Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145126.roa
File: AS145126.roa (raw, json)
Hash identifier: fxBJ/DZtY2/eVznRvrTFVNZKyCPIczXcHxJSC5Aqns0=
Subject key identifier: 71:06:95:95:59:03:29:69:49:15:2B:CE:7B:BC:34:4C:85:E8:06:A7
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 28BC9B30BBD9A3D29D22598F62418EDACABA21B7
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145126.roa
Signing time: Fri 22 May 2026 06:05:42 +0000
ROA not before: Fri 22 May 2026 06:00:42 +0000
ROA not after: Fri 21 May 2027 06:05:42 +0000
asID: 145126
IP address blocks: 240a:a9ac::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:bc:9b:30:bb:d9:a3:d2:9d:22:59:8f:62:41:8e:da:ca:ba:21:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:42 2026 GMT
Not After : May 21 06:05:42 2027 GMT
Subject: CN=710695955903296949152BCE7BBC344C85E806A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:e2:27:7e:60:17:45:b0:50:8a:ef:35:41:54:
c8:68:15:73:4d:e7:f9:2c:23:c6:cc:85:89:09:ed:
d9:0b:d4:0d:d1:9a:79:d8:64:1d:6e:0d:d2:3d:37:
09:84:a5:cd:94:e4:2f:4e:a8:21:b9:2d:86:7a:09:
85:6e:69:55:15:f1:90:66:b0:48:7e:1f:ce:30:89:
d6:38:85:90:a8:4c:bf:4c:f5:44:99:b6:c6:46:92:
2e:28:90:aa:97:3c:bc:59:6a:f0:b0:07:16:bd:5f:
c5:cd:ce:7a:31:8c:28:db:44:bf:85:df:0f:c8:be:
f0:41:c9:a6:aa:26:41:17:bc:d0:e6:9e:cd:7f:97:
72:19:20:6b:22:37:df:fc:09:7b:91:23:0f:0f:a1:
ce:0a:0a:1a:51:5d:ab:02:4c:85:c3:2f:1b:9c:f4:
47:8d:df:bb:65:27:85:5b:9e:9a:d9:20:b8:42:b3:
a1:2c:28:ce:c7:84:51:af:83:79:c2:bb:4d:79:33:
7d:ce:e7:cf:4a:9f:92:ca:dc:4d:d6:e9:e4:d5:6e:
99:1f:7f:b7:21:52:79:5b:30:58:c9:d7:c4:0e:4c:
f1:da:47:d5:59:84:fe:53:13:71:f4:6d:e8:aa:e9:
cf:0c:71:d7:59:41:78:df:fb:48:c0:bd:18:51:db:
6c:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:06:95:95:59:03:29:69:49:15:2B:CE:7B:BC:34:4C:85:E8:06:A7
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145126.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a9ac::/32
Signature Algorithm: sha256WithRSAEncryption
2c:79:aa:64:da:10:f8:ee:4b:ca:78:86:8a:9e:3f:e3:01:1a:
61:28:d9:77:c4:15:c1:d3:99:6a:6a:95:2e:70:2f:f8:5b:36:
77:26:d4:61:17:a7:e6:b9:a1:6d:13:11:76:08:a7:36:aa:c9:
13:94:72:bf:e1:d2:14:99:06:3b:aa:12:92:40:75:a5:9c:68:
97:26:f3:47:f8:de:04:66:5c:32:ef:71:55:a6:59:be:33:54:
5e:11:b1:fd:be:48:d4:7b:63:1f:dc:59:a5:a2:2d:50:33:62:
01:33:f1:e7:d1:fd:f6:17:3e:ac:6e:5f:a7:88:77:f3:91:f6:
5c:77:1c:ae:63:69:7b:22:49:e2:21:31:e2:34:53:f0:84:9a:
b2:04:40:05:cc:ef:e3:14:54:77:8b:23:5b:0a:8c:66:e9:88:
2a:72:4a:63:81:74:e5:c3:b9:d1:d7:79:81:74:82:b7:83:16:
75:96:b2:f6:f1:8f:d2:e0:3f:d3:68:36:f9:94:b4:71:39:3d:
59:b6:84:18:df:1b:f9:ad:3b:ed:8e:10:d8:96:74:55:cd:3a:
35:1a:57:fe:f7:da:55:41:5e:95:ee:0a:27:25:d0:db:e4:34:
2c:6a:0c:34:73:48:93:32:88:03:65:ed:e0:c1:72:1b:95:50:
66:7e:55:2e
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUKLybMLvZo9KdIlmPYkGO2sq6IbcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjAwNDJaFw0yNzA1MjEwNjA1NDJaMDMxMTAvBgNV
BAMTKDcxMDY5NTk1NTkwMzI5Njk0OTE1MkJDRTdCQkMzNDRDODVFODA2QTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW4id+YBdFsFCK7zVBVMhoFXNN
5/ksI8bMhYkJ7dkL1A3RmnnYZB1uDdI9NwmEpc2U5C9OqCG5LYZ6CYVuaVUV8ZBm
sEh+H84widY4hZCoTL9M9USZtsZGki4okKqXPLxZavCwBxa9X8XNznoxjCjbRL+F
3w/IvvBByaaqJkEXvNDmns1/l3IZIGsiN9/8CXuRIw8Poc4KChpRXasCTIXDLxuc
9EeN37tlJ4VbnprZILhCs6EsKM7HhFGvg3nCu015M33O589Kn5LK3E3W6eTVbpkf
f7chUnlbMFjJ18QOTPHaR9VZhP5TE3H0beiq6c8McddZQXjf+0jAvRhR22w3AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUcQaVlVkDKWlJFSvOe7w0TIXoBqcwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1MTI2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqprDANBgkqhkiG9w0BAQsFAAOCAQEALHmq
ZNoQ+O5LyniGip4/4wEaYSjZd8QVwdOZamqVLnAv+Fs2dybUYRen5rmhbRMRdgin
NqrJE5Ryv+HSFJkGO6oSkkB1pZxolybzR/jeBGZcMu9xVaZZvjNUXhGx/b5I1Htj
H9xZpaItUDNiATPx59H99hc+rG5fp4h385H2XHccrmNpeyJJ4iEx4jRT8ISasgRA
Bczv4xRUd4sjWwqMZumIKnJKY4F05cO50dd5gXSCt4MWdZay9vGP0uA/02g2+ZS0
cTk9WbaEGN8b+a077Y4Q2JZ0Vc06NRpX/vfaVUFele4KJyXQ2+Q0LGoMNHNIkzKI
A2Xt4MFyG5VQZn5VLg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:26 2026 by rpki-client