ngxC5YyqTHyLPG1B90vDhLszF5nf2VEgFhI=
Subject key identifier: 96:B9:12:8F:CE:48:71:D1:D9:96:D4:CF:D2:B0:05:D2:F3:8C:8E:D8
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7E3052123451AF24C13686EFADA91D4E4133725B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145011.roa
Signing time: Fri 22 May 2026 06:28:04 +0000
ROA not before: Fri 22 May 2026 06:23:04 +0000
ROA not after: Fri 21 May 2027 06:28:04 +0000
asID: 145011
IP address blocks: 240a:a939::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:30:52:12:34:51:af:24:c1:36:86:ef:ad:a9:1d:4e:41:33:72:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:23:04 2026 GMT
Not After : May 21 06:28:04 2027 GMT
Subject: CN=96B9128FCE4871D1D996D4CFD2B005D2F38C8ED8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:0f:15:73:80:8b:f6:cf:82:fd:43:11:03:60:
67:1c:f6:11:95:3d:bc:5e:29:cf:7c:fd:1b:53:fe:
03:0e:db:4b:3d:c2:26:89:49:e9:83:0a:04:8f:3f:
47:76:9e:a2:ad:13:2c:c3:95:f9:8c:54:09:8a:a2:
35:07:29:77:bc:b3:c0:45:ef:90:a0:1b:a2:ee:4d:
74:77:c8:c2:c3:99:fc:74:ea:b8:b2:ed:62:6d:6e:
66:75:19:8d:be:c2:9f:d1:8d:01:d5:da:9c:65:c2:
d4:72:9f:49:9d:3a:17:21:48:b0:18:73:1f:eb:3c:
3e:01:01:d3:98:65:05:d9:7a:ee:c4:39:5b:69:eb:
d2:7a:0b:60:8f:77:88:bd:03:93:c1:ee:c9:71:bd:
21:82:de:dd:96:e9:83:b7:c9:0b:a0:87:a4:90:17:
c4:0a:fb:5e:50:7a:d2:ab:c1:6a:1b:05:28:41:ef:
a4:c7:36:36:05:33:4a:05:91:78:9f:83:74:31:5f:
90:f6:08:4b:60:61:7d:8c:19:7f:a0:68:da:26:30:
c2:3a:1a:ba:d2:31:bb:ba:0d:6d:9b:c4:b8:6d:49:
6f:e4:6b:4f:ab:63:40:5d:1a:1b:a9:85:bf:38:67:
f5:1a:a5:1b:f3:90:ed:c6:fa:ba:45:14:67:b9:ef:
80:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:B9:12:8F:CE:48:71:D1:D9:96:D4:CF:D2:B0:05:D2:F3:8C:8E:D8
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145011.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a939::/32
Signature Algorithm: sha256WithRSAEncryption
4b:1b:4f:ce:77:95:d2:26:85:54:c9:72:3b:80:cb:aa:6c:ed:
a0:8d:98:56:96:fe:a2:8f:3d:78:ed:d5:3b:ad:48:cb:77:fc:
62:60:ab:7f:62:fb:d8:73:8d:ee:52:93:99:5f:06:f4:cf:bb:
db:a3:d5:34:f0:b2:c4:b9:3d:d5:c3:e5:18:c1:57:3f:f1:08:
3f:79:f3:51:de:11:a4:66:82:d7:7d:aa:75:96:55:8e:3e:4b:
d7:a1:0d:7d:e9:7b:a2:82:58:a9:a8:66:d6:94:31:43:ef:78:
5f:be:e3:09:c6:6e:66:09:f9:e7:a8:4c:03:f0:ef:83:51:e2:
b8:35:b4:d9:4a:95:88:de:e9:b0:cb:ca:6c:6b:2a:82:12:92:
07:a1:79:65:c3:6a:69:94:70:54:b1:30:c9:45:dd:a7:90:15:
00:7e:99:6f:f8:9d:43:27:78:17:9d:de:d7:51:40:ec:1b:d5:
4a:35:20:21:97:94:e1:d6:88:e2:23:34:3f:21:2e:e3:42:d2:
74:e0:bd:2c:5d:0d:0d:4d:b9:d9:8b:ec:3d:ed:1c:7c:65:62:
f7:ee:0d:cf:16:55:f7:27:78:80:74:f4:6d:14:00:99:65:e4:
bc:93:e7:5d:f2:00:88:e6:39:8d:10:1e:ba:eb:33:a0:fa:5d:
c9:97:e0:9f
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUfjBSEjRRryTBNobvrakdTkEzclswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjIzMDRaFw0yNzA1MjEwNjI4MDRaMDMxMTAvBgNV
BAMTKDk2QjkxMjhGQ0U0ODcxRDFEOTk2RDRDRkQyQjAwNUQyRjM4QzhFRDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTDxVzgIv2z4L9QxEDYGcc9hGV
PbxeKc98/RtT/gMO20s9wiaJSemDCgSPP0d2nqKtEyzDlfmMVAmKojUHKXe8s8BF
75CgG6LuTXR3yMLDmfx06riy7WJtbmZ1GY2+wp/RjQHV2pxlwtRyn0mdOhchSLAY
cx/rPD4BAdOYZQXZeu7EOVtp69J6C2CPd4i9A5PB7slxvSGC3t2W6YO3yQugh6SQ
F8QK+15QetKrwWobBShB76THNjYFM0oFkXifg3QxX5D2CEtgYX2MGX+gaNomMMI6
GrrSMbu6DW2bxLhtSW/ka0+rY0BdGhuphb84Z/UapRvzkO3G+rpFFGe574BzAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUlrkSj85IcdHZltTP0rAF0vOMjtgwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1MDExLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqpOTANBgkqhkiG9w0BAQsFAAOCAQEASxtP
zneV0iaFVMlyO4DLqmztoI2YVpb+oo89eO3VO61Iy3f8YmCrf2L72HON7lKTmV8G
9M+726PVNPCyxLk91cPlGMFXP/EIP3nzUd4RpGaC132qdZZVjj5L16ENfel7ooJY
qahm1pQxQ+94X77jCcZuZgn556hMA/Dvg1HiuDW02UqViN7psMvKbGsqghKSB6F5
ZcNqaZRwVLEwyUXdp5AVAH6Zb/idQyd4F53e11FA7BvVSjUgIZeU4daI4iM0PyEu
40LSdOC9LF0NDU252YvsPe0cfGVi9+4NzxZV9yd4gHT0bRQAmWXkvJPnXfIAiOY5
jRAeuuszoPpdyZfgnw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:56 2026 by rpki-client