Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145193.roa
File: AS145193.roa (raw, json)
Hash identifier: chyk9t7IGKEFSumQ7R8fqITIA08ZZQT2csykwU6KpHc=
Subject key identifier: C5:29:19:B9:B0:17:21:0E:8A:A8:59:25:D6:37:42:51:F6:E2:EF:56
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 523D7D84CBE7A81778E608223483D917AB6163ED
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145193.roa
Signing time: Mon 25 May 2026 06:48:43 +0000
ROA not before: Mon 25 May 2026 06:43:43 +0000
ROA not after: Mon 24 May 2027 06:48:43 +0000
asID: 145193
IP address blocks: 240a:a9ef::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:3d:7d:84:cb:e7:a8:17:78:e6:08:22:34:83:d9:17:ab:61:63:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:43:43 2026 GMT
Not After : May 24 06:48:43 2027 GMT
Subject: CN=C52919B9B017210E8AA85925D6374251F6E2EF56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ee:12:48:f6:a3:4a:3b:e8:11:4c:91:c5:a9:
19:94:01:b6:6f:59:d3:50:a1:49:51:25:01:64:36:
cc:03:2d:17:a3:4f:0c:08:07:39:23:79:2c:10:40:
22:14:40:31:e6:be:c8:05:2b:9d:ce:69:77:49:5d:
58:5c:4c:b6:04:4b:07:3e:cb:19:61:93:71:95:e6:
1d:4a:d1:05:5c:a5:4e:97:31:33:db:06:bb:10:3c:
03:0a:8e:06:a0:89:71:cf:a8:52:38:34:a1:9e:6a:
da:e9:22:ab:2e:29:3d:31:b3:2b:6b:ca:88:5d:53:
e0:a6:5f:9a:1c:13:f8:59:2c:e7:ab:dd:61:11:ff:
ad:36:fb:87:41:ac:68:46:74:e4:cd:cc:67:b8:fd:
17:75:af:c6:94:4f:f4:97:68:5b:7f:ff:85:78:ee:
38:d1:6b:a6:41:d6:8e:54:43:7d:de:7f:fe:96:36:
cf:24:39:0c:33:de:e7:10:a5:86:52:69:82:38:f5:
26:24:fd:46:ec:72:fa:ab:83:2c:4a:aa:24:12:ee:
69:6a:d2:dc:f6:32:28:db:c0:ac:16:dd:59:fd:cf:
94:46:52:2a:ff:94:43:8a:0b:7f:8b:84:36:5e:ba:
09:69:76:69:e8:89:a9:d6:c7:2a:18:6e:52:bf:c8:
37:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:29:19:B9:B0:17:21:0E:8A:A8:59:25:D6:37:42:51:F6:E2:EF:56
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145193.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a9ef::/32
Signature Algorithm: sha256WithRSAEncryption
52:14:d6:40:36:4c:31:65:ce:a3:be:19:08:15:88:e2:64:c1:
44:80:49:09:85:c9:1d:f5:e8:3a:55:7b:3d:1d:04:9b:2b:02:
a0:81:59:2f:86:fb:58:4f:11:09:35:2a:b7:de:d0:33:12:4f:
a5:92:f9:dc:0c:70:4a:e3:16:bf:4a:60:7c:07:04:9c:df:3b:
4b:ff:27:e8:82:85:29:17:2c:e3:35:92:e7:0e:91:21:54:1f:
fd:84:41:e8:fe:40:a0:56:fe:4a:ba:6d:af:f3:76:50:fb:ad:
86:e9:82:1c:fc:91:95:20:db:61:37:71:95:91:f5:1e:6d:6c:
b1:2c:58:1d:12:74:e1:a8:10:03:b6:0f:ff:4f:f9:1d:45:18:
c5:3e:18:69:ff:c1:84:9c:90:66:b6:11:ad:43:bb:df:6a:24:
fe:99:7d:35:21:b6:ee:ec:30:f1:1e:32:75:bf:ec:86:59:84:
e7:4e:22:98:e1:62:2d:3c:a8:48:f3:73:ef:75:e0:8f:66:3d:
7f:1b:95:c9:09:e1:71:57:9a:0c:30:68:35:ec:e8:80:0f:47:
b6:0c:73:5e:9a:0c:21:47:68:37:d0:8b:fe:11:7a:35:42:0f:
3a:d3:84:ba:59:0c:21:fe:98:68:d8:d3:de:ea:7d:77:c1:13:
73:86:30:f2
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUUj19hMvnqBd45ggiNIPZF6thY+0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwNjQzNDNaFw0yNzA1MjQwNjQ4NDNaMDMxMTAvBgNV
BAMTKEM1MjkxOUI5QjAxNzIxMEU4QUE4NTkyNUQ2Mzc0MjUxRjZFMkVGNTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ7hJI9qNKO+gRTJHFqRmUAbZv
WdNQoUlRJQFkNswDLRejTwwIBzkjeSwQQCIUQDHmvsgFK53OaXdJXVhcTLYESwc+
yxlhk3GV5h1K0QVcpU6XMTPbBrsQPAMKjgagiXHPqFI4NKGeatrpIqsuKT0xsytr
yohdU+CmX5ocE/hZLOer3WER/602+4dBrGhGdOTNzGe4/Rd1r8aUT/SXaFt//4V4
7jjRa6ZB1o5UQ33ef/6WNs8kOQwz3ucQpYZSaYI49SYk/UbscvqrgyxKqiQS7mlq
0tz2MijbwKwW3Vn9z5RGUir/lEOKC3+LhDZeuglpdmnoianWxyoYblK/yDdLAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUxSkZubAXIQ6KqFkl1jdCUfbi71YwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1MTkzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqp7zANBgkqhkiG9w0BAQsFAAOCAQEAUhTW
QDZMMWXOo74ZCBWI4mTBRIBJCYXJHfXoOlV7PR0EmysCoIFZL4b7WE8RCTUqt97Q
MxJPpZL53AxwSuMWv0pgfAcEnN87S/8n6IKFKRcs4zWS5w6RIVQf/YRB6P5AoFb+
Srptr/N2UPuthumCHPyRlSDbYTdxlZH1Hm1ssSxYHRJ04agQA7YP/0/5HUUYxT4Y
af/BhJyQZrYRrUO732ok/pl9NSG27uww8R4ydb/shlmE504imOFiLTyoSPNz73Xg
j2Y9fxuVyQnhcVeaDDBoNezogA9HtgxzXpoMIUdoN9CL/hF6NUIPOtOEulkMIf6Y
aNjT3up9d8ETc4Yw8g==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:10 2026 by rpki-client