Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145136.roa
File: AS145136.roa (raw, json)
Hash identifier: QtNvZT4vfWRO1yWS69+g/T1AfDJxrYTZCbSPVk5xy94=
Subject key identifier: EA:F7:8C:8C:1A:99:65:79:23:74:5B:B9:4C:37:A8:67:4E:70:E4:8C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3B34644CF5FC0E1737BBAC97BBBF2E7B069EE599
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145136.roa
Signing time: Fri 22 May 2026 02:48:08 +0000
ROA not before: Fri 22 May 2026 02:43:08 +0000
ROA not after: Fri 21 May 2027 02:48:08 +0000
asID: 145136
IP address blocks: 240a:a9b6::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:34:64:4c:f5:fc:0e:17:37:bb:ac:97:bb:bf:2e:7b:06:9e:e5:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:43:08 2026 GMT
Not After : May 21 02:48:08 2027 GMT
Subject: CN=EAF78C8C1A99657923745BB94C37A8674E70E48C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:70:33:a2:f3:34:97:b9:1c:6f:84:6d:80:2e:
14:87:a4:47:6d:84:5b:5f:57:a5:47:40:79:63:fe:
ff:05:05:b9:22:50:2f:56:07:0a:eb:a6:25:85:0d:
fe:57:7f:c0:7b:5e:52:55:4d:3d:6d:6d:f4:1b:6d:
31:b1:54:5e:86:b8:e2:7e:e3:12:e7:83:0c:76:28:
21:08:b6:d3:fc:0e:ae:ca:44:12:4e:28:ed:52:d0:
c3:87:d9:ce:d8:2f:b9:b6:ed:42:d7:92:d8:02:ff:
3e:ee:13:ad:e7:1b:fd:05:c4:89:f3:e1:59:45:d3:
57:2b:f5:79:87:8e:ef:73:b0:fb:34:85:c6:69:b4:
cd:c6:75:38:0d:c0:a8:f5:c0:20:c8:b5:d4:8f:2d:
6b:30:8c:1b:37:3b:43:aa:a3:9d:3c:c3:94:30:89:
1e:6f:1f:71:d2:29:57:92:9c:af:05:40:8c:29:16:
0f:2f:e0:b3:36:94:f0:5b:f9:92:c8:19:65:be:ae:
b1:c0:b4:43:23:5f:49:27:7b:cd:37:fd:a9:7e:35:
83:3b:03:fe:98:88:87:82:79:d8:ef:39:36:f9:5c:
b6:bc:44:ff:ed:ff:46:a1:67:da:59:da:6b:2a:fc:
8e:54:dd:05:81:7c:06:02:d2:6b:ab:ef:87:7c:5f:
db:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:F7:8C:8C:1A:99:65:79:23:74:5B:B9:4C:37:A8:67:4E:70:E4:8C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a9b6::/32
Signature Algorithm: sha256WithRSAEncryption
15:84:4f:84:c8:cf:fa:bc:23:27:eb:59:03:93:b2:0f:1b:9c:
53:36:99:63:36:0f:7c:89:b7:3a:47:24:45:ea:de:e1:de:45:
ac:58:47:6f:37:02:2f:95:c6:1b:79:ca:3d:b8:14:5a:10:1a:
9a:c7:0c:18:c3:14:a9:42:87:67:00:f1:89:63:70:d1:3c:a6:
c4:02:2a:c7:ff:2e:27:97:47:93:58:09:0d:a7:dc:73:22:c5:
65:6b:91:78:c6:4f:1a:66:3c:79:a6:3e:52:08:fc:3f:b2:13:
06:fe:94:26:83:9d:8d:08:c6:cb:70:5b:1c:a7:55:bd:dd:59:
8d:ba:16:91:d6:87:c4:86:e3:8c:1e:96:ca:e6:a0:1e:33:a2:
87:7f:e0:48:a9:88:1f:43:d7:9e:90:56:96:4d:2c:c7:ff:5c:
d9:25:ae:f5:ee:31:59:bd:dc:b3:8e:ae:23:22:84:c9:50:40:
28:f9:ed:d5:d6:21:03:a4:01:9b:60:5e:d9:48:9d:8f:23:66:
28:a7:3d:d0:d6:03:eb:02:f1:36:c4:32:84:fc:a1:e2:cb:f1:
c7:00:21:7d:86:3b:c9:7b:6d:2f:c7:76:05:df:cd:d6:99:3c:
1b:4a:e9:3e:41:95:8c:d6:0f:4c:a0:e9:ec:b4:54:6d:1c:0d:
d2:6c:95:02
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUOzRkTPX8Dhc3u6yXu78uewae5ZkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwMjQzMDhaFw0yNzA1MjEwMjQ4MDhaMDMxMTAvBgNV
BAMTKEVBRjc4QzhDMUE5OTY1NzkyMzc0NUJCOTRDMzdBODY3NEU3MEU0OEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCncDOi8zSXuRxvhG2ALhSHpEdt
hFtfV6VHQHlj/v8FBbkiUC9WBwrrpiWFDf5Xf8B7XlJVTT1tbfQbbTGxVF6GuOJ+
4xLngwx2KCEIttP8Dq7KRBJOKO1S0MOH2c7YL7m27ULXktgC/z7uE63nG/0FxInz
4VlF01cr9XmHju9zsPs0hcZptM3GdTgNwKj1wCDItdSPLWswjBs3O0Oqo508w5Qw
iR5vH3HSKVeSnK8FQIwpFg8v4LM2lPBb+ZLIGWW+rrHAtEMjX0kne803/al+NYM7
A/6YiIeCedjvOTb5XLa8RP/t/0ahZ9pZ2msq/I5U3QWBfAYC0mur74d8X9txAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU6veMjBqZZXkjdFu5TDeoZ05w5IwwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1MTM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqptjANBgkqhkiG9w0BAQsFAAOCAQEAFYRP
hMjP+rwjJ+tZA5OyDxucUzaZYzYPfIm3OkckRere4d5FrFhHbzcCL5XGG3nKPbgU
WhAamscMGMMUqUKHZwDxiWNw0TymxAIqx/8uJ5dHk1gJDafccyLFZWuReMZPGmY8
eaY+Ugj8P7ITBv6UJoOdjQjGy3BbHKdVvd1ZjboWkdaHxIbjjB6WyuagHjOih3/g
SKmIH0PXnpBWlk0sx/9c2SWu9e4xWb3cs46uIyKEyVBAKPnt1dYhA6QBm2Be2Uid
jyNmKKc90NYD6wLxNsQyhPyh4svxxwAhfYY7yXttL8d2Bd/N1pk8G0rpPkGVjNYP
TKDp7LRUbRwN0myVAg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:56 2026 by rpki-client