Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145125.roa
File: AS145125.roa (raw, json)
Hash identifier: UKZSUEHnhA/b4wrK1XAvKlK5YZ92MRqulM86QCBCSok=
Subject key identifier: 2F:3D:B3:9C:EF:F3:60:7F:4B:48:0D:F1:D9:8B:42:B9:B2:A0:6D:F2
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2EAA528FE3DAEF7F786385B153A49D3D01823D84
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145125.roa
Signing time: Fri 22 May 2026 04:26:51 +0000
ROA not before: Fri 22 May 2026 04:21:51 +0000
ROA not after: Fri 21 May 2027 04:26:51 +0000
asID: 145125
IP address blocks: 240a:a9ab::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:aa:52:8f:e3:da:ef:7f:78:63:85:b1:53:a4:9d:3d:01:82:3d:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:21:51 2026 GMT
Not After : May 21 04:26:51 2027 GMT
Subject: CN=2F3DB39CEFF3607F4B480DF1D98B42B9B2A06DF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a8:d9:1f:71:6e:72:83:18:b7:bd:b0:e0:73:
0d:4e:8f:cb:82:43:21:e6:27:cf:14:08:f7:17:08:
6d:80:07:47:0a:19:42:f6:c4:41:17:8f:70:8d:6e:
01:be:23:90:a8:c2:06:70:3c:ff:f4:76:e5:dc:70:
a3:45:27:98:c3:ea:a8:ae:f4:72:22:ef:0f:c9:cf:
1e:6b:7d:83:4e:65:3c:6d:47:35:8c:a6:52:f2:f0:
76:7d:d0:d4:f4:fb:f1:4d:cd:49:62:31:53:94:f4:
e0:5b:d2:10:f2:67:18:06:06:fd:c7:6e:bf:ba:fb:
57:12:4a:ff:2a:81:c7:00:cc:2a:f5:a0:20:05:c8:
a8:1f:c1:72:d6:78:60:09:0f:d6:dc:2f:52:4c:97:
8e:d6:0f:b0:c8:d1:82:1b:f5:8e:92:d9:e3:65:47:
39:92:ce:be:22:a1:da:d2:ac:ca:44:c6:70:6c:62:
bf:d4:9a:a1:1e:63:d8:7b:e3:6b:e2:82:b5:42:d4:
c6:a2:89:7b:28:94:7a:d4:63:71:6a:e0:36:12:0f:
83:06:d0:a2:8a:f5:a8:6e:35:a7:d5:97:9d:99:7a:
3c:cc:e5:3b:9c:b9:7c:0c:64:19:15:7b:9d:ab:76:
4a:cc:14:6f:e0:14:16:8e:b4:05:3e:eb:7f:3a:af:
fd:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:3D:B3:9C:EF:F3:60:7F:4B:48:0D:F1:D9:8B:42:B9:B2:A0:6D:F2
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145125.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a9ab::/32
Signature Algorithm: sha256WithRSAEncryption
28:72:a3:9f:99:6c:70:b8:44:d8:06:f5:9a:72:38:cc:74:42:
48:e5:79:89:3d:11:d9:31:81:cb:76:7c:4b:1d:8a:a1:59:7e:
94:a6:e6:ce:a4:71:93:7b:a8:ff:36:8c:6a:d9:7f:2c:ca:0a:
e0:d2:7f:e2:68:a7:46:d2:d8:0d:66:6f:1a:a4:b9:86:88:65:
4e:83:36:46:f4:b7:b5:18:8d:c0:17:89:74:ed:30:57:f1:a1:
ec:fd:a5:c3:10:4f:59:61:ef:1c:51:1e:4e:91:74:c4:27:c6:
a3:c9:95:b7:70:e9:25:f8:4e:64:04:53:65:92:49:d1:fe:e7:
0a:26:63:44:08:a6:f1:e1:30:3e:52:49:24:b0:15:ec:ea:5f:
d1:ed:9f:8e:13:a6:c0:9c:c5:bb:8a:1f:0a:f9:9e:d4:b3:66:
8a:71:18:a0:55:6f:d4:4b:2f:c6:85:ff:e7:0a:b8:93:b1:b4:
ed:de:a7:4b:9f:8c:73:a3:7a:74:79:76:31:57:e9:21:0e:9a:
b5:60:43:47:e6:58:b7:27:80:3c:71:65:3a:b9:6d:98:f7:c2:
af:60:f9:ea:a8:3e:79:5e:33:63:10:43:79:3c:5f:d3:cb:b1:
78:14:b7:20:bc:c3:f6:ac:25:f3:15:d7:d7:f7:53:d9:af:ee:
09:98:98:6f
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIULqpSj+Pa7394Y4WxU6SdPQGCPYQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNDIxNTFaFw0yNzA1MjEwNDI2NTFaMDMxMTAvBgNV
BAMTKDJGM0RCMzlDRUZGMzYwN0Y0QjQ4MERGMUQ5OEI0MkI5QjJBMDZERjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFqNkfcW5ygxi3vbDgcw1Oj8uC
QyHmJ88UCPcXCG2AB0cKGUL2xEEXj3CNbgG+I5CowgZwPP/0duXccKNFJ5jD6qiu
9HIi7w/Jzx5rfYNOZTxtRzWMplLy8HZ90NT0+/FNzUliMVOU9OBb0hDyZxgGBv3H
br+6+1cSSv8qgccAzCr1oCAFyKgfwXLWeGAJD9bcL1JMl47WD7DI0YIb9Y6S2eNl
RzmSzr4iodrSrMpExnBsYr/UmqEeY9h742vigrVC1MaiiXsolHrUY3Fq4DYSD4MG
0KKK9ahuNafVl52ZejzM5TucuXwMZBkVe52rdkrMFG/gFBaOtAU+6386r/2pAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQULz2znO/zYH9LSA3x2YtCubKgbfIwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1MTI1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqpqzANBgkqhkiG9w0BAQsFAAOCAQEAKHKj
n5lscLhE2Ab1mnI4zHRCSOV5iT0R2TGBy3Z8Sx2KoVl+lKbmzqRxk3uo/zaMatl/
LMoK4NJ/4minRtLYDWZvGqS5hohlToM2RvS3tRiNwBeJdO0wV/Gh7P2lwxBPWWHv
HFEeTpF0xCfGo8mVt3DpJfhOZARTZZJJ0f7nCiZjRAim8eEwPlJJJLAV7Opf0e2f
jhOmwJzFu4ofCvme1LNminEYoFVv1EsvxoX/5wq4k7G07d6nS5+Mc6N6dHl2MVfp
IQ6atWBDR+ZYtyeAPHFlOrltmPfCr2D56qg+eV4zYxBDeTxf08uxeBS3ILzD9qwl
8xXX1/dT2a/uCZiYbw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:56 2026 by rpki-client