Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145114.roa
File: AS145114.roa (raw, json)
Hash identifier: CN4XwvYl/+JWypDegyi+JBh9mTwrRMxzF88nhQpYD/o=
Subject key identifier: 7A:55:83:AB:96:AD:FF:33:32:20:E8:80:0A:2C:D4:13:74:B8:5B:47
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 09B654E2DFBE4964D5B87943C19021296557222C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145114.roa
Signing time: Tue 26 May 2026 06:30:59 +0000
ROA not before: Tue 26 May 2026 06:25:59 +0000
ROA not after: Tue 25 May 2027 06:30:59 +0000
asID: 145114
IP address blocks: 240a:a9a0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:b6:54:e2:df:be:49:64:d5:b8:79:43:c1:90:21:29:65:57:22:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:25:59 2026 GMT
Not After : May 25 06:30:59 2027 GMT
Subject: CN=7A5583AB96ADFF333220E8800A2CD41374B85B47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5b:aa:27:35:84:d4:1f:b2:52:e9:32:a6:77:
33:d5:2c:50:0f:2c:cf:4e:3c:fb:74:96:a8:39:de:
09:63:9d:3f:1e:cc:bb:d6:87:09:62:d9:ea:a7:70:
89:7c:f5:ba:28:ba:ba:7a:0d:f2:ac:f2:c0:55:f7:
f2:9a:9b:65:fc:a0:3f:6d:df:4f:6c:e6:80:57:7d:
c6:14:60:8f:29:3d:a3:fe:fc:7b:a2:1e:b9:66:05:
a4:2d:06:25:3b:d2:89:e6:b9:ea:d5:62:c2:10:5c:
66:37:14:84:f9:25:97:bc:9d:95:46:f5:1a:fb:f0:
cf:2c:ac:54:f5:2c:72:49:37:f7:3f:85:6e:74:56:
65:67:d2:90:81:0e:7f:2d:0d:ad:1b:4c:77:5c:88:
31:bf:42:f0:ba:6d:e2:4e:82:b1:e6:d5:9b:4c:0f:
7d:e1:39:db:4d:fe:24:ed:20:10:a8:b7:4d:f9:3c:
2d:d7:4e:16:01:99:db:ef:3e:c1:d8:5c:c8:dc:92:
ff:59:e5:00:71:3f:61:47:4b:dc:3c:70:b3:9c:32:
52:8d:4a:f0:6c:46:b4:a0:67:00:66:cb:5e:df:10:
3f:9e:44:c2:e7:8c:6a:c4:2d:f2:3e:5e:9a:c3:33:
c6:71:c4:25:29:c5:ca:21:51:6c:fb:30:c1:82:47:
81:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:55:83:AB:96:AD:FF:33:32:20:E8:80:0A:2C:D4:13:74:B8:5B:47
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145114.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a9a0::/32
Signature Algorithm: sha256WithRSAEncryption
15:85:1b:a0:86:a7:a5:51:e4:9a:d6:b9:ea:2c:66:88:e9:0b:
84:b7:22:80:cc:c5:f6:0e:d1:30:0d:49:4a:b0:39:e3:86:ab:
81:5b:c0:51:0c:0b:f7:55:09:2f:ba:b2:c9:8a:b1:44:14:62:
52:1c:e4:0d:cb:bd:48:12:6e:40:68:7d:c9:33:ce:49:d6:a7:
ea:6e:2e:e7:61:d0:91:19:6a:54:ce:56:a5:ee:39:3a:5c:ed:
e7:1f:62:53:57:db:85:c6:05:13:66:07:cd:3f:d0:6d:e6:45:
71:7c:2f:ca:60:53:15:2f:fa:39:6b:16:78:53:a8:b5:bf:34:
35:b8:89:01:7a:8e:d2:f8:90:23:d5:70:a6:5e:f7:c6:32:c2:
6b:a5:7a:e3:53:d9:47:1c:85:b0:33:d0:53:e1:37:e7:c3:0b:
6d:02:a5:85:15:1d:8b:16:ca:eb:d9:df:be:94:5d:49:36:c1:
a6:6f:36:1d:2b:f6:1d:84:27:30:e6:fa:b1:b1:ee:3a:7c:d1:
06:c3:64:ca:8c:76:84:9c:5d:ca:13:ea:8c:44:73:0e:ca:db:
8c:43:04:15:cf:67:e2:19:20:f4:cf:c0:dd:e1:ad:6d:1f:31:
dd:53:74:ac:c6:cd:fc:33:2f:3b:e6:94:9e:d9:13:94:45:9e:
26:7b:8e:25
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUCbZU4t++SWTVuHlDwZAhKWVXIiwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwNjI1NTlaFw0yNzA1MjUwNjMwNTlaMDMxMTAvBgNV
BAMTKDdBNTU4M0FCOTZBREZGMzMzMjIwRTg4MDBBMkNENDEzNzRCODVCNDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+W6onNYTUH7JS6TKmdzPVLFAP
LM9OPPt0lqg53gljnT8ezLvWhwli2eqncIl89boourp6DfKs8sBV9/Kam2X8oD9t
309s5oBXfcYUYI8pPaP+/HuiHrlmBaQtBiU70onmuerVYsIQXGY3FIT5JZe8nZVG
9Rr78M8srFT1LHJJN/c/hW50VmVn0pCBDn8tDa0bTHdciDG/QvC6beJOgrHm1ZtM
D33hOdtN/iTtIBCot035PC3XThYBmdvvPsHYXMjckv9Z5QBxP2FHS9w8cLOcMlKN
SvBsRrSgZwBmy17fED+eRMLnjGrELfI+XprDM8ZxxCUpxcohUWz7MMGCR4E1AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUelWDq5at/zMyIOiACizUE3S4W0cwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1MTE0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqpoDANBgkqhkiG9w0BAQsFAAOCAQEAFYUb
oIanpVHkmta56ixmiOkLhLcigMzF9g7RMA1JSrA544argVvAUQwL91UJL7qyyYqx
RBRiUhzkDcu9SBJuQGh9yTPOSdan6m4u52HQkRlqVM5Wpe45Olzt5x9iU1fbhcYF
E2YHzT/QbeZFcXwvymBTFS/6OWsWeFOotb80NbiJAXqO0viQI9Vwpl73xjLCa6V6
41PZRxyFsDPQU+E358MLbQKlhRUdixbK69nfvpRdSTbBpm82HSv2HYQnMOb6sbHu
OnzRBsNkyox2hJxdyhPqjERzDsrbjEMEFc9n4hkg9M/A3eGtbR8x3VN0rMbN/DMv
O+aUntkTlEWeJnuOJQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:08 2026 by rpki-client