Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145244.roa
File: AS145244.roa (raw, json)
Hash identifier: nOXC9REJ4qtaej6TT+EghT4ZmKKsuA1wv36XARsczEc=
Subject key identifier: 5E:7E:27:0E:36:6A:E1:92:0B:48:9B:A5:00:9B:F8:34:CA:6D:08:21
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0BE92C75EB857C0753805B1142F8F4643EF1F3D1
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145244.roa
Signing time: Tue 26 May 2026 01:13:18 +0000
ROA not before: Tue 26 May 2026 01:08:18 +0000
ROA not after: Tue 25 May 2027 01:13:18 +0000
asID: 145244
IP address blocks: 240a:aa22::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:e9:2c:75:eb:85:7c:07:53:80:5b:11:42:f8:f4:64:3e:f1:f3:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:08:18 2026 GMT
Not After : May 25 01:13:18 2027 GMT
Subject: CN=5E7E270E366AE1920B489BA5009BF834CA6D0821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8a:a2:1d:a9:ff:7a:12:cf:a1:05:fb:6c:48:
ef:e1:03:1c:14:96:6c:08:87:0b:06:c2:ba:57:7b:
c6:9e:59:04:1c:cd:1a:a8:a0:37:a9:2f:d7:69:38:
69:2e:e2:e1:3f:ce:f3:53:cf:74:0a:14:8f:e8:4e:
7b:23:55:32:b9:90:98:4b:f0:92:b4:00:0e:41:28:
ce:ca:36:1a:dd:b1:b3:50:09:e2:71:dc:73:86:d7:
20:fe:ac:d4:39:df:55:61:17:e7:32:e7:78:4b:a2:
58:22:a3:98:d6:02:7f:06:cc:0a:ff:5a:35:b5:5c:
2e:68:05:24:0a:ad:94:50:7e:d4:a0:1d:c5:36:4a:
35:d5:52:a6:67:26:b5:fb:a2:2c:1b:be:ff:d6:4e:
00:e6:35:1f:b7:ae:9b:5b:58:d9:70:20:01:17:09:
08:4c:89:8c:8f:eb:1e:32:e3:f4:cf:44:97:28:94:
6b:62:1f:63:26:95:78:0e:4c:b8:80:33:e8:b6:57:
8c:2f:2c:90:3f:42:6c:ca:f3:34:fa:24:b9:14:f7:
b8:58:d1:e3:cb:f1:d4:3d:2a:09:3e:09:d8:4c:f1:
66:2d:c1:d1:08:c8:bd:76:38:70:46:74:d5:54:d6:
0b:b0:32:aa:da:ed:63:48:b2:db:fe:0e:82:ff:8c:
83:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:7E:27:0E:36:6A:E1:92:0B:48:9B:A5:00:9B:F8:34:CA:6D:08:21
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145244.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa22::/32
Signature Algorithm: sha256WithRSAEncryption
3a:f4:04:89:8c:f2:1a:9e:c9:44:74:2d:93:b8:6d:f4:b6:87:
f6:f0:50:68:a3:77:87:82:01:b8:ad:c4:72:7a:7e:dc:9f:a7:
92:c0:82:76:96:f4:cf:a7:d1:1b:3b:fc:75:1e:b6:12:fe:d8:
ac:0a:18:13:3b:f5:a2:2e:74:6f:42:7e:b1:54:d3:a8:00:59:
4b:96:61:f3:4f:0e:61:33:16:f1:70:f3:d0:e2:62:7b:4a:14:
07:fe:43:9d:d0:ca:19:19:d9:13:5b:54:fc:9b:cb:1b:bd:e0:
e2:d7:0b:d4:48:a9:4e:65:b4:a7:e0:86:ce:a2:58:62:7c:ff:
98:3f:d4:e2:7f:c2:f1:de:78:40:8f:ff:8d:d2:a1:19:cf:76:
52:97:85:60:ec:c8:d0:32:d9:f1:7c:90:96:a0:90:d9:91:a4:
27:42:18:69:5f:07:f8:e4:9e:a6:f8:22:a7:14:29:ad:d3:1b:
ac:64:c9:f1:54:1d:78:30:83:32:0f:44:5b:19:85:2e:f9:4a:
62:ef:18:81:48:57:25:f4:37:73:0d:10:f8:d0:73:39:23:91:
25:f6:f3:ce:dd:be:21:e1:2f:e9:10:2a:cc:85:c0:40:92:72:
ce:80:7a:14:b6:02:ba:c2:45:90:48:ce:d5:03:e6:32:82:43:
29:07:dc:22
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUC+ksdeuFfAdTgFsRQvj0ZD7x89EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMTA4MThaFw0yNzA1MjUwMTEzMThaMDMxMTAvBgNV
BAMTKDVFN0UyNzBFMzY2QUUxOTIwQjQ4OUJBNTAwOUJGODM0Q0E2RDA4MjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6iqIdqf96Es+hBftsSO/hAxwU
lmwIhwsGwrpXe8aeWQQczRqooDepL9dpOGku4uE/zvNTz3QKFI/oTnsjVTK5kJhL
8JK0AA5BKM7KNhrdsbNQCeJx3HOG1yD+rNQ531VhF+cy53hLolgio5jWAn8GzAr/
WjW1XC5oBSQKrZRQftSgHcU2SjXVUqZnJrX7oiwbvv/WTgDmNR+3rptbWNlwIAEX
CQhMiYyP6x4y4/TPRJcolGtiH2MmlXgOTLiAM+i2V4wvLJA/QmzK8zT6JLkU97hY
0ePL8dQ9Kgk+CdhM8WYtwdEIyL12OHBGdNVU1guwMqra7WNIstv+DoL/jINpAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUXn4nDjZq4ZILSJulAJv4NMptCCEwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1MjQ0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqqIjANBgkqhkiG9w0BAQsFAAOCAQEAOvQE
iYzyGp7JRHQtk7ht9LaH9vBQaKN3h4IBuK3Ecnp+3J+nksCCdpb0z6fRGzv8dR62
Ev7YrAoYEzv1oi50b0J+sVTTqABZS5Zh808OYTMW8XDz0OJie0oUB/5DndDKGRnZ
E1tU/JvLG73g4tcL1EipTmW0p+CGzqJYYnz/mD/U4n/C8d54QI//jdKhGc92UpeF
YOzI0DLZ8XyQlqCQ2ZGkJ0IYaV8H+OSepvgipxQprdMbrGTJ8VQdeDCDMg9EWxmF
LvlKYu8YgUhXJfQ3cw0Q+NBzOSORJfbzzt2+IeEv6RAqzIXAQJJyzoB6FLYCusJF
kEjO1QPmMoJDKQfcIg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:54 2026 by rpki-client