Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145012.roa
File: AS145012.roa (raw, json)
Hash identifier: fVkb9xzngd26f03WUu8+GvWTqk+/+Wswm6FBB48Ropw=
Subject key identifier: 70:39:EF:CF:BE:4D:9C:10:D5:43:01:73:AB:E0:66:45:40:4B:69:35
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 22B19979B6A095D27ACB431C2C5681979FC15928
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145012.roa
Signing time: Fri 22 May 2026 01:50:05 +0000
ROA not before: Fri 22 May 2026 01:45:05 +0000
ROA not after: Fri 21 May 2027 01:50:05 +0000
asID: 145012
IP address blocks: 240a:a93a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:b1:99:79:b6:a0:95:d2:7a:cb:43:1c:2c:56:81:97:9f:c1:59:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:05 2026 GMT
Not After : May 21 01:50:05 2027 GMT
Subject: CN=7039EFCFBE4D9C10D5430173ABE06645404B6935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:b8:3a:27:d8:2d:93:e1:db:ce:a7:e3:ec:53:
0a:63:78:a6:7e:49:6b:12:53:d5:a8:47:12:30:49:
1b:3d:72:f2:c1:87:0a:00:a5:73:b7:69:cd:81:07:
14:59:f9:6e:0c:fa:14:cb:24:d1:71:67:0b:12:26:
20:88:19:a0:af:68:2b:bd:79:2a:2e:e4:b0:7e:88:
14:67:7c:d5:76:a5:83:7c:49:ea:7c:88:28:19:22:
68:c2:cd:c4:41:40:fc:98:93:ee:9d:23:2f:d1:7e:
df:2b:ef:a9:5e:ce:82:cb:9f:96:3a:a7:15:80:50:
c9:f0:f1:4b:70:72:7d:79:fe:76:0f:3a:d4:cc:e8:
2b:12:de:f3:46:11:39:08:fc:98:d9:7c:12:70:ce:
5d:a7:6e:93:19:7b:31:78:3d:bc:db:a7:f5:b0:a6:
0b:ea:97:1f:91:4d:25:40:8f:a3:37:fe:0f:90:c7:
6b:ee:43:fd:d9:6c:2e:8f:e1:04:a9:8f:c8:24:31:
a5:17:fc:5f:19:2f:dc:23:70:bb:35:bf:62:2a:2f:
d1:4c:a3:6b:1f:1f:f2:48:bb:50:2a:dc:8e:99:89:
f3:d3:55:a2:91:4a:d2:e8:43:d8:62:5f:b3:71:c2:
11:da:cb:d3:0d:04:73:02:4e:11:3d:2f:53:3e:9e:
e0:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:39:EF:CF:BE:4D:9C:10:D5:43:01:73:AB:E0:66:45:40:4B:69:35
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145012.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a93a::/32
Signature Algorithm: sha256WithRSAEncryption
03:af:f7:cb:05:df:76:1a:a5:3b:22:7b:5f:ef:96:07:e1:f6:
0a:db:0d:2b:62:4e:1f:48:f7:c5:07:87:95:c7:1a:e2:ad:d3:
b6:67:35:e9:9a:02:1a:cf:07:84:0c:6c:20:98:68:11:c2:6f:
25:36:3b:24:21:08:ef:5c:e9:47:43:94:ce:cd:6d:fb:b3:e9:
c1:7c:4a:ac:97:92:f8:66:5d:25:d3:1f:ca:36:7d:b6:6a:b4:
a3:59:f2:09:4f:b8:a6:27:94:f0:f7:eb:15:47:b4:5e:1c:ae:
63:63:a8:33:b7:7e:c2:ec:a0:c5:d1:65:1f:1d:08:17:bc:3c:
93:43:2c:13:01:a6:2f:4e:c8:fd:65:4c:7d:07:13:a4:40:cf:
37:d3:c4:d4:f0:b8:13:48:b9:8e:60:ba:c5:ba:35:c3:9f:df:
50:0c:33:17:0b:0a:36:5b:eb:b1:3a:20:99:c4:76:f6:cf:3a:
fd:5a:ce:70:52:b3:3d:f7:0e:a0:e5:db:84:07:84:69:77:ed:
62:b2:52:55:ef:9d:30:3d:ea:1c:b1:02:1c:fc:40:44:aa:82:
61:a6:d1:37:52:db:d0:7f:00:20:aa:7f:e6:b6:66:28:a6:55:
f0:3b:e8:14:78:04:8c:6a:1f:a1:01:94:4f:a1:9a:72:75:b2:
47:2f:dd:72
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUIrGZebagldJ6y0McLFaBl5/BWSgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwMTQ1MDVaFw0yNzA1MjEwMTUwMDVaMDMxMTAvBgNV
BAMTKDcwMzlFRkNGQkU0RDlDMTBENTQzMDE3M0FCRTA2NjQ1NDA0QjY5MzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDguDon2C2T4dvOp+PsUwpjeKZ+
SWsSU9WoRxIwSRs9cvLBhwoApXO3ac2BBxRZ+W4M+hTLJNFxZwsSJiCIGaCvaCu9
eSou5LB+iBRnfNV2pYN8Sep8iCgZImjCzcRBQPyYk+6dIy/Rft8r76lezoLLn5Y6
pxWAUMnw8Utwcn15/nYPOtTM6CsS3vNGETkI/JjZfBJwzl2nbpMZezF4Pbzbp/Ww
pgvqlx+RTSVAj6M3/g+Qx2vuQ/3ZbC6P4QSpj8gkMaUX/F8ZL9wjcLs1v2IqL9FM
o2sfH/JIu1Aq3I6ZifPTVaKRStLoQ9hiX7NxwhHay9MNBHMCThE9L1M+nuDjAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUcDnvz75NnBDVQwFzq+BmRUBLaTUwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1MDEyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqpOjANBgkqhkiG9w0BAQsFAAOCAQEAA6/3
ywXfdhqlOyJ7X++WB+H2CtsNK2JOH0j3xQeHlcca4q3Ttmc16ZoCGs8HhAxsIJho
EcJvJTY7JCEI71zpR0OUzs1t+7PpwXxKrJeS+GZdJdMfyjZ9tmq0o1nyCU+4pieU
8PfrFUe0XhyuY2OoM7d+wuygxdFlHx0IF7w8k0MsEwGmL07I/WVMfQcTpEDPN9PE
1PC4E0i5jmC6xbo1w5/fUAwzFwsKNlvrsTogmcR29s86/VrOcFKzPfcOoOXbhAeE
aXftYrJSVe+dMD3qHLECHPxARKqCYabRN1Lb0H8AIKp/5rZmKKZV8DvoFHgEjGof
oQGUT6GacnWyRy/dcg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:49 2026 by rpki-client