Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145208.roa
File: AS145208.roa (raw, json)
Hash identifier: CuQu6xfflOAeUnp45/aJmCkUT5sF6PjP+DC4mN0AzhM=
Subject key identifier: 3F:2B:83:96:45:2B:FD:24:A9:69:1A:10:8A:18:50:78:F2:35:2E:AF
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 70E3DFE8FAFFAEA181E082B9555FBD3C4B263B7C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145208.roa
Signing time: Fri 22 May 2026 06:05:25 +0000
ROA not before: Fri 22 May 2026 06:00:25 +0000
ROA not after: Fri 21 May 2027 06:05:25 +0000
asID: 145208
IP address blocks: 240a:a9fe::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:e3:df:e8:fa:ff:ae:a1:81:e0:82:b9:55:5f:bd:3c:4b:26:3b:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:25 2026 GMT
Not After : May 21 06:05:25 2027 GMT
Subject: CN=3F2B8396452BFD24A9691A108A185078F2352EAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:21:ea:a5:37:fe:4c:a3:0f:df:6b:a1:12:b2:
62:d1:6e:7e:3f:35:4a:fa:54:fa:42:cc:3c:05:ae:
cd:ae:a2:85:60:52:a9:c4:39:c6:5e:96:6d:37:0f:
d1:26:a8:c0:b9:6a:14:b1:42:c1:29:e2:bb:46:b4:
49:88:17:bb:ff:d6:c5:35:8b:89:e2:3a:e7:c3:7c:
7f:68:f6:4a:0d:4a:00:90:03:1e:fc:42:d8:48:42:
d6:8b:b4:6b:63:cf:89:4a:0e:a7:74:9d:92:aa:ac:
f1:e9:d6:51:07:e0:e7:cf:6a:ff:cd:6e:83:c3:ee:
3c:bb:6f:cb:9b:a3:c1:0d:3e:66:30:5b:8e:ea:a7:
35:d3:37:2a:06:d9:d4:54:9e:99:8f:7c:eb:3c:c6:
2e:e8:73:75:ce:9d:cb:5a:c6:15:e2:e7:12:a3:02:
a2:0b:ee:da:dc:c3:0a:17:42:cd:4a:b0:e1:37:48:
b5:c9:7a:32:a8:2e:bf:ea:ac:11:4f:cc:70:8b:02:
bd:6b:0a:94:1c:95:23:42:74:d9:7f:2a:56:43:4b:
4f:ed:54:79:2c:b7:f6:fc:06:f7:ff:58:ca:72:95:
1a:38:d6:c4:85:93:41:2d:02:61:6c:2b:99:34:94:
57:13:8f:8c:1b:db:ba:4a:2c:09:83:63:0e:d6:35:
00:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:2B:83:96:45:2B:FD:24:A9:69:1A:10:8A:18:50:78:F2:35:2E:AF
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145208.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a9fe::/32
Signature Algorithm: sha256WithRSAEncryption
a3:15:e4:31:b2:4a:88:84:17:9a:a5:69:e1:f4:1b:3d:d1:41:
6a:6d:4d:5c:a8:d8:cd:23:d2:87:10:4a:e2:98:e7:7c:e0:23:
86:81:90:64:d6:52:14:e6:4e:b1:a8:95:01:9b:db:07:eb:b3:
7c:13:a3:62:c6:98:c7:12:1e:a5:b6:3b:8d:83:5f:3b:9d:19:
cc:e2:c3:7f:95:4b:d7:55:f5:1f:1f:c0:ef:2e:b8:80:22:43:
bf:7b:64:d9:61:27:66:6a:33:d7:14:d0:52:98:05:57:9b:cb:
cb:f8:6e:a9:fc:14:e5:26:9e:b6:61:ad:92:0b:81:40:d9:1d:
43:d7:5c:98:5b:5d:7e:ea:09:c9:49:07:0a:a5:94:71:9b:04:
8a:d6:4c:d9:42:e7:f8:d9:14:ac:86:88:fe:cf:aa:0e:bd:66:
4b:8b:2a:48:62:1c:b3:9b:3f:6e:16:a8:26:78:38:30:4a:84:
bb:71:7f:c8:d1:30:6e:1d:8d:3e:f1:39:32:07:6f:2a:86:6d:
3c:fd:2b:00:c9:8e:41:9c:c6:67:f1:62:b7:93:10:5c:20:34:
a3:77:ba:a4:5b:50:8e:6f:ec:88:b1:26:e6:5b:3a:5b:3d:5b:
a3:e3:3d:36:b2:87:75:b3:6d:13:1d:26:6c:a8:b3:04:a7:13:
1a:46:4a:13
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUcOPf6Pr/rqGB4IK5VV+9PEsmO3wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjAwMjVaFw0yNzA1MjEwNjA1MjVaMDMxMTAvBgNV
BAMTKDNGMkI4Mzk2NDUyQkZEMjRBOTY5MUExMDhBMTg1MDc4RjIzNTJFQUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmIeqlN/5Mow/fa6ESsmLRbn4/
NUr6VPpCzDwFrs2uooVgUqnEOcZelm03D9EmqMC5ahSxQsEp4rtGtEmIF7v/1sU1
i4niOufDfH9o9koNSgCQAx78QthIQtaLtGtjz4lKDqd0nZKqrPHp1lEH4OfPav/N
boPD7jy7b8ubo8ENPmYwW47qpzXTNyoG2dRUnpmPfOs8xi7oc3XOnctaxhXi5xKj
AqIL7trcwwoXQs1KsOE3SLXJejKoLr/qrBFPzHCLAr1rCpQclSNCdNl/KlZDS0/t
VHkst/b8Bvf/WMpylRo41sSFk0EtAmFsK5k0lFcTj4wb27pKLAmDYw7WNQAbAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUPyuDlkUr/SSpaRoQihhQePI1Lq8wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1MjA4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqp/jANBgkqhkiG9w0BAQsFAAOCAQEAoxXk
MbJKiIQXmqVp4fQbPdFBam1NXKjYzSPShxBK4pjnfOAjhoGQZNZSFOZOsaiVAZvb
B+uzfBOjYsaYxxIepbY7jYNfO50ZzOLDf5VL11X1Hx/A7y64gCJDv3tk2WEnZmoz
1xTQUpgFV5vLy/huqfwU5SaetmGtkguBQNkdQ9dcmFtdfuoJyUkHCqWUcZsEitZM
2ULn+NkUrIaI/s+qDr1mS4sqSGIcs5s/bhaoJng4MEqEu3F/yNEwbh2NPvE5Mgdv
KoZtPP0rAMmOQZzGZ/Fit5MQXCA0o3e6pFtQjm/siLEm5ls6Wz1bo+M9NrKHdbNt
Ex0mbKizBKcTGkZKEw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:30 2026 by rpki-client