Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145236.roa
File: AS145236.roa (raw, json)
Hash identifier: kpu7oryKzZCbkclFjK2aA/Vf2bV4Dk/Xq7Owh+uW8eU=
Subject key identifier: 3E:10:B3:9D:80:7C:48:24:56:2E:2D:71:B8:1A:9B:54:C1:15:32:B3
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 46214006BED9CE218D762D577175F2A805428DBB
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145236.roa
Signing time: Fri 22 May 2026 07:32:04 +0000
ROA not before: Fri 22 May 2026 07:27:04 +0000
ROA not after: Fri 21 May 2027 07:32:04 +0000
asID: 145236
IP address blocks: 240a:aa1a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:21:40:06:be:d9:ce:21:8d:76:2d:57:71:75:f2:a8:05:42:8d:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:27:04 2026 GMT
Not After : May 21 07:32:04 2027 GMT
Subject: CN=3E10B39D807C4824562E2D71B81A9B54C11532B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d2:fe:32:70:6a:a6:6e:ff:e3:91:53:3e:3e:
d8:2e:6e:49:83:ab:51:6f:71:e6:e4:a9:8f:69:dd:
cc:8d:fa:32:8b:e0:1c:93:52:fe:51:38:42:72:a2:
7e:79:66:35:4d:74:c8:b4:43:86:9b:d2:ec:f2:60:
6c:9e:dd:f7:ad:93:c3:0d:56:34:2d:95:d7:86:87:
9b:03:8c:45:f7:17:12:14:9d:26:b1:d7:8a:72:0a:
ca:7e:dc:45:90:62:db:4c:42:80:dc:08:f9:e5:fb:
0a:8c:84:d3:df:51:fd:02:99:66:63:f6:c6:02:30:
2d:c9:f7:22:54:14:59:fc:8c:f8:87:9a:f3:c7:73:
53:ff:b4:8e:8e:ee:8c:9d:d7:ac:ac:d1:29:46:fe:
75:f1:ee:64:77:a2:ae:41:9d:93:4b:80:6a:20:c6:
2e:e6:ca:2a:5a:e7:11:bc:37:d5:48:76:7b:34:aa:
2b:74:24:99:86:0f:40:24:99:c0:b4:fb:0a:63:5e:
4b:1d:fb:6e:f9:42:92:ce:03:64:13:94:40:6b:b0:
f2:2b:a2:06:9f:e4:8e:b6:06:60:4c:5e:99:79:07:
3c:dc:22:7e:71:57:36:0b:48:ec:bc:30:db:f4:f2:
88:71:d1:71:c7:60:ca:ae:70:d4:4d:f7:54:8f:be:
6c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:10:B3:9D:80:7C:48:24:56:2E:2D:71:B8:1A:9B:54:C1:15:32:B3
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145236.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa1a::/32
Signature Algorithm: sha256WithRSAEncryption
9c:d1:63:88:ff:6e:99:ff:0a:8a:66:e2:70:dd:0f:d1:eb:57:
83:53:5e:2b:8a:b1:0d:00:ad:9a:2a:69:4c:0c:b5:ed:20:63:
4b:60:71:4f:0f:e3:c4:f1:00:d3:17:08:0f:67:c5:91:ac:9f:
44:13:6e:a2:45:cc:93:00:76:14:2e:f6:fe:54:1d:18:d8:ff:
66:f1:cf:2c:ae:e1:a6:8c:6f:a3:10:5b:0f:96:d0:9d:cc:97:
5e:e7:a4:e7:03:0f:e5:30:f4:ea:16:c5:02:d4:f9:66:51:b1:
25:42:2f:83:78:a9:a0:68:6c:72:96:5e:3c:dd:65:68:e4:9e:
62:8b:ef:e4:30:36:e2:ce:23:2a:53:d7:de:3b:50:42:1e:48:
5c:e7:aa:fb:f4:85:4c:66:d6:95:fe:80:96:cc:f4:b6:3b:a8:
99:ac:15:f5:2c:14:e4:ce:37:3b:dc:40:90:c8:e3:9d:36:7b:
4b:77:29:a5:b3:70:7f:0c:c1:07:5b:ae:f5:a7:2d:10:3e:2c:
d0:6d:a7:b6:fe:3d:a2:03:95:7c:fc:a8:4d:ea:bc:1c:87:84:
ac:4a:6a:78:6d:9c:39:2b:96:79:9e:9f:db:bb:bf:f3:cc:79:
6a:8c:e3:3f:ff:d8:01:92:c5:a0:14:b4:50:87:55:e9:a0:3c:
fd:75:fe:20
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIURiFABr7ZziGNdi1XcXXyqAVCjbswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzI3MDRaFw0yNzA1MjEwNzMyMDRaMDMxMTAvBgNV
BAMTKDNFMTBCMzlEODA3QzQ4MjQ1NjJFMkQ3MUI4MUE5QjU0QzExNTMyQjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt0v4ycGqmbv/jkVM+PtgubkmD
q1FvcebkqY9p3cyN+jKL4ByTUv5ROEJyon55ZjVNdMi0Q4ab0uzyYGye3fetk8MN
VjQtldeGh5sDjEX3FxIUnSax14pyCsp+3EWQYttMQoDcCPnl+wqMhNPfUf0CmWZj
9sYCMC3J9yJUFFn8jPiHmvPHc1P/tI6O7oyd16ys0SlG/nXx7mR3oq5BnZNLgGog
xi7myipa5xG8N9VIdns0qit0JJmGD0AkmcC0+wpjXksd+275QpLOA2QTlEBrsPIr
ogaf5I62BmBMXpl5BzzcIn5xVzYLSOy8MNv08ohx0XHHYMqucNRN91SPvmypAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUPhCznYB8SCRWLi1xuBqbVMEVMrMwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1MjM2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqqGjANBgkqhkiG9w0BAQsFAAOCAQEAnNFj
iP9umf8KimbicN0P0etXg1NeK4qxDQCtmippTAy17SBjS2BxTw/jxPEA0xcID2fF
kayfRBNuokXMkwB2FC72/lQdGNj/ZvHPLK7hpoxvoxBbD5bQncyXXuek5wMP5TD0
6hbFAtT5ZlGxJUIvg3ipoGhscpZePN1laOSeYovv5DA24s4jKlPX3jtQQh5IXOeq
+/SFTGbWlf6Alsz0tjuomawV9SwU5M43O9xAkMjjnTZ7S3cppbNwfwzBB1uu9act
ED4s0G2ntv49ogOVfPyoTeq8HIeErEpqeG2cOSuWeZ6f27u/88x5aozjP//YAZLF
oBS0UIdV6aA8/XX+IA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:49 2026 by rpki-client