Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145170.roa
File: AS145170.roa (raw, json)
Hash identifier: ikkr88HC2y4re3MRkM5D3f3y9jA45tz4gnv8FeWK72E=
Subject key identifier: 5A:9D:37:C3:3A:6E:4E:80:0E:FF:46:D5:D3:90:52:98:2F:80:8A:9C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 14DF70CE87A98069A7258912717303B616713BAD
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145170.roa
Signing time: Tue 26 May 2026 02:35:02 +0000
ROA not before: Tue 26 May 2026 02:30:02 +0000
ROA not after: Tue 25 May 2027 02:35:02 +0000
asID: 145170
IP address blocks: 240a:a9d8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:df:70:ce:87:a9:80:69:a7:25:89:12:71:73:03:b6:16:71:3b:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:30:02 2026 GMT
Not After : May 25 02:35:02 2027 GMT
Subject: CN=5A9D37C33A6E4E800EFF46D5D39052982F808A9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:d1:c8:86:13:c2:20:df:17:68:6d:5f:87:5c:
e4:4a:ca:c8:3e:42:77:9e:83:51:73:4f:f5:9f:21:
bb:eb:8d:36:0c:f4:2d:fc:fc:a6:35:07:04:63:32:
57:cc:bb:4b:2e:02:db:53:29:c5:5c:87:72:d9:00:
d3:2d:80:3f:d6:3b:00:db:c4:50:c3:e3:b4:6e:6f:
2c:8d:07:5f:7f:2c:3f:b2:78:98:ce:5a:9e:fb:29:
ed:0f:d9:17:25:66:e3:11:23:2c:3f:40:c3:1f:d5:
06:6f:9d:97:1a:50:3e:74:f7:1e:1c:aa:15:89:90:
24:ac:57:40:9a:e9:d4:dd:2b:32:a5:7b:c7:e7:05:
6f:27:b9:79:61:36:22:35:68:8b:b3:5d:74:b9:f5:
62:cb:04:80:1e:ad:6c:15:06:fe:75:be:fe:dd:b8:
30:9c:46:d4:2b:5c:c1:73:79:0c:8c:6d:39:03:31:
83:7c:6a:f0:f5:51:83:67:f5:41:bb:20:9c:fb:5e:
7f:0c:b3:43:82:90:05:eb:9b:d9:3f:4a:00:57:57:
ac:6b:fa:a2:5b:7d:d5:a6:68:e2:8f:86:09:ca:48:
6e:38:50:c1:df:ca:a8:6a:a8:05:ee:e9:5f:f3:6e:
4e:2c:24:be:7e:d0:fe:b2:c8:ef:7c:30:8f:65:10:
64:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:9D:37:C3:3A:6E:4E:80:0E:FF:46:D5:D3:90:52:98:2F:80:8A:9C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145170.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a9d8::/32
Signature Algorithm: sha256WithRSAEncryption
44:7b:36:51:1d:21:b4:6d:d4:f7:fc:b0:91:e5:d1:25:2f:0d:
e6:ab:2e:a5:10:0d:13:7e:7f:89:57:c8:a4:cc:77:58:08:3a:
cc:88:bb:74:af:66:5f:d8:dd:9e:47:22:26:e4:b4:1a:1b:17:
0f:29:85:6a:12:34:96:4f:96:c9:69:30:9f:13:06:2d:77:2f:
96:46:a1:2e:6d:f2:58:c4:d9:fb:11:48:0d:96:b5:01:26:dd:
50:0b:ac:70:b5:b1:1a:5d:f0:a0:6c:76:4d:1c:d0:91:b3:e5:
2f:d3:e4:97:9b:ba:2e:26:4a:23:ca:45:61:73:b9:93:42:76:
82:4b:c5:c5:79:21:5c:24:ba:6f:8b:68:44:0a:6c:66:ea:a0:
08:a0:27:d4:dc:53:18:6d:35:9e:c5:e3:b0:bc:6a:b5:5e:d2:
99:91:01:f8:e8:ba:25:7d:83:f3:26:c8:e6:fe:7a:7f:17:40:
69:a9:8c:a9:9b:f4:55:bc:77:ca:cc:e8:ff:7a:05:64:53:71:
ff:50:87:0a:ad:4b:16:b4:9c:92:4b:06:a6:17:82:02:88:a9:
27:2e:ff:6b:72:4f:5d:aa:3a:39:16:d8:eb:69:11:11:d8:15:
5d:0c:26:17:83:15:cd:f8:e1:99:92:4d:64:82:a0:e1:01:2e:
65:7b:01:1b
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUFN9wzoepgGmnJYkScXMDthZxO60wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMjMwMDJaFw0yNzA1MjUwMjM1MDJaMDMxMTAvBgNV
BAMTKDVBOUQzN0MzM0E2RTRFODAwRUZGNDZENUQzOTA1Mjk4MkY4MDhBOUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCE0ciGE8Ig3xdobV+HXORKysg+
Qneeg1FzT/WfIbvrjTYM9C38/KY1BwRjMlfMu0suAttTKcVch3LZANMtgD/WOwDb
xFDD47RubyyNB19/LD+yeJjOWp77Ke0P2RclZuMRIyw/QMMf1QZvnZcaUD509x4c
qhWJkCSsV0Ca6dTdKzKle8fnBW8nuXlhNiI1aIuzXXS59WLLBIAerWwVBv51vv7d
uDCcRtQrXMFzeQyMbTkDMYN8avD1UYNn9UG7IJz7Xn8Ms0OCkAXrm9k/SgBXV6xr
+qJbfdWmaOKPhgnKSG44UMHfyqhqqAXu6V/zbk4sJL5+0P6yyO98MI9lEGT9AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUWp03wzpuToAO/0bV05BSmC+AipwwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1MTcwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqp2DANBgkqhkiG9w0BAQsFAAOCAQEARHs2
UR0htG3U9/ywkeXRJS8N5qsupRANE35/iVfIpMx3WAg6zIi7dK9mX9jdnkciJuS0
GhsXDymFahI0lk+WyWkwnxMGLXcvlkahLm3yWMTZ+xFIDZa1ASbdUAuscLWxGl3w
oGx2TRzQkbPlL9Pkl5u6LiZKI8pFYXO5k0J2gkvFxXkhXCS6b4toRApsZuqgCKAn
1NxTGG01nsXjsLxqtV7SmZEB+Oi6JX2D8ybI5v56fxdAaamMqZv0Vbx3yszo/3oF
ZFNx/1CHCq1LFrSckksGpheCAoipJy7/a3JPXao6ORbY62kREdgVXQwmF4MVzfjh
mZJNZIKg4QEuZXsBGw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:39 2026 by rpki-client