Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145172.roa
File: AS145172.roa (raw, json)
Hash identifier: Mh5Pxek2Ra82UNIDuOSL1VmzDyG2VJ0AVDaHeXBk4Z4=
Subject key identifier: 2B:8E:69:DF:C7:9F:1A:1A:49:9E:5D:E0:87:8F:CE:5B:D4:4C:65:79
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2549A7294FE2ED9764AFA379B4C8A2DC016DDD3F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145172.roa
Signing time: Tue 26 May 2026 01:13:25 +0000
ROA not before: Tue 26 May 2026 01:08:25 +0000
ROA not after: Tue 25 May 2027 01:13:25 +0000
asID: 145172
IP address blocks: 240a:a9da::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:49:a7:29:4f:e2:ed:97:64:af:a3:79:b4:c8:a2:dc:01:6d:dd:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:08:25 2026 GMT
Not After : May 25 01:13:25 2027 GMT
Subject: CN=2B8E69DFC79F1A1A499E5DE0878FCE5BD44C6579
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:39:57:59:56:ea:cf:1b:eb:65:a3:38:6f:76:
40:5a:1b:b3:b3:dc:48:3e:26:a1:f1:d7:b4:05:6a:
71:13:7e:bc:f7:e4:31:15:4b:5e:87:61:a6:79:8f:
bf:2f:b2:e9:55:6e:5e:b4:c0:e4:8d:ad:17:f3:7e:
ec:99:90:d9:31:46:26:5c:7d:73:2e:f6:eb:dc:40:
ec:b8:be:ba:20:21:7d:7a:79:88:c4:1c:41:b0:0a:
fa:82:26:f3:16:77:f7:1b:a8:4c:9b:d3:14:71:be:
37:56:1d:af:ef:be:1a:5a:22:50:3f:99:43:bd:ef:
9a:18:0f:84:af:1e:99:f0:a8:5a:7c:d3:ef:a3:b6:
dd:28:b6:a5:1e:7e:61:28:78:a3:04:55:30:70:4e:
7a:bb:6c:11:82:2f:3b:10:a2:ca:2b:db:40:ea:9e:
ea:c6:d1:fa:45:a6:1f:fd:ca:bc:db:5a:27:83:77:
1e:dd:f6:96:8c:a1:8f:a3:c9:6d:1c:3e:97:d0:fc:
dd:a3:a5:14:af:3c:ed:39:70:db:04:05:4b:47:0a:
fd:7f:2c:60:14:1e:45:f8:aa:2c:32:70:9f:81:7f:
d9:a0:57:8f:c9:93:24:f7:aa:65:80:e5:af:af:c1:
9c:74:7e:05:c9:07:c5:c6:cb:e2:cf:b3:10:05:91:
7a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:8E:69:DF:C7:9F:1A:1A:49:9E:5D:E0:87:8F:CE:5B:D4:4C:65:79
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145172.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a9da::/32
Signature Algorithm: sha256WithRSAEncryption
8d:a4:ef:69:d3:5d:5f:33:d7:8d:ec:ac:82:c2:82:ab:84:d9:
28:e4:36:c3:33:c5:72:f0:4d:42:af:87:e9:d2:61:4a:d8:29:
24:13:86:46:0c:04:89:8f:24:25:c3:6e:10:91:6d:d5:a1:37:
b6:9f:ac:93:cf:35:0c:f0:c0:03:01:c2:c6:a7:e2:af:ca:7b:
f0:64:ba:95:2b:99:29:56:81:00:79:32:9c:c1:95:70:68:b8:
c0:28:b5:61:ae:30:7b:8f:31:bb:53:9a:bc:26:6d:bc:fa:31:
a8:d4:3c:43:0a:73:ad:37:09:ca:dd:6b:e5:2e:1f:68:c1:7f:
32:52:96:f5:08:0e:b2:16:0b:22:f8:1a:f8:df:07:b6:23:a9:
d9:f3:e2:86:2a:fe:50:28:bc:bb:c8:50:a3:0e:c9:17:29:25:
6b:18:bf:44:1c:f8:ac:6e:89:10:3c:53:b2:cf:48:8d:7b:30:
41:3b:37:05:5c:f6:37:be:e7:af:4e:81:da:71:be:78:4e:54:
89:bd:61:d0:ed:48:04:06:a2:f2:12:aa:a8:5b:d2:0b:46:5d:
a8:b6:c1:0f:04:2c:01:ed:9e:0a:74:40:8b:0e:e0:5b:4b:ed:
2f:be:0e:9b:36:9a:bb:e7:fe:9b:33:72:8a:b4:7b:17:8e:63:
7b:5e:6c:5f
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUJUmnKU/i7Zdkr6N5tMii3AFt3T8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMTA4MjVaFw0yNzA1MjUwMTEzMjVaMDMxMTAvBgNV
BAMTKDJCOEU2OURGQzc5RjFBMUE0OTlFNURFMDg3OEZDRTVCRDQ0QzY1NzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCNOVdZVurPG+tlozhvdkBaG7Oz
3Eg+JqHx17QFanETfrz35DEVS16HYaZ5j78vsulVbl60wOSNrRfzfuyZkNkxRiZc
fXMu9uvcQOy4vrogIX16eYjEHEGwCvqCJvMWd/cbqEyb0xRxvjdWHa/vvhpaIlA/
mUO975oYD4SvHpnwqFp80++jtt0otqUefmEoeKMEVTBwTnq7bBGCLzsQosor20Dq
nurG0fpFph/9yrzbWieDdx7d9paMoY+jyW0cPpfQ/N2jpRSvPO05cNsEBUtHCv1/
LGAUHkX4qiwycJ+Bf9mgV4/JkyT3qmWA5a+vwZx0fgXJB8XGy+LPsxAFkXqpAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUK45p38efGhpJnl3gh4/OW9RMZXkwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1MTcyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqp2jANBgkqhkiG9w0BAQsFAAOCAQEAjaTv
adNdXzPXjeysgsKCq4TZKOQ2wzPFcvBNQq+H6dJhStgpJBOGRgwEiY8kJcNuEJFt
1aE3tp+sk881DPDAAwHCxqfir8p78GS6lSuZKVaBAHkynMGVcGi4wCi1Ya4we48x
u1OavCZtvPoxqNQ8QwpzrTcJyt1r5S4faMF/MlKW9QgOshYLIvga+N8HtiOp2fPi
hir+UCi8u8hQow7JFyklaxi/RBz4rG6JEDxTss9IjXswQTs3BVz2N77nr06B2nG+
eE5Uib1h0O1IBAai8hKqqFvSC0ZdqLbBDwQsAe2eCnRAiw7gW0vtL74Omzaau+f+
mzNyirR7F45je15sXw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:28 2026 by rpki-client