Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145020.roa
File: AS145020.roa (raw, json)
Hash identifier: vr4IwmiA4GnL50+xu6iZUjCeDnWSLomV1+uvvo+buVQ=
Subject key identifier: 2E:0E:37:DF:17:5D:D4:02:83:43:BC:59:5F:40:C0:81:62:31:7F:48
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 32C37AD8AE4E25EEA08DD802122F2DE1A4719B8C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145020.roa
Signing time: Fri 22 May 2026 07:24:54 +0000
ROA not before: Fri 22 May 2026 07:19:54 +0000
ROA not after: Fri 21 May 2027 07:24:54 +0000
asID: 145020
IP address blocks: 240a:a942::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:c3:7a:d8:ae:4e:25:ee:a0:8d:d8:02:12:2f:2d:e1:a4:71:9b:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:19:54 2026 GMT
Not After : May 21 07:24:54 2027 GMT
Subject: CN=2E0E37DF175DD4028343BC595F40C08162317F48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:79:c7:2b:99:5e:ae:0c:60:d8:39:b2:9d:3c:
e1:9b:c1:18:58:ef:3b:c4:1d:01:d9:02:fe:2b:95:
19:29:50:4a:37:96:bd:3c:ff:27:af:58:fa:49:9f:
a7:21:7a:b5:be:c9:bc:e5:b9:3b:84:af:d9:05:a4:
be:eb:07:0b:09:20:73:ea:6c:c0:9c:da:90:d8:57:
4a:f2:4a:80:bd:1d:ac:f2:96:38:7f:d7:82:ab:ba:
ef:57:99:80:6c:8b:29:df:90:0a:8e:6f:0f:4e:a8:
4c:82:30:2b:b3:02:e3:e1:ae:66:31:8f:26:07:5d:
82:dd:28:fb:74:98:3a:42:47:ad:20:af:7f:9b:45:
e3:17:11:29:78:a8:ca:b8:f3:7e:ee:b9:44:cb:e8:
7b:6a:87:61:e0:1d:c5:5f:51:d0:77:31:f1:ca:39:
3f:11:81:55:a7:57:14:4d:20:f1:2d:9e:17:f7:8f:
2e:5e:62:bb:d2:69:0c:c4:e2:8c:b6:d7:94:51:8d:
9f:e3:a0:cc:da:e7:04:2b:60:69:8d:0b:c9:cf:ac:
b7:89:87:c3:b8:6d:ff:1a:40:e4:22:b4:1c:84:42:
1e:93:1a:e2:4d:9a:74:86:17:98:47:af:25:3d:3c:
32:b1:7a:c1:8a:88:c2:41:08:e3:b2:28:66:21:02:
08:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:0E:37:DF:17:5D:D4:02:83:43:BC:59:5F:40:C0:81:62:31:7F:48
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145020.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a942::/32
Signature Algorithm: sha256WithRSAEncryption
3c:48:0c:81:f3:eb:7b:93:6c:37:d0:cc:c3:8c:b2:b8:01:bf:
4c:4e:f7:c9:51:b2:cf:40:c0:0e:a6:1a:cf:7e:7f:06:9a:fe:
ad:93:a6:30:56:e2:73:bf:dd:f3:a9:b5:67:e7:4a:ee:23:74:
91:e5:a8:aa:a3:e2:77:d4:72:38:40:22:39:f6:e4:bf:b7:f5:
bd:01:a4:cd:96:2d:14:64:fa:7a:a8:35:0d:f0:c8:c8:60:1c:
4b:df:ca:12:cf:e3:82:52:89:b0:b6:48:56:60:9e:d0:00:73:
91:ff:31:c5:6e:7e:2a:63:23:6f:a5:dd:1e:8b:8c:8a:d5:e8:
65:34:d2:88:2d:5a:ef:fd:db:2f:62:15:31:7b:bd:31:ef:cf:
2e:dc:d3:b6:8f:7d:c8:83:b1:72:a9:00:88:a3:15:4c:ea:ef:
24:b0:d6:43:d5:82:6a:08:92:d0:6b:67:cb:0a:24:75:53:0c:
47:d4:39:7c:59:b0:3d:1b:85:31:5a:cd:ab:50:bf:50:56:96:
05:8c:57:ce:ce:06:37:44:de:5c:b2:31:60:21:c5:45:a5:17:
8e:5d:50:b9:39:37:fe:36:62:3c:bd:27:d4:0c:d0:2d:53:46:
2f:7d:c4:c8:14:88:ae:07:cb:33:48:95:8d:67:62:b6:48:d5:
38:2e:71:29
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUMsN62K5OJe6gjdgCEi8t4aRxm4wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzE5NTRaFw0yNzA1MjEwNzI0NTRaMDMxMTAvBgNV
BAMTKDJFMEUzN0RGMTc1REQ0MDI4MzQzQkM1OTVGNDBDMDgxNjIzMTdGNDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZeccrmV6uDGDYObKdPOGbwRhY
7zvEHQHZAv4rlRkpUEo3lr08/yevWPpJn6cherW+ybzluTuEr9kFpL7rBwsJIHPq
bMCc2pDYV0rySoC9Hazyljh/14Kruu9XmYBsiynfkAqObw9OqEyCMCuzAuPhrmYx
jyYHXYLdKPt0mDpCR60gr3+bReMXESl4qMq4837uuUTL6Htqh2HgHcVfUdB3MfHK
OT8RgVWnVxRNIPEtnhf3jy5eYrvSaQzE4oy215RRjZ/joMza5wQrYGmNC8nPrLeJ
h8O4bf8aQOQitByEQh6TGuJNmnSGF5hHryU9PDKxesGKiMJBCOOyKGYhAgi/AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQULg433xdd1AKDQ7xZX0DAgWIxf0gwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1MDIwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqpQjANBgkqhkiG9w0BAQsFAAOCAQEAPEgM
gfPre5NsN9DMw4yyuAG/TE73yVGyz0DADqYaz35/Bpr+rZOmMFbic7/d86m1Z+dK
7iN0keWoqqPid9RyOEAiOfbkv7f1vQGkzZYtFGT6eqg1DfDIyGAcS9/KEs/jglKJ
sLZIVmCe0ABzkf8xxW5+KmMjb6XdHouMitXoZTTSiC1a7/3bL2IVMXu9Me/PLtzT
to99yIOxcqkAiKMVTOrvJLDWQ9WCagiS0GtnywokdVMMR9Q5fFmwPRuFMVrNq1C/
UFaWBYxXzs4GN0TeXLIxYCHFRaUXjl1QuTk3/jZiPL0n1AzQLVNGL33EyBSIrgfL
M0iVjWditkjVOC5xKQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:27 2026 by rpki-client