Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145246.roa
File: AS145246.roa (raw, json)
Hash identifier: cm/y6D30CmX/PUBPsP/g0Cx8Q3H2+OOW/0D/AL8kvaE=
Subject key identifier: 96:08:1D:48:DD:73:6F:42:1A:0B:A0:47:37:C0:55:ED:79:36:F7:13
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 40CD92C37928B43451DF4B3379FB85DBEA35FA82
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145246.roa
Signing time: Fri 22 May 2026 04:27:06 +0000
ROA not before: Fri 22 May 2026 04:22:06 +0000
ROA not after: Fri 21 May 2027 04:27:06 +0000
asID: 145246
IP address blocks: 240a:aa24::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:cd:92:c3:79:28:b4:34:51:df:4b:33:79:fb:85:db:ea:35:fa:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:22:06 2026 GMT
Not After : May 21 04:27:06 2027 GMT
Subject: CN=96081D48DD736F421A0BA04737C055ED7936F713
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a8:e9:4a:57:5f:62:b1:d8:1e:97:de:65:75:
71:5f:4e:db:48:90:c4:3e:e1:91:86:48:4b:43:2b:
6d:d0:9c:56:1c:0d:a9:ea:47:53:d1:fe:24:7a:f5:
f7:24:a2:9c:7f:0b:4f:56:d1:03:5b:d1:ff:f3:9d:
9a:47:10:73:d2:bd:e4:ef:f3:29:5a:a6:4e:c5:fd:
2d:92:8c:ca:40:8d:53:fc:c9:34:65:9b:54:49:c5:
18:90:1f:ae:4a:3d:08:ac:6f:f0:d5:96:8d:08:c9:
37:e0:a4:1c:13:4d:99:f2:44:a0:27:23:37:67:d4:
55:3a:bb:8c:34:e4:96:09:e4:b6:5a:02:62:c8:62:
fb:b5:06:9c:c9:47:d2:54:18:db:77:e3:92:71:5f:
06:35:dc:1f:01:26:81:3b:5a:a6:f8:99:9e:1f:c3:
d7:85:57:84:2d:86:9f:e6:15:b7:e4:21:9e:a6:c0:
aa:cf:01:a2:9a:a1:e7:8e:1f:86:e0:45:95:11:68:
ae:2e:fb:f1:8f:3f:18:12:02:17:44:b5:d8:aa:e9:
2a:49:13:5a:aa:83:44:3f:10:98:9b:5f:3c:7a:cf:
d7:9f:a4:8b:85:62:c1:58:13:93:44:2a:17:d3:74:
72:8f:a0:f5:51:39:32:be:79:4a:ce:72:ee:1e:13:
df:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:08:1D:48:DD:73:6F:42:1A:0B:A0:47:37:C0:55:ED:79:36:F7:13
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145246.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa24::/32
Signature Algorithm: sha256WithRSAEncryption
80:74:8e:ea:5c:f1:4f:79:9e:76:d9:77:d6:6c:9f:26:f2:71:
dd:90:3c:6c:44:be:a3:4e:01:91:b1:eb:ed:cc:48:c5:a3:c9:
0c:7d:1a:c9:4a:ae:6e:96:2c:e0:65:6b:fb:31:39:75:7f:14:
63:33:be:fb:7a:f7:15:10:a1:cb:a1:58:4d:ca:87:ac:4c:64:
1a:5f:8c:0e:fd:09:a5:ef:8c:bc:b7:cd:c6:03:bd:77:4d:9c:
2e:eb:65:1e:1c:ea:c6:30:97:e0:04:b2:0c:81:54:a5:47:18:
40:b0:9f:66:f2:6d:70:72:f1:51:15:e6:0d:5b:a0:db:2f:8c:
ea:30:14:d4:ce:b3:02:ec:f9:51:be:3a:79:04:bc:69:0e:29:
89:2b:c1:c3:5c:a4:a4:52:91:e9:df:b2:ce:aa:cf:f4:06:15:
ac:e6:e3:12:d8:3a:97:93:83:1c:9b:86:2a:66:df:9e:92:91:
6a:2e:14:f4:3f:67:fe:73:12:0b:06:4a:46:04:ce:21:0d:27:
da:a2:05:58:a7:5d:1c:c6:ac:e2:e9:0e:41:5e:91:c7:d1:ef:
e1:b6:aa:0e:30:42:60:50:18:62:28:a0:6c:e2:11:9a:e0:72:
79:1a:32:da:ea:8b:ea:24:c5:86:20:f5:e5:34:cd:95:2a:1f:
62:16:07:53
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUQM2Sw3kotDRR30szefuF2+o1+oIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNDIyMDZaFw0yNzA1MjEwNDI3MDZaMDMxMTAvBgNV
BAMTKDk2MDgxRDQ4REQ3MzZGNDIxQTBCQTA0NzM3QzA1NUVENzkzNkY3MTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZqOlKV19isdgel95ldXFfTttI
kMQ+4ZGGSEtDK23QnFYcDanqR1PR/iR69fckopx/C09W0QNb0f/znZpHEHPSveTv
8ylapk7F/S2SjMpAjVP8yTRlm1RJxRiQH65KPQisb/DVlo0IyTfgpBwTTZnyRKAn
Izdn1FU6u4w05JYJ5LZaAmLIYvu1BpzJR9JUGNt345JxXwY13B8BJoE7Wqb4mZ4f
w9eFV4Qthp/mFbfkIZ6mwKrPAaKaoeeOH4bgRZURaK4u+/GPPxgSAhdEtdiq6SpJ
E1qqg0Q/EJibXzx6z9efpIuFYsFYE5NEKhfTdHKPoPVROTK+eUrOcu4eE9/ZAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUlggdSN1zb0IaC6BHN8BV7Xk29xMwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1MjQ2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqqJDANBgkqhkiG9w0BAQsFAAOCAQEAgHSO
6lzxT3medtl31myfJvJx3ZA8bES+o04BkbHr7cxIxaPJDH0ayUqubpYs4GVr+zE5
dX8UYzO++3r3FRChy6FYTcqHrExkGl+MDv0Jpe+MvLfNxgO9d02cLutlHhzqxjCX
4ASyDIFUpUcYQLCfZvJtcHLxURXmDVug2y+M6jAU1M6zAuz5Ub46eQS8aQ4piSvB
w1ykpFKR6d+yzqrP9AYVrObjEtg6l5ODHJuGKmbfnpKRai4U9D9n/nMSCwZKRgTO
IQ0n2qIFWKddHMas4ukOQV6Rx9Hv4baqDjBCYFAYYiigbOIRmuByeRoy2uqL6iTF
hiD15TTNlSofYhYHUw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:40 2026 by rpki-client