Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145043.roa
File: AS145043.roa (raw, json)
Hash identifier: mDQTM2J3um9PMYYcnS69YFswYmO7+dCiRZH2H/6ygMU=
Subject key identifier: 47:25:A6:C9:2C:64:7F:30:64:1C:86:43:46:D3:7D:53:70:63:86:35
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4513D1462CF6A20FC3031C420AFFE8DF2D862C09
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145043.roa
Signing time: Fri 22 May 2026 07:08:43 +0000
ROA not before: Fri 22 May 2026 07:03:43 +0000
ROA not after: Fri 21 May 2027 07:08:43 +0000
asID: 145043
IP address blocks: 240a:a959::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:13:d1:46:2c:f6:a2:0f:c3:03:1c:42:0a:ff:e8:df:2d:86:2c:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:03:43 2026 GMT
Not After : May 21 07:08:43 2027 GMT
Subject: CN=4725A6C92C647F30641C864346D37D5370638635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8b:82:a4:1a:05:80:85:c3:3b:64:89:51:53:
ef:db:ea:91:54:64:78:cf:07:ac:5c:b0:96:aa:cf:
e0:7b:f2:2c:a8:ec:fc:30:f3:f5:b0:a8:ca:86:25:
0c:7e:b5:d5:b7:46:2c:bc:9f:39:cd:90:51:89:36:
2d:3c:d0:d8:e6:0c:45:9f:b4:9f:53:cd:74:57:4f:
7d:8d:47:e2:82:f7:f7:75:49:1b:d9:f1:bc:20:ec:
ea:eb:43:aa:9a:8d:c9:f8:6d:15:ce:36:45:10:21:
e5:48:73:d2:b8:a4:bb:a9:a8:7a:cd:5b:16:29:93:
49:1c:93:9c:42:16:0f:92:2e:3e:6e:32:32:17:c8:
65:9f:ba:11:fc:0f:24:c4:70:fb:60:45:a3:6e:34:
66:01:d0:71:f8:45:a3:a3:4e:b4:e8:7f:12:11:48:
da:e6:64:5f:06:1c:88:1c:39:4a:1d:a0:3b:68:d3:
a8:45:38:8b:96:61:a4:dd:1a:b7:8d:0f:60:5f:d2:
48:5d:aa:38:98:8a:59:81:6c:94:5e:12:1f:17:e7:
d7:1c:e2:05:b1:d6:a2:eb:ac:d1:f1:fc:af:91:a4:
f0:e5:0b:97:72:e4:b2:7f:5c:b5:a1:c8:cb:de:86:
01:53:4e:d4:7f:ab:2c:44:d7:e5:f6:81:50:9e:15:
6d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:25:A6:C9:2C:64:7F:30:64:1C:86:43:46:D3:7D:53:70:63:86:35
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145043.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a959::/32
Signature Algorithm: sha256WithRSAEncryption
8a:62:7c:25:c9:16:a4:dc:b7:ee:73:74:be:93:3e:fd:04:ae:
be:92:a1:43:2f:de:3c:15:52:39:99:c5:33:5d:31:7e:f6:df:
e0:01:e1:0e:e1:9d:70:40:f1:dd:d0:26:31:85:79:d0:5f:d6:
d5:e8:7c:c1:f4:fb:01:ac:80:0b:5a:23:ee:5a:f0:13:25:64:
8a:fc:cd:e6:af:a7:f8:f4:64:d3:d3:e6:8d:13:82:dd:0d:e1:
fb:75:6e:b2:85:6e:73:e5:05:31:0c:98:9e:80:8d:c1:3d:88:
16:dc:63:bb:ec:ca:23:fb:f1:f9:30:3c:f7:d7:d8:09:a9:f8:
c3:d3:eb:7f:00:a4:c3:43:47:c4:54:be:56:32:4d:8d:42:0c:
a9:fe:30:9a:71:d8:1b:9a:8a:cc:0c:d4:de:07:55:8b:8b:30:
88:5c:e1:b0:3f:f7:e6:10:54:be:30:af:b3:69:44:d9:4b:05:
b2:da:a7:8b:45:ef:d5:c4:fc:a3:d7:45:21:56:05:16:18:b3:
b7:02:1e:38:fc:ce:3a:0c:16:dc:58:27:01:55:e9:41:ff:a2:
7a:70:24:65:b3:3f:8d:3d:97:21:f5:bf:0c:36:fc:1f:4c:33:
4e:19:7c:06:49:55:79:fb:81:76:77:f1:29:1b:c1:f3:03:e1:
8e:f8:ec:89
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIURRPRRiz2og/DAxxCCv/o3y2GLAkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzAzNDNaFw0yNzA1MjEwNzA4NDNaMDMxMTAvBgNV
BAMTKDQ3MjVBNkM5MkM2NDdGMzA2NDFDODY0MzQ2RDM3RDUzNzA2Mzg2MzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpi4KkGgWAhcM7ZIlRU+/b6pFU
ZHjPB6xcsJaqz+B78iyo7Pww8/WwqMqGJQx+tdW3Riy8nznNkFGJNi080NjmDEWf
tJ9TzXRXT32NR+KC9/d1SRvZ8bwg7OrrQ6qajcn4bRXONkUQIeVIc9K4pLupqHrN
WxYpk0kck5xCFg+SLj5uMjIXyGWfuhH8DyTEcPtgRaNuNGYB0HH4RaOjTrTofxIR
SNrmZF8GHIgcOUodoDto06hFOIuWYaTdGreND2Bf0khdqjiYilmBbJReEh8X59cc
4gWx1qLrrNHx/K+RpPDlC5dy5LJ/XLWhyMvehgFTTtR/qyxE1+X2gVCeFW2lAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQURyWmySxkfzBkHIZDRtN9U3BjhjUwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1MDQzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqpWTANBgkqhkiG9w0BAQsFAAOCAQEAimJ8
JckWpNy37nN0vpM+/QSuvpKhQy/ePBVSOZnFM10xfvbf4AHhDuGdcEDx3dAmMYV5
0F/W1eh8wfT7AayAC1oj7lrwEyVkivzN5q+n+PRk09PmjROC3Q3h+3VusoVuc+UF
MQyYnoCNwT2IFtxju+zKI/vx+TA899fYCan4w9PrfwCkw0NHxFS+VjJNjUIMqf4w
mnHYG5qKzAzU3gdVi4swiFzhsD/35hBUvjCvs2lE2UsFstqni0Xv1cT8o9dFIVYF
FhiztwIeOPzOOgwW3FgnAVXpQf+ienAkZbM/jT2XIfW/DDb8H0wzThl8BklVefuB
dnfxKRvB8wPhjvjsiQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:48 2026 by rpki-client