Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145152.roa
File: AS145152.roa (raw, json)
Hash identifier: gZT1UZfQDRQLl7TAw+LNArjValJxV6j1z6n/UJJ6oTw=
Subject key identifier: E7:DC:0F:06:15:DF:A5:6C:3E:F2:54:09:AF:AC:E5:E0:C0:40:11:A0
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5964A1990F9ED7B65BED1FC5BB1BD5D35A5035B4
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145152.roa
Signing time: Fri 22 May 2026 06:05:23 +0000
ROA not before: Fri 22 May 2026 06:00:23 +0000
ROA not after: Fri 21 May 2027 06:05:23 +0000
asID: 145152
IP address blocks: 240a:a9c6::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:64:a1:99:0f:9e:d7:b6:5b:ed:1f:c5:bb:1b:d5:d3:5a:50:35:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:23 2026 GMT
Not After : May 21 06:05:23 2027 GMT
Subject: CN=E7DC0F0615DFA56C3EF25409AFACE5E0C04011A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3c:8c:1b:f6:2f:81:0a:e9:0a:91:8b:46:48:
a4:51:67:52:a1:78:7d:8f:87:6e:5b:6e:73:f1:b5:
a9:50:85:68:7a:98:11:fe:a4:bf:01:1e:b1:fd:18:
a1:73:0e:2a:0b:ef:1a:30:fa:16:5e:ba:44:ae:f3:
10:42:39:72:c8:8c:b5:b6:78:79:c0:ad:a0:8b:30:
1f:73:e5:26:8d:4f:9b:bd:e5:d6:c2:dd:3f:b1:ef:
72:8e:49:76:13:18:06:6a:30:a0:4f:74:39:93:65:
50:7e:22:26:10:06:97:88:8b:46:d3:7e:70:c6:1a:
56:34:89:48:86:e0:a5:b5:05:ed:a2:e0:b7:df:8d:
1d:85:e9:4e:e9:e7:a1:86:52:bd:dd:03:6c:81:35:
31:1c:1f:83:23:8a:6e:5a:ae:2e:85:e2:d7:9c:68:
f7:9b:d0:0c:7e:48:10:ca:52:2e:a2:2d:78:6a:3c:
ee:0d:5b:a7:6e:a7:b0:45:b8:4a:ad:c3:f5:95:74:
db:ee:6c:c4:cf:cb:d3:e5:62:ae:4b:ac:7d:9e:34:
7a:09:44:18:19:57:c5:82:c0:27:45:1c:ad:aa:9b:
bd:d5:94:83:c3:ca:78:a3:0b:c8:13:c2:35:ef:d7:
1c:47:b8:29:d2:d9:f0:6f:e4:e7:3a:cd:71:6d:8d:
64:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:DC:0F:06:15:DF:A5:6C:3E:F2:54:09:AF:AC:E5:E0:C0:40:11:A0
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145152.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a9c6::/32
Signature Algorithm: sha256WithRSAEncryption
3d:b7:0a:55:d0:31:f3:65:a2:53:7e:6f:f4:7b:d6:52:f8:ba:
50:72:b4:56:5b:d7:0a:5b:ef:ab:29:92:80:9d:35:18:7f:e7:
4f:10:24:b1:e7:ec:61:34:c7:ba:40:f5:9f:13:64:58:05:0f:
bb:15:fa:b5:fd:3a:29:58:d3:05:0a:e7:97:a1:d7:ce:ba:69:
63:ca:0c:02:46:e0:9b:bc:a5:11:2a:c4:cf:39:31:6f:20:5c:
39:5f:d0:49:fb:b0:1a:e1:bb:b7:45:10:52:82:93:7c:11:54:
20:74:43:48:ba:07:98:03:dc:6a:7f:11:95:64:08:1d:1c:fc:
6e:5a:a2:1a:fe:7a:05:96:ad:89:98:b8:ec:27:9e:d4:62:a3:
8a:fe:a1:83:de:aa:82:13:06:ba:57:31:32:47:79:c2:f2:7f:
45:b7:60:ae:27:4b:d1:55:b7:bd:75:a2:60:43:92:bb:e5:74:
a3:45:4d:2e:c5:cd:0a:f9:a6:47:16:71:5a:7e:a3:a4:59:89:
fc:5c:b8:87:a4:c3:bf:d6:93:92:6c:15:14:7c:80:29:e0:e1:
4f:99:b0:0e:d9:90:30:22:50:27:76:78:0e:82:fb:9a:ef:2c:
c4:0c:ba:cb:c1:51:36:38:1b:e0:f7:73:fb:01:04:d2:cf:4f:
00:91:45:52
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUWWShmQ+e17Zb7R/FuxvV01pQNbQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjAwMjNaFw0yNzA1MjEwNjA1MjNaMDMxMTAvBgNV
BAMTKEU3REMwRjA2MTVERkE1NkMzRUYyNTQwOUFGQUNFNUUwQzA0MDExQTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTPIwb9i+BCukKkYtGSKRRZ1Kh
eH2Ph25bbnPxtalQhWh6mBH+pL8BHrH9GKFzDioL7xow+hZeukSu8xBCOXLIjLW2
eHnAraCLMB9z5SaNT5u95dbC3T+x73KOSXYTGAZqMKBPdDmTZVB+IiYQBpeIi0bT
fnDGGlY0iUiG4KW1Be2i4LffjR2F6U7p56GGUr3dA2yBNTEcH4Mjim5ari6F4tec
aPeb0Ax+SBDKUi6iLXhqPO4NW6dup7BFuEqtw/WVdNvubMTPy9PlYq5LrH2eNHoJ
RBgZV8WCwCdFHK2qm73VlIPDynijC8gTwjXv1xxHuCnS2fBv5Oc6zXFtjWR3AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU59wPBhXfpWw+8lQJr6zl4MBAEaAwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1MTUyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqpxjANBgkqhkiG9w0BAQsFAAOCAQEAPbcK
VdAx82WiU35v9HvWUvi6UHK0VlvXClvvqymSgJ01GH/nTxAksefsYTTHukD1nxNk
WAUPuxX6tf06KVjTBQrnl6HXzrppY8oMAkbgm7ylESrEzzkxbyBcOV/QSfuwGuG7
t0UQUoKTfBFUIHRDSLoHmAPcan8RlWQIHRz8blqiGv56BZatiZi47Cee1GKjiv6h
g96qghMGulcxMkd5wvJ/RbdgridL0VW3vXWiYEOSu+V0o0VNLsXNCvmmRxZxWn6j
pFmJ/Fy4h6TDv9aTkmwVFHyAKeDhT5mwDtmQMCJQJ3Z4DoL7mu8sxAy6y8FRNjgb
4Pdz+wEE0s9PAJFFUg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:51 2026 by rpki-client