Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145120.roa
File: AS145120.roa (raw, json)
Hash identifier: 3PlfkrN05WW1PJoDi848fAckbkHXbildYXfMjWvkJ+E=
Subject key identifier: 9F:47:25:33:45:80:36:78:F9:A5:76:69:14:B3:EC:24:46:08:3D:B9
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7202CB1FF95845F54913EA9290B3AA6258E4B28F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145120.roa
Signing time: Tue 26 May 2026 06:12:26 +0000
ROA not before: Tue 26 May 2026 06:07:26 +0000
ROA not after: Tue 25 May 2027 06:12:26 +0000
asID: 145120
IP address blocks: 240a:a9a6::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:02:cb:1f:f9:58:45:f5:49:13:ea:92:90:b3:aa:62:58:e4:b2:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:07:26 2026 GMT
Not After : May 25 06:12:26 2027 GMT
Subject: CN=9F47253345803678F9A5766914B3EC2446083DB9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:55:d9:72:f4:6e:04:0c:e5:c4:5c:9a:bf:9d:
36:b0:60:09:4a:b2:16:b7:0c:9b:2b:40:d9:d0:a6:
6d:8b:dd:27:a4:9d:a7:20:f3:a6:c0:89:3d:4c:e6:
dd:0e:ea:35:f6:75:de:6f:ab:5b:34:46:28:e0:51:
f3:fa:9b:c7:87:e0:0d:fa:a5:40:ca:83:b7:c8:14:
a7:64:2f:7f:fc:84:60:8c:19:74:98:c2:e1:fb:1a:
85:f6:fd:9c:c3:df:e8:4a:2a:ef:ff:a3:e7:2b:e0:
6c:a3:66:9c:e8:13:52:91:74:a6:96:bd:b5:c6:a4:
62:cb:84:76:7b:b5:1e:ea:77:d9:7c:ed:03:f0:7f:
5f:bd:87:51:0f:1e:d2:b2:72:50:c9:61:4f:0a:ed:
46:50:d2:9f:87:45:d7:70:b0:0e:32:51:4a:bc:86:
d1:3a:89:9b:6f:00:44:84:ca:f1:00:56:dd:ef:be:
a6:70:c8:d0:de:9b:cd:83:ce:82:22:41:2e:74:ec:
a4:f5:51:07:82:90:08:d9:a7:72:ea:58:45:ab:df:
a4:af:9e:dd:82:5f:fb:9a:78:96:cf:9a:67:aa:0e:
7d:05:49:16:69:15:1d:90:1a:26:e6:d1:54:1e:1d:
10:2e:ee:82:22:ed:bf:19:c1:f9:85:9f:d8:3b:19:
05:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:47:25:33:45:80:36:78:F9:A5:76:69:14:B3:EC:24:46:08:3D:B9
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145120.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a9a6::/32
Signature Algorithm: sha256WithRSAEncryption
2a:88:84:2c:e4:bc:1b:06:8d:f4:7b:e0:26:69:ac:c3:4c:4c:
b4:6a:4b:8b:5d:b2:7e:cc:97:6b:4f:c5:56:bf:0f:6b:e8:9a:
84:9a:83:17:6a:c1:d6:f9:2e:1f:05:cd:44:11:73:fb:87:68:
f1:20:5e:c2:78:21:a3:40:99:ef:af:98:ba:ca:62:e2:9b:0f:
c4:1f:27:19:e7:2d:d8:d1:ad:63:78:b6:06:bf:4b:c1:92:f4:
a7:23:7d:45:24:2d:64:c7:40:6c:f0:20:8e:95:e7:ec:9c:f8:
41:28:2a:d7:c7:81:b8:7b:35:1b:4e:c8:9c:4c:93:e2:5e:ac:
48:4d:67:30:96:b6:c9:99:fc:75:ad:9a:2e:ba:36:87:df:be:
2b:0c:c1:56:b8:44:f1:88:0d:46:d0:68:ce:76:d4:7b:71:2b:
27:d7:06:e4:53:84:22:ce:40:7f:1a:84:d3:38:aa:39:51:7d:
7b:ec:5d:aa:ae:a4:1b:57:18:39:66:7b:32:dd:39:7c:92:dd:
78:d5:8b:d1:16:ce:1a:53:ab:44:18:88:0f:8b:29:01:53:e9:
fc:e7:f8:50:8c:27:91:35:7f:7e:99:4d:4d:f8:aa:5b:e3:20:
af:ae:ff:e4:96:c1:80:34:30:d7:08:54:e0:b6:5c:0e:85:94:
01:a5:12:63
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUcgLLH/lYRfVJE+qSkLOqYljkso8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwNjA3MjZaFw0yNzA1MjUwNjEyMjZaMDMxMTAvBgNV
BAMTKDlGNDcyNTMzNDU4MDM2NzhGOUE1NzY2OTE0QjNFQzI0NDYwODNEQjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtVdly9G4EDOXEXJq/nTawYAlK
sha3DJsrQNnQpm2L3Seknacg86bAiT1M5t0O6jX2dd5vq1s0RijgUfP6m8eH4A36
pUDKg7fIFKdkL3/8hGCMGXSYwuH7GoX2/ZzD3+hKKu//o+cr4GyjZpzoE1KRdKaW
vbXGpGLLhHZ7tR7qd9l87QPwf1+9h1EPHtKyclDJYU8K7UZQ0p+HRddwsA4yUUq8
htE6iZtvAESEyvEAVt3vvqZwyNDem82DzoIiQS507KT1UQeCkAjZp3LqWEWr36Sv
nt2CX/uaeJbPmmeqDn0FSRZpFR2QGibm0VQeHRAu7oIi7b8ZwfmFn9g7GQVtAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUn0clM0WANnj5pXZpFLPsJEYIPbkwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1MTIwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqppjANBgkqhkiG9w0BAQsFAAOCAQEAKoiE
LOS8GwaN9HvgJmmsw0xMtGpLi12yfsyXa0/FVr8Pa+iahJqDF2rB1vkuHwXNRBFz
+4do8SBewngho0CZ76+Yuspi4psPxB8nGect2NGtY3i2Br9LwZL0pyN9RSQtZMdA
bPAgjpXn7Jz4QSgq18eBuHs1G07InEyT4l6sSE1nMJa2yZn8da2aLro2h9++KwzB
VrhE8YgNRtBoznbUe3ErJ9cG5FOEIs5AfxqE0ziqOVF9e+xdqq6kG1cYOWZ7Mt05
fJLdeNWL0RbOGlOrRBiID4spAVPp/Of4UIwnkTV/fplNTfiqW+Mgr67/5JbBgDQw
1whU4LZcDoWUAaUSYw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:25 2026 by rpki-client