Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145124.roa
File: AS145124.roa (raw, json)
Hash identifier: k29oEN9mdkFXpEKbv+xRc+02IUlpuujf0EZ9A37/S2c=
Subject key identifier: 00:B0:D8:57:8C:FD:FC:72:C4:7A:5F:53:82:56:30:E1:5C:3E:52:86
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0E84475EB4C8C8A5B78DDCE195CC464A67C23748
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145124.roa
Signing time: Fri 22 May 2026 02:47:38 +0000
ROA not before: Fri 22 May 2026 02:42:38 +0000
ROA not after: Fri 21 May 2027 02:47:38 +0000
asID: 145124
IP address blocks: 240a:a9aa::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:84:47:5e:b4:c8:c8:a5:b7:8d:dc:e1:95:cc:46:4a:67:c2:37:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:42:38 2026 GMT
Not After : May 21 02:47:38 2027 GMT
Subject: CN=00B0D8578CFDFC72C47A5F53825630E15C3E5286
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:83:9f:62:4d:9e:1f:d2:8d:9f:50:b9:08:e0:
dd:c7:9f:6d:e4:a3:12:00:3c:21:ce:f0:67:f8:34:
40:b4:4e:88:9e:13:78:71:e7:ba:6c:ee:f8:38:0e:
4f:8c:44:50:21:e2:74:ac:fa:45:e7:6a:8c:3a:96:
e6:b8:f6:72:84:76:84:11:00:1c:47:eb:02:ec:86:
12:86:83:e5:0e:aa:6e:18:84:3b:6f:ae:c8:bd:f5:
06:8d:4c:bc:50:4e:7b:aa:5d:60:0c:08:df:8e:e5:
ed:a3:a6:4b:09:ab:83:bb:40:09:39:aa:52:85:85:
a9:5f:63:0e:89:d0:46:15:94:6a:82:9a:76:6d:b9:
c7:f1:5c:04:bc:3a:5c:3b:c8:85:ab:5a:06:bf:d9:
09:37:54:21:ba:38:99:de:e7:48:fd:25:b8:1f:45:
e9:80:8e:28:ec:0f:3d:00:13:a5:fb:fe:f3:a7:4b:
8f:84:d8:4e:75:23:da:ac:7c:e5:ee:eb:d1:6c:0a:
84:5e:aa:20:f6:ef:42:16:61:0d:2b:8e:3d:09:2d:
7d:e0:fa:18:38:4e:9a:df:e0:32:ce:eb:d9:88:d7:
ad:03:31:cd:f2:7c:7b:3a:54:93:55:6c:d4:db:b9:
59:ea:27:14:1f:7d:97:78:c8:10:aa:49:33:9f:97:
94:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:B0:D8:57:8C:FD:FC:72:C4:7A:5F:53:82:56:30:E1:5C:3E:52:86
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145124.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a9aa::/32
Signature Algorithm: sha256WithRSAEncryption
9e:bc:59:5e:85:f5:f5:52:4f:df:7c:89:da:09:c3:ec:40:d8:
a3:91:f9:e7:b2:6b:cc:15:82:4d:86:57:6a:1d:fb:13:ab:7f:
65:83:c4:11:46:6e:a6:12:4a:5f:95:62:a2:4c:20:7f:9c:bd:
58:19:01:d4:eb:e7:63:7a:4c:1c:54:f6:36:30:e9:71:52:c7:
0b:5b:a9:f4:22:8a:0f:c8:e4:31:bd:c2:8a:ad:16:65:09:af:
85:b7:f4:c7:b9:f0:79:42:f4:22:10:19:51:24:47:57:69:e3:
5b:22:4f:30:3f:d1:65:33:60:de:d7:b7:97:34:42:69:22:13:
c5:bf:2a:35:c5:62:61:b9:8b:cd:94:43:42:a8:95:b5:2b:9a:
fd:03:12:07:6b:c2:8a:ed:6e:b2:71:d9:1f:1a:a1:4d:47:81:
5d:9d:9a:ef:60:26:1c:15:3d:b9:8c:64:1e:1b:58:50:63:3c:
fd:3b:fd:d2:6a:a5:b4:75:27:57:ef:fd:81:fd:21:a4:da:17:
3f:9c:29:ed:24:54:67:a3:7f:7e:f5:bc:65:29:11:a7:dd:80:
35:fd:55:34:af:5e:1c:3c:8c:ea:f6:25:d4:e4:af:09:b9:e4:
b0:c7:b9:fe:b2:b5:00:95:73:5e:10:b6:5b:44:a8:88:6a:f8:
19:20:97:dd
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUDoRHXrTIyKW3jdzhlcxGSmfCN0gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwMjQyMzhaFw0yNzA1MjEwMjQ3MzhaMDMxMTAvBgNV
BAMTKDAwQjBEODU3OENGREZDNzJDNDdBNUY1MzgyNTYzMEUxNUMzRTUyODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqg59iTZ4f0o2fULkI4N3Hn23k
oxIAPCHO8Gf4NEC0ToieE3hx57ps7vg4Dk+MRFAh4nSs+kXnaow6lua49nKEdoQR
ABxH6wLshhKGg+UOqm4YhDtvrsi99QaNTLxQTnuqXWAMCN+O5e2jpksJq4O7QAk5
qlKFhalfYw6J0EYVlGqCmnZtucfxXAS8Olw7yIWrWga/2Qk3VCG6OJne50j9Jbgf
RemAjijsDz0AE6X7/vOnS4+E2E51I9qsfOXu69FsCoReqiD270IWYQ0rjj0JLX3g
+hg4Tprf4DLO69mI160DMc3yfHs6VJNVbNTbuVnqJxQffZd4yBCqSTOfl5RvAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUALDYV4z9/HLEel9TglYw4Vw+UoYwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1MTI0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqpqjANBgkqhkiG9w0BAQsFAAOCAQEAnrxZ
XoX19VJP33yJ2gnD7EDYo5H557JrzBWCTYZXah37E6t/ZYPEEUZuphJKX5Viokwg
f5y9WBkB1OvnY3pMHFT2NjDpcVLHC1up9CKKD8jkMb3Ciq0WZQmvhbf0x7nweUL0
IhAZUSRHV2njWyJPMD/RZTNg3te3lzRCaSITxb8qNcViYbmLzZRDQqiVtSua/QMS
B2vCiu1usnHZHxqhTUeBXZ2a72AmHBU9uYxkHhtYUGM8/Tv90mqltHUnV+/9gf0h
pNoXP5wp7SRUZ6N/fvW8ZSkRp92ANf1VNK9eHDyM6vYl1OSvCbnksMe5/rK1AJVz
XhC2W0SoiGr4GSCX3Q==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:19 2026 by rpki-client