Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145223.roa
File: AS145223.roa (raw, json)
Hash identifier: Enm662cbNyjm9qdcmJyk72BApjUdok5Lgbbnzfv0WG0=
Subject key identifier: D5:EB:31:1F:6F:47:72:F3:25:BE:D2:89:AA:C4:78:DD:8E:E2:25:D6
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7FDCA119E189E4FC4CB107601CC2E671DF5F4C70
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145223.roa
Signing time: Tue 26 May 2026 06:12:40 +0000
ROA not before: Tue 26 May 2026 06:07:40 +0000
ROA not after: Tue 25 May 2027 06:12:40 +0000
asID: 145223
IP address blocks: 240a:aa0d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7f:dc:a1:19:e1:89:e4:fc:4c:b1:07:60:1c:c2:e6:71:df:5f:4c:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:07:40 2026 GMT
Not After : May 25 06:12:40 2027 GMT
Subject: CN=D5EB311F6F4772F325BED289AAC478DD8EE225D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a2:8d:7f:c8:f3:33:04:fd:fb:62:1e:cb:7b:
dc:f6:b1:07:d7:dc:d3:c1:03:8e:69:54:1d:49:2d:
fb:67:22:09:e5:02:93:f0:69:dd:46:00:6a:d9:ab:
83:98:38:4f:6f:60:6a:e2:32:04:26:17:77:fc:ce:
63:43:52:a2:ed:cc:d9:2a:9c:32:22:ae:7c:02:37:
e7:cf:97:c8:ac:79:50:11:29:b3:d7:13:50:93:67:
aa:8e:cc:d2:c3:cf:37:af:7e:4f:d5:64:49:2f:b4:
60:f7:58:c1:0d:f2:5b:5d:6b:f0:27:61:1e:9e:f6:
64:c7:75:46:e8:e0:71:3c:9a:2a:b0:dd:3f:30:0f:
79:78:36:03:4e:f2:42:91:ce:c3:70:65:d3:df:cd:
27:c3:e4:bf:aa:6a:ae:44:93:7d:52:13:3b:85:3c:
54:40:a0:57:25:f1:02:c9:16:ea:0e:00:92:79:71:
bd:ec:55:c0:d1:bb:8c:32:48:33:76:ae:28:71:61:
24:f5:91:a6:6c:cb:e3:6e:48:ac:67:85:fa:84:48:
63:e7:a8:89:4f:e2:3e:be:e2:6b:c6:39:b3:d5:76:
e4:ea:a7:75:6b:58:2c:43:a3:90:a0:7f:c4:b5:a4:
f8:a7:61:f1:8a:45:13:ee:4b:18:cd:fc:9a:04:3d:
2c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:EB:31:1F:6F:47:72:F3:25:BE:D2:89:AA:C4:78:DD:8E:E2:25:D6
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145223.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa0d::/32
Signature Algorithm: sha256WithRSAEncryption
6c:9c:2c:7b:7e:ec:e7:ac:0a:76:2b:ed:ff:e4:58:8b:b4:0c:
02:b8:f8:b7:aa:89:b8:d1:bc:27:f0:cd:ad:d0:82:28:b9:8c:
98:ac:7b:3c:e6:e4:bc:95:29:ef:ca:75:07:ae:99:d3:94:c9:
04:e1:d5:d9:cd:f9:e4:f7:f7:8c:ab:e1:41:1c:93:6d:b3:09:
e0:85:59:63:0c:32:39:94:be:92:4a:1d:a3:b9:1e:7f:7d:fc:
56:82:c5:55:4b:04:cc:11:df:21:7c:40:0f:31:cf:9e:0f:f4:
71:f2:b0:26:f8:6c:c0:3e:76:55:47:ca:dc:20:1e:10:de:99:
f2:5d:95:af:95:a2:20:74:0b:a6:f4:d1:ba:60:4d:8f:b4:9b:
a4:75:a1:1c:fc:8c:a5:56:eb:1d:cf:dc:da:72:26:4f:c2:b1:
02:b2:25:8a:23:bc:24:69:17:d1:f2:aa:25:70:fc:89:fc:5d:
4a:14:ad:0d:7d:60:43:98:76:e1:96:29:f5:ab:95:27:48:95:
e3:2d:c3:4b:53:18:20:8e:c1:4e:0f:f5:fc:6f:d1:1e:68:84:
eb:b6:b8:e1:4f:ca:6f:5c:58:d5:f3:65:b0:84:60:e0:b6:56:
eb:1d:38:fc:ed:2f:3b:4a:c9:9d:66:0e:28:a8:2c:f8:f9:3f:
51:cb:78:36
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUf9yhGeGJ5PxMsQdgHMLmcd9fTHAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwNjA3NDBaFw0yNzA1MjUwNjEyNDBaMDMxMTAvBgNV
BAMTKEQ1RUIzMTFGNkY0NzcyRjMyNUJFRDI4OUFBQzQ3OEREOEVFMjI1RDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGoo1/yPMzBP37Yh7Le9z2sQfX
3NPBA45pVB1JLftnIgnlApPwad1GAGrZq4OYOE9vYGriMgQmF3f8zmNDUqLtzNkq
nDIirnwCN+fPl8iseVARKbPXE1CTZ6qOzNLDzzevfk/VZEkvtGD3WMEN8ltda/An
YR6e9mTHdUbo4HE8miqw3T8wD3l4NgNO8kKRzsNwZdPfzSfD5L+qaq5Ek31SEzuF
PFRAoFcl8QLJFuoOAJJ5cb3sVcDRu4wySDN2rihxYST1kaZsy+NuSKxnhfqESGPn
qIlP4j6+4mvGObPVduTqp3VrWCxDo5Cgf8S1pPinYfGKRRPuSxjN/JoEPSw/AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU1esxH29HcvMlvtKJqsR43Y7iJdYwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1MjIzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqqDTANBgkqhkiG9w0BAQsFAAOCAQEAbJws
e37s56wKdivt/+RYi7QMArj4t6qJuNG8J/DNrdCCKLmMmKx7PObkvJUp78p1B66Z
05TJBOHV2c355Pf3jKvhQRyTbbMJ4IVZYwwyOZS+kkodo7kef338VoLFVUsEzBHf
IXxADzHPng/0cfKwJvhswD52VUfK3CAeEN6Z8l2Vr5WiIHQLpvTRumBNj7SbpHWh
HPyMpVbrHc/c2nImT8KxArIliiO8JGkX0fKqJXD8ifxdShStDX1gQ5h24ZYp9auV
J0iV4y3DS1MYII7BTg/1/G/RHmiE67a44U/Kb1xY1fNlsIRg4LZW6x04/O0vO0rJ
nWYOKKgs+Pk/Uct4Ng==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:11 2026 by rpki-client