Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145231.roa
File: AS145231.roa (raw, json)
Hash identifier: Z1PMU7yX4SokANjJNW5jSv7TPL8acaGc9mZN+pOSGZI=
Subject key identifier: 7F:A3:83:9D:F0:F5:05:0E:04:77:CC:63:BB:6F:F1:1C:D4:EC:49:5E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 58E008791A6A9EC86CF7E06A78B19069C02CDA6E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145231.roa
Signing time: Fri 22 May 2026 06:27:47 +0000
ROA not before: Fri 22 May 2026 06:22:47 +0000
ROA not after: Fri 21 May 2027 06:27:47 +0000
asID: 145231
IP address blocks: 240a:aa15::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:e0:08:79:1a:6a:9e:c8:6c:f7:e0:6a:78:b1:90:69:c0:2c:da:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:22:47 2026 GMT
Not After : May 21 06:27:47 2027 GMT
Subject: CN=7FA3839DF0F5050E0477CC63BB6FF11CD4EC495E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:51:9d:fa:b0:0a:93:78:ba:d8:3b:88:d2:e6:
54:a9:17:15:32:76:06:6f:f1:a3:f5:53:62:a9:6a:
f0:06:5b:15:0d:72:90:ca:f3:8a:74:5a:1e:e3:33:
0e:92:8f:46:fc:75:68:b5:f5:22:be:39:23:e4:21:
a7:0a:6a:1a:10:b8:73:26:be:8e:e9:a8:07:04:b0:
28:10:b7:32:8d:26:89:dc:f2:88:f1:3c:fa:fe:8d:
bb:a3:54:da:70:fc:f9:c7:23:01:ae:04:9c:e0:f7:
2d:34:4c:0d:6a:c9:38:7c:1e:77:3e:9f:23:dd:8c:
b1:58:f4:f1:22:ad:e8:19:32:4f:53:ec:fd:75:a3:
08:28:03:64:19:69:37:72:31:34:db:05:c2:3b:d9:
65:b4:24:be:93:b8:f6:4b:c4:59:ca:d4:07:a5:dc:
0e:70:3f:80:ef:47:2c:77:6c:52:a9:a7:e3:82:b7:
14:e3:cf:ff:90:ad:fb:9c:6a:24:45:f4:7d:44:7a:
34:fa:94:d6:a8:a9:17:60:57:4d:e4:b8:fc:a2:10:
23:4c:8f:4b:0c:e8:99:6b:3e:4e:4a:73:f7:2a:84:
30:79:a0:cc:f0:a0:b7:bc:52:00:a6:7b:54:c8:46:
a5:c3:29:00:20:76:92:90:8a:54:48:55:78:74:53:
89:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A3:83:9D:F0:F5:05:0E:04:77:CC:63:BB:6F:F1:1C:D4:EC:49:5E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa15::/32
Signature Algorithm: sha256WithRSAEncryption
ab:7c:94:e0:98:9e:61:0c:e9:2a:5b:1b:40:da:99:05:ea:fc:
66:c9:b1:e2:66:21:5c:28:cd:dc:37:42:8d:f5:83:36:c0:8b:
ea:f6:d1:b5:21:69:9a:d9:cb:6a:17:69:37:74:c5:48:48:6a:
e6:71:66:df:7d:45:b0:d1:17:6f:a1:67:72:ce:e9:91:5a:77:
7f:57:01:12:12:82:55:4a:fc:be:0c:66:92:55:83:08:14:17:
f7:fd:6a:04:e0:f9:98:14:5d:dd:e3:9d:85:00:da:df:6f:7d:
49:4d:4a:05:ca:ac:35:58:8c:3e:d8:90:51:eb:13:6d:8e:e7:
f0:1b:9e:c2:e8:4b:0c:7b:82:61:40:82:33:a5:38:e8:d8:2a:
7b:ab:4a:ec:e7:3d:d4:d3:2f:63:6c:85:e9:f0:ce:24:21:1e:
b0:23:b3:81:7e:e6:05:b4:25:33:02:cb:9e:eb:bb:82:b3:49:
4a:29:65:4c:a4:01:28:ea:b6:b0:12:e5:d4:23:54:d3:e2:1b:
7a:a0:55:69:39:e8:84:72:f5:4c:c7:47:04:0f:95:2e:f2:fc:
f6:0d:3b:48:d4:12:1b:6e:24:34:ea:8e:9d:eb:21:cf:b2:60:
0e:23:9b:7d:36:78:71:1c:23:33:8a:d7:1c:46:2f:0d:31:be:
ee:e6:f8:14
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUWOAIeRpqnshs9+BqeLGQacAs2m4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjIyNDdaFw0yNzA1MjEwNjI3NDdaMDMxMTAvBgNV
BAMTKDdGQTM4MzlERjBGNTA1MEUwNDc3Q0M2M0JCNkZGMTFDRDRFQzQ5NUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoUZ36sAqTeLrYO4jS5lSpFxUy
dgZv8aP1U2KpavAGWxUNcpDK84p0Wh7jMw6Sj0b8dWi19SK+OSPkIacKahoQuHMm
vo7pqAcEsCgQtzKNJonc8ojxPPr+jbujVNpw/PnHIwGuBJzg9y00TA1qyTh8Hnc+
nyPdjLFY9PEiregZMk9T7P11owgoA2QZaTdyMTTbBcI72WW0JL6TuPZLxFnK1Ael
3A5wP4DvRyx3bFKpp+OCtxTjz/+QrfucaiRF9H1EejT6lNaoqRdgV03kuPyiECNM
j0sM6JlrPk5Kc/cqhDB5oMzwoLe8UgCme1TIRqXDKQAgdpKQilRIVXh0U4nnAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUf6ODnfD1BQ4Ed8xju2/xHNTsSV4wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1MjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqqFTANBgkqhkiG9w0BAQsFAAOCAQEAq3yU
4JieYQzpKlsbQNqZBer8Zsmx4mYhXCjN3DdCjfWDNsCL6vbRtSFpmtnLahdpN3TF
SEhq5nFm331FsNEXb6Fncs7pkVp3f1cBEhKCVUr8vgxmklWDCBQX9/1qBOD5mBRd
3eOdhQDa3299SU1KBcqsNViMPtiQUesTbY7n8BuewuhLDHuCYUCCM6U46Ngqe6tK
7Oc91NMvY2yF6fDOJCEesCOzgX7mBbQlMwLLnuu7grNJSillTKQBKOq2sBLl1CNU
0+IbeqBVaTnohHL1TMdHBA+VLvL89g07SNQSG24kNOqOneshz7JgDiObfTZ4cRwj
M4rXHEYvDTG+7ub4FA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:55 2026 by rpki-client