Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145238.roa
File: AS145238.roa (raw, json)
Hash identifier: 8Ii3m/+Oxr/f+IlmVYRHycR1kQC+tCbJgu5Z1EnUcXs=
Subject key identifier: F6:2E:2C:B5:C1:84:1E:68:8F:A2:D3:D5:CF:AB:7E:03:F4:64:C6:55
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3B09082AA7D14D95F69C78428C3C1E4AD447C115
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145238.roa
Signing time: Fri 22 May 2026 01:50:17 +0000
ROA not before: Fri 22 May 2026 01:45:17 +0000
ROA not after: Fri 21 May 2027 01:50:17 +0000
asID: 145238
IP address blocks: 240a:aa1c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:09:08:2a:a7:d1:4d:95:f6:9c:78:42:8c:3c:1e:4a:d4:47:c1:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:17 2026 GMT
Not After : May 21 01:50:17 2027 GMT
Subject: CN=F62E2CB5C1841E688FA2D3D5CFAB7E03F464C655
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:f4:be:d9:1b:0e:59:89:2e:0f:73:0e:3e:5f:
6a:62:15:72:c0:31:c5:ca:93:85:ea:34:07:16:ab:
32:c4:f3:51:d2:7e:33:9a:0c:88:74:1a:b4:f3:67:
9c:79:1c:88:78:7a:8b:e5:6d:7d:1e:77:b1:1f:c5:
90:22:5e:b0:47:b6:a4:ea:26:89:a0:c3:e2:18:25:
8b:28:b6:21:c3:51:e8:f6:c9:8b:69:7a:91:17:ba:
53:99:90:f1:f4:e0:f8:84:d3:77:f7:eb:b9:24:98:
db:5a:cb:9b:41:5e:fd:97:7a:9b:67:76:69:40:3b:
4a:63:a0:87:4e:f2:a0:68:4c:3d:2f:1b:3d:e1:98:
11:ab:92:3a:1f:9d:9f:5f:10:d6:1b:84:a4:86:89:
31:42:fa:be:1a:06:45:e0:52:4a:43:60:69:a4:4d:
6b:86:3c:3e:e6:0d:f2:eb:36:45:a7:02:26:11:38:
07:42:b7:34:96:2c:e5:c5:83:66:cc:03:39:c5:bb:
60:9d:21:fb:be:68:6d:b4:c3:41:2e:54:aa:e6:d2:
59:b7:fe:83:90:53:a1:1d:e5:36:67:13:20:30:00:
89:8e:2b:7d:c6:82:d2:b4:fc:d1:93:3f:c0:d2:ef:
ed:1b:4a:6e:8e:b4:2d:37:fa:e2:a4:1a:99:1c:4e:
d7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:2E:2C:B5:C1:84:1E:68:8F:A2:D3:D5:CF:AB:7E:03:F4:64:C6:55
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa1c::/32
Signature Algorithm: sha256WithRSAEncryption
a9:71:70:2e:df:14:d5:2b:ae:a7:d8:cf:fc:e4:fe:6a:43:3b:
d2:28:5d:e1:7b:d7:39:b2:a8:75:b2:ce:e5:9e:1d:36:8d:3a:
27:15:c1:e5:5e:ff:c0:1c:61:90:8c:42:77:e7:c6:44:e8:41:
42:58:32:0a:b4:de:ba:d8:d5:27:4f:02:c5:09:9d:79:05:12:
76:89:84:9c:e5:46:fe:5d:6c:50:17:b6:0f:52:10:96:f2:77:
9d:be:fd:0a:1c:1d:21:29:1b:78:67:13:ba:a3:c2:61:df:d7:
12:f2:65:49:30:1b:2c:4d:10:4b:2c:e4:23:87:79:d4:a9:82:
20:5b:7b:a6:64:7e:f4:e2:55:aa:6f:59:80:58:b7:c0:6e:17:
70:71:7f:fa:83:88:d0:44:48:d3:6b:56:78:73:d5:46:92:9e:
9b:e5:8a:1b:1f:47:04:72:ff:1c:46:8c:a8:66:70:bc:bf:4f:
be:8d:55:11:d3:5a:5a:25:94:5b:62:06:fb:98:8a:13:32:f7:
98:5b:88:ef:6a:b7:02:90:a0:2c:59:58:29:97:57:a0:95:b9:
2c:39:63:e4:62:0e:41:16:65:13:62:d9:5a:69:1f:48:b3:f6:
b9:4f:ba:cd:6a:8f:d2:81:b9:b1:50:68:7a:2a:39:6e:47:27:
07:09:87:56
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUOwkIKqfRTZX2nHhCjDweStRHwRUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwMTQ1MTdaFw0yNzA1MjEwMTUwMTdaMDMxMTAvBgNV
BAMTKEY2MkUyQ0I1QzE4NDFFNjg4RkEyRDNENUNGQUI3RTAzRjQ2NEM2NTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+9L7ZGw5ZiS4Pcw4+X2piFXLA
McXKk4XqNAcWqzLE81HSfjOaDIh0GrTzZ5x5HIh4eovlbX0ed7EfxZAiXrBHtqTq
Jomgw+IYJYsotiHDUej2yYtpepEXulOZkPH04PiE03f367kkmNtay5tBXv2Xeptn
dmlAO0pjoIdO8qBoTD0vGz3hmBGrkjofnZ9fENYbhKSGiTFC+r4aBkXgUkpDYGmk
TWuGPD7mDfLrNkWnAiYROAdCtzSWLOXFg2bMAznFu2CdIfu+aG20w0EuVKrm0lm3
/oOQU6Ed5TZnEyAwAImOK33GgtK0/NGTP8DS7+0bSm6OtC03+uKkGpkcTteFAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU9i4stcGEHmiPotPVz6t+A/RkxlUwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1MjM4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqqHDANBgkqhkiG9w0BAQsFAAOCAQEAqXFw
Lt8U1Suup9jP/OT+akM70ihd4XvXObKodbLO5Z4dNo06JxXB5V7/wBxhkIxCd+fG
ROhBQlgyCrTeutjVJ08CxQmdeQUSdomEnOVG/l1sUBe2D1IQlvJ3nb79ChwdISkb
eGcTuqPCYd/XEvJlSTAbLE0QSyzkI4d51KmCIFt7pmR+9OJVqm9ZgFi3wG4XcHF/
+oOI0ERI02tWeHPVRpKem+WKGx9HBHL/HEaMqGZwvL9Pvo1VEdNaWiWUW2IG+5iK
EzL3mFuI72q3ApCgLFlYKZdXoJW5LDlj5GIOQRZlE2LZWmkfSLP2uU+6zWqP0oG5
sVBoeio5bkcnBwmHVg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:21 2026 by rpki-client