Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145094.roa
File: AS145094.roa (raw, json)
Hash identifier: m6ommNgpvelpRV7lEOQgasoAC+5ousPfsaz8voGjx1Y=
Subject key identifier: C9:06:00:B5:BB:C8:A8:08:E7:F0:19:32:D9:61:80:50:34:51:84:07
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5C9C33F747E6D1D707AA6EE40A2B04CC254E7CFA
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145094.roa
Signing time: Tue 26 May 2026 06:30:59 +0000
ROA not before: Tue 26 May 2026 06:25:59 +0000
ROA not after: Tue 25 May 2027 06:30:59 +0000
asID: 145094
IP address blocks: 240a:a98c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:9c:33:f7:47:e6:d1:d7:07:aa:6e:e4:0a:2b:04:cc:25:4e:7c:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:25:59 2026 GMT
Not After : May 25 06:30:59 2027 GMT
Subject: CN=C90600B5BBC8A808E7F01932D961805034518407
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ef:01:d7:ea:c8:af:b1:34:0f:8a:41:f0:59:
fd:e8:cf:85:c7:e8:3a:90:6c:72:88:b2:ac:84:75:
85:6f:ae:43:31:52:08:ca:30:d2:e4:d8:96:08:1b:
3d:6c:0c:11:f4:57:ee:40:2f:d6:af:41:0d:d4:b1:
f8:eb:f0:9c:3d:94:42:1c:26:ff:88:b4:56:dd:e8:
f9:91:41:ee:17:d6:d0:06:5a:9f:c7:d0:82:46:6c:
1f:7c:0a:15:5c:6b:0b:8d:94:2d:47:2b:bc:ec:f1:
7b:15:2e:78:b4:b0:c2:5a:96:23:6c:24:af:dd:7a:
4c:40:b9:a3:02:cf:30:43:a3:9b:cd:45:b9:e8:c0:
ad:c6:aa:b1:23:b9:88:02:b1:fe:28:9e:19:d4:dc:
4c:28:69:b5:64:89:71:66:68:37:96:b6:dc:46:94:
1c:f9:69:6e:37:ec:1e:25:6c:f8:77:77:f2:5e:94:
d2:fb:c5:e5:c3:46:02:6d:86:03:4d:0a:5d:55:6f:
57:4e:93:54:49:3f:da:72:4f:f1:b4:f0:6f:ca:4b:
e7:4b:29:07:2b:79:a1:4a:f3:28:8c:93:d0:9e:11:
f8:eb:47:92:f9:3c:d3:9f:a5:ef:b3:61:4b:5d:e9:
b1:b8:98:55:7c:ce:5f:57:ab:1c:fe:4a:6f:74:24:
5b:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:06:00:B5:BB:C8:A8:08:E7:F0:19:32:D9:61:80:50:34:51:84:07
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145094.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a98c::/32
Signature Algorithm: sha256WithRSAEncryption
5b:98:70:fc:71:90:82:6a:1f:94:a0:21:62:47:23:34:a0:01:
6c:d4:33:b6:44:0d:1f:a9:8a:0f:37:79:41:3e:d7:c8:47:56:
cb:90:7a:00:31:2d:d8:37:e9:42:b1:c6:42:a9:10:11:d4:52:
21:64:ab:3e:ed:40:11:d9:ac:b8:ca:cd:c9:a5:d8:f2:f5:d3:
ec:4e:3a:d7:fb:e1:b3:da:1f:1a:85:9b:41:86:51:c1:12:78:
86:7f:be:80:41:d6:4f:4e:23:09:48:9c:90:2c:9b:83:a0:ca:
f6:17:e9:63:24:7c:fd:7d:6e:2e:a4:f8:6e:e5:7b:e8:4b:a5:
8f:6e:78:30:80:76:2b:f3:68:d7:5e:8a:86:d0:aa:8b:9d:eb:
60:06:43:53:14:4f:db:39:22:47:35:8c:df:b5:49:3d:9f:21:
bc:db:7e:f8:73:3d:7b:f0:97:ab:c1:e1:0e:26:18:73:3b:4f:
ab:53:3b:59:c1:7d:bf:1a:4e:d7:0a:09:88:d6:e6:cb:07:7e:
f3:53:8d:c8:35:0a:2c:76:26:a0:bb:22:60:59:c0:94:67:45:
0f:b9:a3:c2:d2:4f:f9:98:03:1b:cc:47:79:21:bf:05:6b:8b:
94:73:aa:fb:b4:11:74:9d:20:1b:da:94:11:9b:0f:79:ac:13:
9f:84:93:9b
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUXJwz90fm0dcHqm7kCisEzCVOfPowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwNjI1NTlaFw0yNzA1MjUwNjMwNTlaMDMxMTAvBgNV
BAMTKEM5MDYwMEI1QkJDOEE4MDhFN0YwMTkzMkQ5NjE4MDUwMzQ1MTg0MDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa7wHX6sivsTQPikHwWf3oz4XH
6DqQbHKIsqyEdYVvrkMxUgjKMNLk2JYIGz1sDBH0V+5AL9avQQ3Usfjr8Jw9lEIc
Jv+ItFbd6PmRQe4X1tAGWp/H0IJGbB98ChVcawuNlC1HK7zs8XsVLni0sMJaliNs
JK/dekxAuaMCzzBDo5vNRbnowK3GqrEjuYgCsf4onhnU3EwoabVkiXFmaDeWttxG
lBz5aW437B4lbPh3d/JelNL7xeXDRgJthgNNCl1Vb1dOk1RJP9pyT/G08G/KS+dL
KQcreaFK8yiMk9CeEfjrR5L5PNOfpe+zYUtd6bG4mFV8zl9Xqxz+Sm90JFsbAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUyQYAtbvIqAjn8Bky2WGAUDRRhAcwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1MDk0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqpjDANBgkqhkiG9w0BAQsFAAOCAQEAW5hw
/HGQgmoflKAhYkcjNKABbNQztkQNH6mKDzd5QT7XyEdWy5B6ADEt2DfpQrHGQqkQ
EdRSIWSrPu1AEdmsuMrNyaXY8vXT7E461/vhs9ofGoWbQYZRwRJ4hn++gEHWT04j
CUickCybg6DK9hfpYyR8/X1uLqT4buV76Eulj254MIB2K/No116KhtCqi53rYAZD
UxRP2zkiRzWM37VJPZ8hvNt++HM9e/CXq8HhDiYYcztPq1M7WcF9vxpO1woJiNbm
ywd+81ONyDUKLHYmoLsiYFnAlGdFD7mjwtJP+ZgDG8xHeSG/BWuLlHOq+7QRdJ0g
G9qUEZsPeawTn4STmw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:24 2026 by rpki-client