Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145022.roa
File: AS145022.roa (raw, json)
Hash identifier: dDtLQs4M65Kf3/ic7R62usYaLgCeN1vMnmazxhah7JA=
Subject key identifier: 03:66:4A:6C:6A:8A:1D:08:C8:79:2F:BD:E9:53:7B:7C:B6:70:A2:5B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 245FC9A85CC6B33BB21877F93B34FB6B0DE1FA6B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145022.roa
Signing time: Tue 26 May 2026 08:53:02 +0000
ROA not before: Tue 26 May 2026 08:48:02 +0000
ROA not after: Tue 25 May 2027 08:53:02 +0000
asID: 145022
IP address blocks: 240a:a944::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:5f:c9:a8:5c:c6:b3:3b:b2:18:77:f9:3b:34:fb:6b:0d:e1:fa:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 08:48:02 2026 GMT
Not After : May 25 08:53:02 2027 GMT
Subject: CN=03664A6C6A8A1D08C8792FBDE9537B7CB670A25B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:67:13:34:20:61:39:40:05:a5:7b:09:82:36:
23:c0:bf:2c:62:54:82:4a:dd:9f:5d:37:41:5f:65:
e7:d9:c0:77:06:df:07:11:22:d7:a8:96:3e:93:b6:
ca:43:41:e5:89:c7:2a:a9:ac:f1:9c:85:d9:ca:02:
94:bf:9f:06:3d:40:2a:51:3a:b3:0c:e2:57:85:75:
bb:b5:d8:b4:7a:e0:02:2c:30:63:b3:93:4d:b7:25:
ca:20:25:3e:38:f5:66:d7:07:c2:59:5c:c2:b2:6e:
43:97:2d:53:95:29:3e:53:75:29:99:79:5c:cb:1b:
99:0f:14:2f:ae:bd:62:92:5a:15:52:d3:37:4a:20:
0b:49:25:96:26:c9:d6:9e:f9:80:51:9e:6e:00:ee:
5c:37:97:4a:27:83:9f:1d:38:bd:57:ab:95:00:3d:
34:17:d0:38:5f:7c:cf:b1:12:5b:ee:7c:f7:8c:c8:
3b:3c:b0:13:4c:02:1e:98:ef:a4:53:88:7e:6f:8f:
12:ee:0f:e0:f2:ed:e3:b4:66:e6:9a:cb:6d:05:9f:
57:bd:d4:d7:af:55:25:ce:92:44:c2:69:8c:ae:36:
e2:5e:3c:5b:68:42:e4:97:80:1d:64:6d:9c:f9:1a:
76:7c:1a:23:83:bc:da:0a:c6:4c:46:2d:a6:f0:e4:
bc:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:66:4A:6C:6A:8A:1D:08:C8:79:2F:BD:E9:53:7B:7C:B6:70:A2:5B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145022.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a944::/32
Signature Algorithm: sha256WithRSAEncryption
60:33:6a:7d:2d:d9:7d:a0:2b:53:49:c1:ae:4b:5d:dc:b0:fa:
bc:b9:a9:de:de:70:e4:ac:d6:46:4a:56:61:f3:cb:ce:f6:a0:
a9:11:9c:fd:9d:13:e5:30:51:a9:2a:4e:d0:92:96:bb:08:51:
a6:31:62:5f:91:88:4a:f5:4f:0f:e7:a6:7f:0c:47:8b:ea:de:
27:45:5f:1d:db:08:9e:e5:b4:78:d8:53:09:5d:9a:f4:be:e1:
ec:64:a0:fc:32:db:ea:b0:96:bc:91:bf:b2:7a:8d:a9:5e:69:
29:e2:aa:ab:15:f8:61:f2:b7:ec:4e:9a:7f:74:c3:9c:ce:e2:
1f:c5:20:92:22:84:92:28:4a:ec:5c:9b:2d:bc:df:7e:82:04:
30:c5:1e:b1:c6:f6:59:8a:ca:09:2f:38:fe:2d:71:0a:04:45:
75:ec:76:73:86:6e:36:cc:0b:88:4e:fb:7c:c6:1c:f1:4e:95:
d2:d0:8f:44:3d:83:8b:b8:d6:4c:c0:20:3f:14:42:a6:ae:a1:
d4:ea:58:6b:7e:0c:02:b5:c4:78:8e:90:8a:dd:10:ea:41:cd:
46:40:d0:de:75:13:c5:f0:82:45:01:8d:47:28:6a:32:6a:42:
8c:f6:07:88:dc:1e:6a:03:f2:06:ac:61:32:39:95:5f:66:98:
7b:27:0d:b9
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUJF/JqFzGszuyGHf5OzT7aw3h+mswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwODQ4MDJaFw0yNzA1MjUwODUzMDJaMDMxMTAvBgNV
BAMTKDAzNjY0QTZDNkE4QTFEMDhDODc5MkZCREU5NTM3QjdDQjY3MEEyNUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLZxM0IGE5QAWlewmCNiPAvyxi
VIJK3Z9dN0FfZefZwHcG3wcRIteolj6TtspDQeWJxyqprPGchdnKApS/nwY9QCpR
OrMM4leFdbu12LR64AIsMGOzk023JcogJT449WbXB8JZXMKybkOXLVOVKT5TdSmZ
eVzLG5kPFC+uvWKSWhVS0zdKIAtJJZYmydae+YBRnm4A7lw3l0ong58dOL1Xq5UA
PTQX0DhffM+xElvufPeMyDs8sBNMAh6Y76RTiH5vjxLuD+Dy7eO0Zuaay20Fn1e9
1NevVSXOkkTCaYyuNuJePFtoQuSXgB1kbZz5GnZ8GiODvNoKxkxGLabw5LxnAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUA2ZKbGqKHQjIeS+96VN7fLZwolswHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1MDIyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqpRDANBgkqhkiG9w0BAQsFAAOCAQEAYDNq
fS3ZfaArU0nBrktd3LD6vLmp3t5w5KzWRkpWYfPLzvagqRGc/Z0T5TBRqSpO0JKW
uwhRpjFiX5GISvVPD+emfwxHi+reJ0VfHdsInuW0eNhTCV2a9L7h7GSg/DLb6rCW
vJG/snqNqV5pKeKqqxX4YfK37E6af3TDnM7iH8UgkiKEkihK7FybLbzffoIEMMUe
scb2WYrKCS84/i1xCgRFdex2c4ZuNswLiE77fMYc8U6V0tCPRD2Di7jWTMAgPxRC
pq6h1OpYa34MArXEeI6Qit0Q6kHNRkDQ3nUTxfCCRQGNRyhqMmpCjPYHiNweagPy
BqxhMjmVX2aYeycNuQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:12 2026 by rpki-client