Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145221.roa
File: AS145221.roa (raw, json)
Hash identifier: rKPydZWehJJ4dspRpjeK9QF2CQHG1LehYEvfCDoPDWg=
Subject key identifier: 24:27:D1:7B:38:EA:FF:17:4A:8C:53:A0:97:06:41:F1:37:66:CD:E7
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 30E63E24C0CD7BAFD1C23BA16B7F762C93862C65
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145221.roa
Signing time: Mon 25 May 2026 01:20:37 +0000
ROA not before: Mon 25 May 2026 01:15:37 +0000
ROA not after: Mon 24 May 2027 01:20:37 +0000
asID: 145221
IP address blocks: 240a:aa0b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:e6:3e:24:c0:cd:7b:af:d1:c2:3b:a1:6b:7f:76:2c:93:86:2c:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:15:37 2026 GMT
Not After : May 24 01:20:37 2027 GMT
Subject: CN=2427D17B38EAFF174A8C53A0970641F13766CDE7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f8:02:02:25:eb:51:10:c9:69:4d:22:4b:94:
a7:79:6d:f3:48:2b:e3:5d:f4:5c:fc:b1:36:3c:95:
df:89:a1:6c:68:9f:41:ab:d9:27:fe:ee:51:e8:20:
2b:b6:7a:fc:35:c3:31:cc:ec:db:a5:ca:47:be:9e:
2a:ee:f0:0e:00:42:37:c2:f2:14:9c:66:bc:e0:7f:
af:ee:b3:53:2b:ad:47:cc:23:fb:d9:60:5f:9e:ff:
45:ca:32:db:55:92:ed:94:65:73:2d:0f:70:b3:aa:
ff:9b:7c:2a:1c:53:27:38:2d:31:e6:ba:ab:8f:8c:
99:78:fe:ac:92:2c:9c:a9:08:fc:37:e7:71:54:fd:
98:db:c6:9c:16:7a:26:59:8d:32:f5:90:dc:5c:53:
69:67:66:0d:4f:e3:87:0a:f1:3a:b7:0f:f9:f0:8d:
39:a2:22:b7:5b:92:01:5f:fc:ac:a8:fb:ee:4f:1f:
41:3a:bb:8a:a6:bf:81:ed:0b:ec:14:68:ac:59:4b:
5c:30:a5:03:dc:aa:f5:74:35:96:a2:2b:78:01:7f:
2c:18:cf:c4:da:f6:2e:38:6c:ac:5e:32:eb:3a:08:
85:10:31:b4:e7:1b:2c:54:a0:b3:38:00:b2:74:58:
4c:71:8d:a0:ac:30:95:b0:b2:79:78:eb:07:95:2c:
e9:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:27:D1:7B:38:EA:FF:17:4A:8C:53:A0:97:06:41:F1:37:66:CD:E7
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145221.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa0b::/32
Signature Algorithm: sha256WithRSAEncryption
40:6c:38:fa:89:8e:f7:92:9b:65:1c:37:a9:b2:27:3e:37:d8:
ea:1a:d0:5b:79:d8:a4:b9:6a:72:92:1a:e8:af:1e:af:8a:2a:
ec:38:01:96:21:07:5a:40:42:8a:03:0c:31:fc:40:db:df:fa:
e4:8a:cb:55:90:d3:40:29:fb:a1:82:ac:ce:a6:e6:6f:62:70:
f4:b7:f0:5e:b6:1e:3f:98:e4:aa:e5:ad:a0:d4:32:78:07:aa:
53:ec:fa:2f:33:95:d2:2f:b8:4e:a8:aa:48:f4:bf:be:b6:17:
2b:f5:cf:05:3c:d1:ab:25:66:34:73:ba:f7:95:2f:f4:cf:26:
3b:1c:5a:75:f9:1c:bf:35:47:ad:e0:69:5e:6a:de:21:05:86:
db:7c:c6:18:d1:d6:c4:46:82:23:6c:a2:0a:df:80:b5:69:6a:
b9:63:14:50:4c:ed:59:02:0e:8f:1d:1b:f3:ca:9e:9f:13:0b:
44:e8:4c:59:3b:ce:66:d0:83:cf:27:2b:27:e1:ae:c4:66:4e:
de:0c:86:8c:38:4f:a9:82:8f:3a:70:0a:cd:8d:9e:f3:a7:bd:
57:ce:5f:01:61:28:d0:f4:44:9b:4f:2c:41:96:32:ac:23:1a:
f5:01:6e:cf:c3:f6:43:26:22:c2:83:a9:dd:ea:91:f7:75:a7:
63:f0:28:1d
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUMOY+JMDNe6/Rwjuha392LJOGLGUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMTE1MzdaFw0yNzA1MjQwMTIwMzdaMDMxMTAvBgNV
BAMTKDI0MjdEMTdCMzhFQUZGMTc0QThDNTNBMDk3MDY0MUYxMzc2NkNERTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN+AICJetREMlpTSJLlKd5bfNI
K+Nd9Fz8sTY8ld+JoWxon0Gr2Sf+7lHoICu2evw1wzHM7Nulyke+niru8A4AQjfC
8hScZrzgf6/us1MrrUfMI/vZYF+e/0XKMttVku2UZXMtD3Czqv+bfCocUyc4LTHm
uquPjJl4/qySLJypCPw353FU/ZjbxpwWeiZZjTL1kNxcU2lnZg1P44cK8Tq3D/nw
jTmiIrdbkgFf/Kyo++5PH0E6u4qmv4HtC+wUaKxZS1wwpQPcqvV0NZaiK3gBfywY
z8Ta9i44bKxeMus6CIUQMbTnGyxUoLM4ALJ0WExxjaCsMJWwsnl46weVLOn1AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUJCfRezjq/xdKjFOglwZB8TdmzecwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1MjIxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqqCzANBgkqhkiG9w0BAQsFAAOCAQEAQGw4
+omO95KbZRw3qbInPjfY6hrQW3nYpLlqcpIa6K8er4oq7DgBliEHWkBCigMMMfxA
29/65IrLVZDTQCn7oYKszqbmb2Jw9LfwXrYeP5jkquWtoNQyeAeqU+z6LzOV0i+4
TqiqSPS/vrYXK/XPBTzRqyVmNHO695Uv9M8mOxxadfkcvzVHreBpXmreIQWG23zG
GNHWxEaCI2yiCt+AtWlquWMUUEztWQIOjx0b88qenxMLROhMWTvOZtCDzycrJ+Gu
xGZO3gyGjDhPqYKPOnAKzY2e86e9V85fAWEo0PREm08sQZYyrCMa9QFuz8P2QyYi
woOp3eqR93WnY/AoHQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:37 2026 by rpki-client