Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145141.roa
File: AS145141.roa (raw, json)
Hash identifier: QIWbpufGW02OXou/KLzux3F2JzV4RtiOvSax6QZtcak=
Subject key identifier: B8:01:A1:E1:14:DB:B1:03:AE:1C:C3:B9:55:DB:B9:9F:5B:2F:27:40
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 56BC5974D7101AE82C568CEE64B1FA7A05329ECF
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145141.roa
Signing time: Tue 26 May 2026 02:35:25 +0000
ROA not before: Tue 26 May 2026 02:30:25 +0000
ROA not after: Tue 25 May 2027 02:35:25 +0000
asID: 145141
IP address blocks: 240a:a9bb::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:bc:59:74:d7:10:1a:e8:2c:56:8c:ee:64:b1:fa:7a:05:32:9e:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:30:25 2026 GMT
Not After : May 25 02:35:25 2027 GMT
Subject: CN=B801A1E114DBB103AE1CC3B955DBB99F5B2F2740
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:12:84:4f:23:33:1a:4c:89:7b:33:83:55:90:
45:64:c5:df:e5:98:8d:9c:de:3d:74:94:aa:0b:8b:
e1:20:43:9b:d7:6d:39:b7:c3:f1:c0:5e:92:58:90:
73:1b:bd:b8:72:e2:11:98:d8:7f:11:e2:54:e9:59:
e7:f7:20:8c:25:db:cf:48:33:a3:8f:55:15:7d:e4:
20:85:c4:27:84:f4:0f:7c:b1:85:ef:40:85:c5:b2:
a1:7c:73:47:c7:48:43:e5:87:0a:bb:ca:a1:15:7d:
26:c3:12:d8:45:69:85:99:65:d0:15:f0:33:4d:db:
22:f2:8f:85:86:f4:a7:4f:dd:5d:6c:26:b0:b7:dc:
53:8f:53:fc:0a:5b:1b:3a:35:74:a3:bf:22:48:26:
54:17:5b:60:35:62:72:2a:91:43:66:33:33:a0:4d:
41:da:24:ed:68:08:2e:d5:77:e9:2a:a4:35:77:dd:
c4:9b:39:06:fd:dd:82:65:79:07:e0:14:ff:3e:9c:
7c:d8:a2:27:c5:89:06:ae:97:5d:75:09:2e:f0:c7:
58:1a:e9:16:b0:85:7b:32:0c:99:f3:cd:29:29:25:
be:fc:c0:48:2b:53:1c:62:17:c6:a9:d5:84:98:1e:
db:71:06:35:a5:a6:51:82:f2:a0:52:81:23:ec:1e:
44:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:01:A1:E1:14:DB:B1:03:AE:1C:C3:B9:55:DB:B9:9F:5B:2F:27:40
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145141.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a9bb::/32
Signature Algorithm: sha256WithRSAEncryption
64:ce:7a:3e:62:ce:f8:69:91:f9:7c:9e:31:42:54:79:a8:a4:
4b:11:01:f5:25:55:dc:a3:90:1b:7f:23:0d:f4:cb:ed:13:c1:
ab:ce:05:17:72:1c:3c:40:40:f7:3e:52:a0:c4:4d:e4:6f:af:
66:4e:80:58:90:17:a7:40:30:47:25:c4:23:48:d2:52:23:04:
23:1b:60:55:ef:34:cd:a8:cb:5a:06:00:70:86:7d:9a:4a:4c:
8a:01:b7:d1:65:bd:65:4d:9e:ce:cc:86:4f:f4:51:1b:d4:44:
cf:7c:b0:d0:ac:22:cb:ea:8a:46:d9:f8:20:27:94:30:98:8b:
a1:dd:29:26:9c:40:f2:d6:5d:4f:36:a6:f0:94:6f:a6:a1:0c:
4a:dd:4c:b5:be:10:aa:a8:d1:5c:6e:a2:c0:f7:c3:4a:a1:5b:
5c:9e:e0:db:45:79:18:c8:7d:12:79:aa:e0:12:1e:fb:62:2a:
0a:fb:7c:1a:f0:e5:b5:9a:c8:43:7d:10:b0:19:f6:af:ee:36:
97:d5:dd:96:19:73:a8:c7:ba:90:c6:e9:bc:e2:db:31:d7:8a:
58:47:41:c6:6e:a4:28:b1:01:19:57:6e:1b:7b:ad:fc:47:bc:
d7:3f:b5:38:18:08:91:47:52:1a:fa:39:fc:84:09:c1:4e:40:
6e:e4:24:21
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUVrxZdNcQGugsVozuZLH6egUyns8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMjMwMjVaFw0yNzA1MjUwMjM1MjVaMDMxMTAvBgNV
BAMTKEI4MDFBMUUxMTREQkIxMDNBRTFDQzNCOTU1REJCOTlGNUIyRjI3NDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEEoRPIzMaTIl7M4NVkEVkxd/l
mI2c3j10lKoLi+EgQ5vXbTm3w/HAXpJYkHMbvbhy4hGY2H8R4lTpWef3IIwl289I
M6OPVRV95CCFxCeE9A98sYXvQIXFsqF8c0fHSEPlhwq7yqEVfSbDEthFaYWZZdAV
8DNN2yLyj4WG9KdP3V1sJrC33FOPU/wKWxs6NXSjvyJIJlQXW2A1YnIqkUNmMzOg
TUHaJO1oCC7Vd+kqpDV33cSbOQb93YJleQfgFP8+nHzYoifFiQaul111CS7wx1ga
6RawhXsyDJnzzSkpJb78wEgrUxxiF8ap1YSYHttxBjWlplGC8qBSgSPsHkSrAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUuAGh4RTbsQOuHMO5Vdu5n1svJ0AwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1MTQxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqpuzANBgkqhkiG9w0BAQsFAAOCAQEAZM56
PmLO+GmR+XyeMUJUeaikSxEB9SVV3KOQG38jDfTL7RPBq84FF3IcPEBA9z5SoMRN
5G+vZk6AWJAXp0AwRyXEI0jSUiMEIxtgVe80zajLWgYAcIZ9mkpMigG30WW9ZU2e
zsyGT/RRG9REz3yw0Kwiy+qKRtn4ICeUMJiLod0pJpxA8tZdTzam8JRvpqEMSt1M
tb4QqqjRXG6iwPfDSqFbXJ7g20V5GMh9Enmq4BIe+2IqCvt8GvDltZrIQ30QsBn2
r+42l9XdlhlzqMe6kMbpvOLbMdeKWEdBxm6kKLEBGVduG3ut/Ee81z+1OBgIkUdS
Gvo5/IQJwU5AbuQkIQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:46 2026 by rpki-client