Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145173.roa
File: AS145173.roa (raw, json)
Hash identifier: MH+oULrMOWPxalpmZHvmSytt/9Y3mfhdKMDvOzcUXAQ=
Subject key identifier: 36:62:C3:74:6E:95:A8:78:E2:24:A2:55:09:F1:B1:BF:7B:11:6C:B2
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 30921EC2328F91D2FFF0157F20F25DD1EDF53D43
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145173.roa
Signing time: Fri 22 May 2026 07:08:38 +0000
ROA not before: Fri 22 May 2026 07:03:38 +0000
ROA not after: Fri 21 May 2027 07:08:38 +0000
asID: 145173
IP address blocks: 240a:a9db::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:92:1e:c2:32:8f:91:d2:ff:f0:15:7f:20:f2:5d:d1:ed:f5:3d:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:03:38 2026 GMT
Not After : May 21 07:08:38 2027 GMT
Subject: CN=3662C3746E95A878E224A25509F1B1BF7B116CB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e3:fe:56:8e:3e:09:8e:c2:4e:4f:65:33:24:
aa:41:bd:22:be:5d:f9:7b:63:08:e6:d7:e8:d8:0e:
05:e6:2a:fb:9e:24:df:53:72:1b:c2:9a:66:14:ba:
23:5e:7a:f3:c7:5d:d9:23:e4:2e:13:3c:b4:f9:9f:
b4:71:46:29:46:24:22:e9:ba:8c:de:55:36:ad:10:
e7:8a:b7:91:52:7e:51:ad:04:77:ce:9a:c6:1e:d9:
e9:ef:55:26:62:bd:81:e4:83:21:99:09:7b:68:c2:
b5:91:ef:ba:a0:64:91:9a:26:36:58:50:a8:35:fd:
34:92:24:84:f0:f8:50:a7:9e:a6:b7:87:ac:5c:1b:
a8:6e:7b:73:49:ea:1c:3a:50:a6:eb:69:bd:bd:d7:
63:8e:02:3d:30:c6:22:af:d2:95:07:cc:18:76:82:
85:e7:2d:2a:2f:f9:3b:7d:65:b2:f8:35:30:4c:49:
01:ea:66:bd:72:6d:15:44:09:4e:25:0a:62:13:94:
53:da:7d:ef:06:7a:bb:3b:52:f5:10:9a:cf:3c:65:
1e:2e:26:a1:57:f5:d9:90:66:79:0c:ed:82:85:8f:
4a:26:8e:c2:c0:ba:ea:84:b2:d8:88:59:8c:4d:40:
c6:1b:5b:e4:d3:f4:4d:34:b2:81:fa:e4:39:18:b6:
cd:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:62:C3:74:6E:95:A8:78:E2:24:A2:55:09:F1:B1:BF:7B:11:6C:B2
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145173.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a9db::/32
Signature Algorithm: sha256WithRSAEncryption
22:3b:86:bd:e4:be:e4:83:59:d7:1a:ab:4d:99:11:a8:d5:df:
1b:76:f6:21:00:6d:89:15:3b:13:71:a2:88:ee:62:97:8e:f6:
0b:d0:85:94:0c:93:b7:69:dd:84:2e:35:d5:39:89:bf:b6:ac:
72:c9:b7:20:ee:0c:e5:77:b8:4d:e9:94:b4:b7:fd:32:d5:34:
db:7e:3b:49:0c:de:cf:0f:a5:a9:84:91:49:28:fc:d0:4d:22:
3d:a6:59:1c:b3:1e:a8:cf:e6:81:3d:e2:24:b9:ad:a6:74:ae:
e2:bf:c9:9e:60:cd:f1:6e:63:6b:41:8d:22:3a:f9:9d:ac:a8:
a3:4f:05:ee:5a:e5:20:cb:b7:71:9f:20:9e:26:91:2e:88:ba:
70:12:66:18:c1:21:1f:4f:6d:ce:2e:f4:d9:74:e8:b1:2f:fe:
e4:b3:b8:cd:57:3e:b2:f2:cf:9d:24:aa:f3:97:33:6d:a5:ba:
d6:39:c4:73:39:34:a3:bf:bd:f7:e6:36:04:67:3d:20:ad:91:
43:5f:eb:b2:37:64:36:72:6b:33:82:7b:d1:e0:68:75:d5:00:
0c:b4:f4:9c:34:e4:90:6f:b1:99:7e:ed:b1:f7:2e:b1:36:c3:
a4:29:02:37:a7:68:a5:31:f1:8c:36:8d:62:ff:a3:bf:1e:17:
2b:e0:d9:26
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUMJIewjKPkdL/8BV/IPJd0e31PUMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzAzMzhaFw0yNzA1MjEwNzA4MzhaMDMxMTAvBgNV
BAMTKDM2NjJDMzc0NkU5NUE4NzhFMjI0QTI1NTA5RjFCMUJGN0IxMTZDQjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC14/5Wjj4JjsJOT2UzJKpBvSK+
Xfl7Ywjm1+jYDgXmKvueJN9TchvCmmYUuiNeevPHXdkj5C4TPLT5n7RxRilGJCLp
uozeVTatEOeKt5FSflGtBHfOmsYe2envVSZivYHkgyGZCXtowrWR77qgZJGaJjZY
UKg1/TSSJITw+FCnnqa3h6xcG6hue3NJ6hw6UKbrab2912OOAj0wxiKv0pUHzBh2
goXnLSov+Tt9ZbL4NTBMSQHqZr1ybRVECU4lCmITlFPafe8Gers7UvUQms88ZR4u
JqFX9dmQZnkM7YKFj0omjsLAuuqEstiIWYxNQMYbW+TT9E00soH65DkYts1FAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUNmLDdG6VqHjiJKJVCfGxv3sRbLIwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1MTczLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqp2zANBgkqhkiG9w0BAQsFAAOCAQEAIjuG
veS+5INZ1xqrTZkRqNXfG3b2IQBtiRU7E3GiiO5il472C9CFlAyTt2ndhC411TmJ
v7ascsm3IO4M5Xe4TemUtLf9MtU02347SQzezw+lqYSRSSj80E0iPaZZHLMeqM/m
gT3iJLmtpnSu4r/JnmDN8W5ja0GNIjr5nayoo08F7lrlIMu3cZ8gniaRLoi6cBJm
GMEhH09tzi702XTosS/+5LO4zVc+svLPnSSq85czbaW61jnEczk0o7+99+Y2BGc9
IK2RQ1/rsjdkNnJrM4J70eBoddUADLT0nDTkkG+xmX7tsfcusTbDpCkCN6dopTHx
jDaNYv+jvx4XK+DZJg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:55 2026 by rpki-client