Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145075.roa
File: AS145075.roa (raw, json)
Hash identifier: ozK4ySvVtHtE8KTMQzShJh+ye4A0X5JJD2Q5mV8YTeI=
Subject key identifier: 6C:9D:64:41:94:D9:8C:99:E0:9F:B4:54:9F:7E:80:1B:8C:FD:0B:04
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 49A656865ABD260B5BFE0E97DFC66768B2A38D01
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145075.roa
Signing time: Mon 25 May 2026 01:38:02 +0000
ROA not before: Mon 25 May 2026 01:33:02 +0000
ROA not after: Mon 24 May 2027 01:38:02 +0000
asID: 145075
IP address blocks: 240a:a979::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:a6:56:86:5a:bd:26:0b:5b:fe:0e:97:df:c6:67:68:b2:a3:8d:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:02 2026 GMT
Not After : May 24 01:38:02 2027 GMT
Subject: CN=6C9D644194D98C99E09FB4549F7E801B8CFD0B04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cc:58:c9:3c:79:08:eb:bd:b2:f7:ca:23:0b:
8a:c7:43:f1:2e:29:ea:d3:01:eb:8e:67:6e:67:e2:
50:93:37:e1:e3:eb:6d:a4:24:51:3d:f1:a3:0f:29:
77:1e:8e:f5:3f:e9:33:35:cd:69:ef:a2:ff:47:a5:
a5:01:97:5d:b4:93:b7:4a:94:1e:c6:c3:b5:b1:69:
67:7e:da:19:51:30:6b:eb:3f:2f:3b:4d:64:3b:5c:
a9:31:0d:1e:c8:04:ce:d3:a4:a6:83:08:1a:4f:29:
09:7e:8d:ee:e4:57:a5:40:c6:84:07:cd:6c:ee:c3:
62:4a:d1:57:a8:5d:21:2c:f3:9b:10:73:e2:b0:b5:
50:8e:e9:1e:e5:52:53:b8:ce:58:13:d4:81:b3:c6:
be:a8:f8:02:46:86:82:39:b6:8d:c2:77:28:8c:be:
6a:96:94:67:9e:20:97:f9:1a:71:45:74:a5:19:c6:
f7:32:fc:48:78:62:7b:b0:81:5f:40:d6:28:a0:a8:
bd:6a:43:8c:13:5d:b3:47:cf:a9:01:91:6c:fb:ad:
97:f0:57:55:a6:3a:28:b5:f5:43:c8:5d:d9:f2:45:
b6:35:a9:e6:8f:68:dd:6d:91:6a:e2:7b:7a:31:e7:
b8:95:7c:21:a0:78:35:83:0f:26:d2:e5:1b:4c:6b:
f0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:9D:64:41:94:D9:8C:99:E0:9F:B4:54:9F:7E:80:1B:8C:FD:0B:04
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145075.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a979::/32
Signature Algorithm: sha256WithRSAEncryption
b3:f5:27:17:b1:d0:0a:fa:8a:61:ec:72:98:2c:b1:4f:87:99:
dd:2e:33:01:25:03:9e:15:82:89:63:5d:e4:03:ad:c2:c7:30:
a8:fc:6f:45:5f:39:f9:1d:07:af:cc:f2:12:11:26:6e:e5:e8:
ae:fb:47:56:08:59:09:bc:ce:b7:9d:23:49:1f:82:9b:9b:8b:
ea:76:8f:e1:5e:ad:1c:2b:c4:a3:e6:1b:d5:81:94:93:4b:1d:
6e:4a:98:27:3d:a0:97:4d:49:f9:3c:67:da:c5:76:97:1b:e4:
26:e2:d6:ff:18:46:4e:ec:cd:dd:b1:e0:b3:20:cf:e1:c7:87:
47:9c:d5:08:30:48:48:c5:f2:4c:0a:40:be:72:3c:1b:00:47:
d1:e5:96:a9:c8:8b:6f:ff:0e:1d:80:b2:58:9c:06:a5:bd:a8:
a0:a7:ec:fd:ff:a0:d1:a3:b4:3b:d3:f9:44:c8:f2:90:1b:93:
96:47:53:83:88:66:db:82:08:20:1b:68:09:03:42:c7:dd:0d:
df:9e:15:30:6a:cf:6f:ac:d1:57:4f:78:a2:ba:9d:dc:f9:57:
e9:55:e6:4f:cc:86:dd:66:a3:f7:d5:6d:3f:d4:9d:c5:a0:29:
60:cf:cb:60:2e:11:36:91:7a:7d:33:9d:12:42:83:76:43:22:
a0:48:f0:45
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUSaZWhlq9Jgtb/g6X38ZnaLKjjQEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMTMzMDJaFw0yNzA1MjQwMTM4MDJaMDMxMTAvBgNV
BAMTKDZDOUQ2NDQxOTREOThDOTlFMDlGQjQ1NDlGN0U4MDFCOENGRDBCMDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2zFjJPHkI672y98ojC4rHQ/Eu
KerTAeuOZ25n4lCTN+Hj622kJFE98aMPKXcejvU/6TM1zWnvov9HpaUBl120k7dK
lB7Gw7WxaWd+2hlRMGvrPy87TWQ7XKkxDR7IBM7TpKaDCBpPKQl+je7kV6VAxoQH
zWzuw2JK0VeoXSEs85sQc+KwtVCO6R7lUlO4zlgT1IGzxr6o+AJGhoI5to3CdyiM
vmqWlGeeIJf5GnFFdKUZxvcy/Eh4YnuwgV9A1iigqL1qQ4wTXbNHz6kBkWz7rZfw
V1WmOii19UPIXdnyRbY1qeaPaN1tkWrie3ox57iVfCGgeDWDDybS5RtMa/CFAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUbJ1kQZTZjJngn7RUn36AG4z9CwQwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1MDc1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqpeTANBgkqhkiG9w0BAQsFAAOCAQEAs/Un
F7HQCvqKYexymCyxT4eZ3S4zASUDnhWCiWNd5AOtwscwqPxvRV85+R0Hr8zyEhEm
buXorvtHVghZCbzOt50jSR+Cm5uL6naP4V6tHCvEo+Yb1YGUk0sdbkqYJz2gl01J
+Txn2sV2lxvkJuLW/xhGTuzN3bHgsyDP4ceHR5zVCDBISMXyTApAvnI8GwBH0eWW
qciLb/8OHYCyWJwGpb2ooKfs/f+g0aO0O9P5RMjykBuTlkdTg4hm24IIIBtoCQNC
x90N354VMGrPb6zRV094orqd3PlX6VXmT8yG3Waj99VtP9SdxaApYM/LYC4RNpF6
fTOdEkKDdkMioEjwRQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:11 2026 by rpki-client