Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145242.roa
File: AS145242.roa (raw, json)
Hash identifier: JY6r3PUU9R20ASjWN27/pVuYMlcp7q8HKvwEMkKbpPo=
Subject key identifier: F4:65:36:66:D0:69:70:D3:35:1C:DE:C6:15:9A:B2:E1:D6:89:7B:B5
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 31C69A0EDD9C0BB486344C5E1A0C13903C204CFB
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145242.roa
Signing time: Mon 25 May 2026 01:20:34 +0000
ROA not before: Mon 25 May 2026 01:15:34 +0000
ROA not after: Mon 24 May 2027 01:20:34 +0000
asID: 145242
IP address blocks: 240a:aa20::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:c6:9a:0e:dd:9c:0b:b4:86:34:4c:5e:1a:0c:13:90:3c:20:4c:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:15:34 2026 GMT
Not After : May 24 01:20:34 2027 GMT
Subject: CN=F4653666D06970D3351CDEC6159AB2E1D6897BB5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:87:f2:58:0b:2e:84:be:db:3b:4c:8c:a9:fc:
03:59:db:f2:66:51:a2:3a:13:92:f4:58:98:ad:28:
36:54:ca:41:4b:e4:8a:6a:93:ee:14:c6:36:41:d7:
c1:ca:40:3f:53:94:31:79:9e:80:77:a9:3a:3b:70:
71:d9:dd:c4:da:49:38:a8:12:90:10:7c:18:36:1f:
52:12:f8:c8:e6:56:0a:85:a2:63:95:b6:fb:df:c4:
06:0b:91:54:fd:7c:07:11:62:0d:be:c9:fc:3e:cd:
d8:ad:29:30:92:fd:da:21:13:62:8e:17:59:71:62:
9a:55:6e:b7:0e:d0:b2:cb:e1:1f:59:d7:b2:b9:8d:
fa:ac:e5:2e:34:e8:2d:b5:82:02:68:3e:5e:26:3b:
23:51:d5:d8:9c:14:3e:5d:79:c4:fa:40:d0:77:ed:
eb:1d:f8:2a:30:5c:b7:0d:8c:60:46:2a:bc:06:8d:
00:6b:51:eb:d4:f6:7e:a8:fa:38:68:b6:42:3d:ab:
cc:c9:93:e9:75:68:ba:18:b6:82:d6:ef:6d:e2:1c:
29:a1:be:29:c1:04:59:ec:9d:88:41:ad:fe:3b:9f:
16:d9:aa:5b:6f:e1:52:c6:15:71:4b:a6:45:07:99:
9d:b7:bf:25:20:b5:f1:0f:83:fb:c6:ec:c1:58:f6:
b9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:65:36:66:D0:69:70:D3:35:1C:DE:C6:15:9A:B2:E1:D6:89:7B:B5
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145242.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa20::/32
Signature Algorithm: sha256WithRSAEncryption
b2:f1:7e:3a:00:81:2d:24:8e:ef:3a:e9:b9:48:99:1c:87:cc:
5b:eb:8a:21:c3:cf:c1:6f:c2:04:72:04:80:d2:a9:94:58:75:
70:32:e0:5a:45:2e:b6:36:80:58:44:ab:84:85:63:38:cc:be:
1f:26:f0:21:25:ae:ec:bf:dc:bc:46:d2:f9:c9:4c:6d:a6:ef:
92:3f:70:ba:55:be:d9:f6:e7:7a:d9:15:b3:8b:e3:e4:09:2b:
c7:c9:89:7d:f8:a2:1f:42:54:0f:12:21:88:41:c1:9c:a3:64:
8f:10:cf:2c:54:3c:fb:c6:e6:d2:aa:38:fe:ed:52:3c:93:49:
a3:43:6c:cf:83:98:c8:f4:10:64:99:15:cc:fd:09:17:99:60:
76:6c:51:7a:52:fa:82:a5:fd:27:2b:5b:ab:26:61:d3:00:dc:
90:0e:5d:fe:45:dc:68:a3:10:fb:92:c0:05:f3:cf:20:cb:4f:
2a:05:6f:c5:d4:3e:46:94:bd:57:74:39:29:56:2c:22:31:18:
e0:66:df:03:bd:8a:fd:b4:41:fa:bf:3b:74:36:a2:0b:47:83:
18:a8:24:ea:9c:4e:46:bd:c5:99:a6:a1:15:9a:b9:10:e7:23:
5c:3d:69:0d:e4:66:cf:22:11:71:b8:8f:13:b2:1a:2e:04:c7:
76:21:c9:44
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUMcaaDt2cC7SGNExeGgwTkDwgTPswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMTE1MzRaFw0yNzA1MjQwMTIwMzRaMDMxMTAvBgNV
BAMTKEY0NjUzNjY2RDA2OTcwRDMzNTFDREVDNjE1OUFCMkUxRDY4OTdCQjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwh/JYCy6Evts7TIyp/ANZ2/Jm
UaI6E5L0WJitKDZUykFL5Ipqk+4UxjZB18HKQD9TlDF5noB3qTo7cHHZ3cTaSTio
EpAQfBg2H1IS+MjmVgqFomOVtvvfxAYLkVT9fAcRYg2+yfw+zditKTCS/dohE2KO
F1lxYppVbrcO0LLL4R9Z17K5jfqs5S406C21ggJoPl4mOyNR1dicFD5decT6QNB3
7esd+CowXLcNjGBGKrwGjQBrUevU9n6o+jhotkI9q8zJk+l1aLoYtoLW723iHCmh
vinBBFnsnYhBrf47nxbZqltv4VLGFXFLpkUHmZ23vyUgtfEPg/vG7MFY9rltAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU9GU2ZtBpcNM1HN7GFZqy4daJe7UwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1MjQyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqqIDANBgkqhkiG9w0BAQsFAAOCAQEAsvF+
OgCBLSSO7zrpuUiZHIfMW+uKIcPPwW/CBHIEgNKplFh1cDLgWkUutjaAWESrhIVj
OMy+HybwISWu7L/cvEbS+clMbabvkj9wulW+2fbnetkVs4vj5Akrx8mJffiiH0JU
DxIhiEHBnKNkjxDPLFQ8+8bm0qo4/u1SPJNJo0Nsz4OYyPQQZJkVzP0JF5lgdmxR
elL6gqX9JytbqyZh0wDckA5d/kXcaKMQ+5LABfPPIMtPKgVvxdQ+RpS9V3Q5KVYs
IjEY4GbfA72K/bRB+r87dDaiC0eDGKgk6pxORr3FmaahFZq5EOcjXD1pDeRmzyIR
cbiPE7IaLgTHdiHJRA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:06 2026 by rpki-client