Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145195.roa
File: AS145195.roa (raw, json)
Hash identifier: V9C4JLDVuRJdhxREdI9RqBOO3PLu6XLKSdfD1Py8Hag=
Subject key identifier: 37:8A:4B:8B:81:F4:BE:45:37:F6:3A:DC:30:9B:C9:DB:78:73:D7:36
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5062E836A3A7D6394A4F41E2D3A2867A86C4B441
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145195.roa
Signing time: Mon 25 May 2026 06:28:46 +0000
ROA not before: Mon 25 May 2026 06:23:46 +0000
ROA not after: Mon 24 May 2027 06:28:46 +0000
asID: 145195
IP address blocks: 240a:a9f1::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:62:e8:36:a3:a7:d6:39:4a:4f:41:e2:d3:a2:86:7a:86:c4:b4:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:46 2026 GMT
Not After : May 24 06:28:46 2027 GMT
Subject: CN=378A4B8B81F4BE4537F63ADC309BC9DB7873D736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:aa:c5:8c:7f:fe:b2:9b:f1:fd:9f:23:13:4f:
26:d2:57:e4:7c:25:03:4f:e1:f5:92:ba:fc:96:b5:
7f:9d:17:0c:8d:b1:f9:80:6f:7d:26:38:02:46:c5:
44:cb:23:53:d9:f1:4f:66:12:65:b2:a8:23:04:7e:
7b:22:0f:3c:49:c3:3c:49:19:b2:34:9e:15:ce:98:
a4:9c:3a:e4:03:22:cf:72:e5:cc:9f:fc:53:9b:9b:
1e:e0:b9:82:22:9e:c2:91:50:ca:77:96:25:25:a9:
86:ea:88:59:0a:e0:de:e9:cd:6d:26:df:d9:fa:2a:
c2:60:3d:8b:6b:aa:cb:21:0e:62:e6:d6:51:16:0b:
80:bd:6f:39:21:24:ee:a2:cd:cb:dc:29:de:d0:78:
2d:3a:61:19:d0:d4:51:2e:88:60:65:7f:71:35:26:
78:45:9f:aa:2e:f1:24:84:d3:f4:66:7d:13:04:92:
b4:0a:7e:b0:14:1f:4e:b3:30:43:f4:19:d4:0f:44:
2b:44:8f:47:c0:b0:63:8e:25:21:fb:af:46:8c:9f:
27:86:07:3f:dd:77:09:37:70:b2:29:6f:80:c1:b1:
cd:b0:31:68:41:a4:1a:b0:67:07:b8:ab:8b:5e:de:
38:a4:7b:4d:3f:ce:b1:1d:59:5c:a5:42:ce:6d:19:
e5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:8A:4B:8B:81:F4:BE:45:37:F6:3A:DC:30:9B:C9:DB:78:73:D7:36
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145195.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a9f1::/32
Signature Algorithm: sha256WithRSAEncryption
7f:6c:c3:79:66:65:a1:bc:c1:a5:f5:e7:94:97:a2:25:e7:8b:
3a:0c:87:ee:1b:e0:01:fc:36:cf:68:32:d2:f5:2a:ca:38:cf:
08:45:f7:f1:bd:29:c3:95:79:63:32:e3:b4:54:c4:ed:02:c3:
e4:41:85:55:ba:3f:52:4a:b2:ec:a0:05:56:08:77:cd:93:ea:
ba:46:cf:6c:d5:ca:37:68:c8:93:85:fa:c6:bd:e2:e5:54:ec:
90:73:f9:e8:69:ea:05:c0:d5:83:82:a1:7c:d4:85:34:57:87:
04:11:b2:b5:f0:93:f8:8f:3e:f5:77:d8:49:b6:cb:99:15:c7:
d1:b0:55:1b:83:be:54:f8:1d:1a:b7:7e:11:ad:b9:e8:bd:40:
a6:eb:3f:e9:8f:19:bf:55:1d:17:e8:03:18:c5:7e:2d:c8:30:
5c:2e:61:e3:aa:ff:83:7a:d0:c3:c1:17:e4:fa:54:55:6a:28:
8a:e7:89:ae:29:dc:11:78:d9:5a:2a:fa:2e:b2:c3:52:aa:6b:
03:bb:c1:c3:8f:51:ab:20:62:62:ee:18:95:ce:49:99:8f:b6:
1d:bb:c8:7f:d2:fa:ac:c8:1e:a3:78:1e:67:de:9d:68:43:35:
2e:aa:ae:4d:36:a9:ec:6e:3d:1c:e5:29:f5:ea:86:6e:46:8c:
cd:9f:5b:6b
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUUGLoNqOn1jlKT0Hi06KGeobEtEEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwNjIzNDZaFw0yNzA1MjQwNjI4NDZaMDMxMTAvBgNV
BAMTKDM3OEE0QjhCODFGNEJFNDUzN0Y2M0FEQzMwOUJDOURCNzg3M0Q3MzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0qsWMf/6ym/H9nyMTTybSV+R8
JQNP4fWSuvyWtX+dFwyNsfmAb30mOAJGxUTLI1PZ8U9mEmWyqCMEfnsiDzxJwzxJ
GbI0nhXOmKScOuQDIs9y5cyf/FObmx7guYIinsKRUMp3liUlqYbqiFkK4N7pzW0m
39n6KsJgPYtrqsshDmLm1lEWC4C9bzkhJO6izcvcKd7QeC06YRnQ1FEuiGBlf3E1
JnhFn6ou8SSE0/RmfRMEkrQKfrAUH06zMEP0GdQPRCtEj0fAsGOOJSH7r0aMnyeG
Bz/ddwk3cLIpb4DBsc2wMWhBpBqwZwe4q4te3jike00/zrEdWVylQs5tGeWBAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUN4pLi4H0vkU39jrcMJvJ23hz1zYwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1MTk1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqp8TANBgkqhkiG9w0BAQsFAAOCAQEAf2zD
eWZlobzBpfXnlJeiJeeLOgyH7hvgAfw2z2gy0vUqyjjPCEX38b0pw5V5YzLjtFTE
7QLD5EGFVbo/Ukqy7KAFVgh3zZPqukbPbNXKN2jIk4X6xr3i5VTskHP56GnqBcDV
g4KhfNSFNFeHBBGytfCT+I8+9XfYSbbLmRXH0bBVG4O+VPgdGrd+Ea256L1Apus/
6Y8Zv1UdF+gDGMV+LcgwXC5h46r/g3rQw8EX5PpUVWooiueJrincEXjZWir6LrLD
UqprA7vBw49RqyBiYu4Ylc5JmY+2HbvIf9L6rMgeo3geZ96daEM1LqquTTap7G49
HOUp9eqGbkaMzZ9baw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:41 2026 by rpki-client