Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145250.roa
File: AS145250.roa (raw, json)
Hash identifier: /rSCQC+Tokw+57ag/3x/AFRxaloNbz6VIoI+4GV+PaQ=
Subject key identifier: 35:6D:C0:04:D1:4E:39:45:EC:72:A9:2C:48:AA:2B:B3:58:D2:24:8C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2F19F446DC887346201658713BC4DA7C53EDFCB2
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145250.roa
Signing time: Fri 22 May 2026 01:50:38 +0000
ROA not before: Fri 22 May 2026 01:45:38 +0000
ROA not after: Fri 21 May 2027 01:50:38 +0000
asID: 145250
IP address blocks: 240a:aa28::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:19:f4:46:dc:88:73:46:20:16:58:71:3b:c4:da:7c:53:ed:fc:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:38 2026 GMT
Not After : May 21 01:50:38 2027 GMT
Subject: CN=356DC004D14E3945EC72A92C48AA2BB358D2248C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:50:a9:c8:36:6c:4c:78:b1:2d:5d:8d:d7:ca:
a8:c1:f9:49:60:1f:a1:be:0a:26:8d:f8:80:36:24:
83:d3:f6:14:1a:26:06:21:de:52:5f:12:18:27:26:
63:46:16:2e:bc:f7:f2:df:e7:ee:71:24:3c:c5:e3:
ea:bb:4e:4b:0b:c4:2d:19:f4:91:57:0c:a6:8b:a5:
a2:4a:4d:89:5c:44:96:8a:07:b9:4f:42:c0:bd:9b:
3b:18:60:9f:dc:04:17:d8:2e:1e:bd:15:27:8b:68:
3d:c3:3e:50:f0:8f:3e:48:13:f5:55:9f:8c:b0:53:
05:35:32:57:88:1a:e9:08:fd:6b:88:f5:07:bb:7f:
f3:2f:d6:5a:2e:48:6f:c4:07:03:e4:a4:1d:3c:0d:
b9:ff:25:a5:6f:a6:d6:dd:7c:d2:17:66:69:ae:3d:
8b:99:17:44:03:23:0d:ec:d3:3a:af:5b:63:e5:ac:
9f:17:01:1e:d9:ab:90:3c:f8:99:fc:8e:a2:e6:cd:
a0:af:5e:65:20:7f:d4:83:49:a7:78:71:35:a8:13:
23:b1:6b:50:4a:f3:c3:53:f5:5d:d0:03:2b:e9:9a:
55:c1:4a:00:34:1d:2c:4e:6c:00:2c:39:15:ac:f5:
89:b1:c0:4d:cb:9b:a3:57:f5:37:a6:04:b8:d1:16:
9f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:6D:C0:04:D1:4E:39:45:EC:72:A9:2C:48:AA:2B:B3:58:D2:24:8C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145250.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa28::/32
Signature Algorithm: sha256WithRSAEncryption
80:c4:09:6b:f7:33:b1:9a:6c:39:8f:44:6b:62:ec:fa:6c:be:
79:75:27:b1:3a:17:ab:ef:16:73:98:ec:93:61:30:81:15:29:
0e:65:17:c2:d8:30:9c:6b:00:b3:41:d3:f3:25:1d:e1:a6:33:
d8:a1:fe:24:2b:78:2c:e0:bc:23:24:ad:b5:65:19:02:a4:79:
95:0e:1b:13:db:58:30:92:dd:3b:75:97:c7:07:ac:77:10:0b:
aa:2e:8b:ae:7b:a9:61:0c:bf:23:6a:af:6d:2d:e4:c2:db:a7:
63:bb:95:22:b0:aa:4a:46:f1:51:82:b5:6d:84:e8:82:ee:ae:
18:e2:43:38:3d:b5:fe:c8:be:77:77:6b:01:fc:67:48:e1:1e:
5d:4e:6a:2c:a9:c1:d7:e0:7f:47:78:88:e4:f4:18:b7:01:0c:
c2:16:f9:79:39:82:aa:ae:59:94:6f:91:36:c6:3d:4e:ab:c5:
76:32:d9:f5:b5:7c:28:7b:31:6a:c7:52:b6:a3:5a:38:5f:fb:
a1:b2:4e:3d:96:bd:65:87:d2:20:e2:20:12:4d:34:22:34:ee:
ff:c6:f0:34:dc:50:9e:e6:16:cd:4c:b3:7c:f6:33:48:b8:9f:
e0:95:26:fd:2d:12:53:af:43:81:7a:98:33:20:ab:b0:77:f1:
a9:39:d7:a3
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIULxn0RtyIc0YgFlhxO8TafFPt/LIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwMTQ1MzhaFw0yNzA1MjEwMTUwMzhaMDMxMTAvBgNV
BAMTKDM1NkRDMDA0RDE0RTM5NDVFQzcyQTkyQzQ4QUEyQkIzNThEMjI0OEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD6UKnINmxMeLEtXY3XyqjB+Ulg
H6G+CiaN+IA2JIPT9hQaJgYh3lJfEhgnJmNGFi689/Lf5+5xJDzF4+q7TksLxC0Z
9JFXDKaLpaJKTYlcRJaKB7lPQsC9mzsYYJ/cBBfYLh69FSeLaD3DPlDwjz5IE/VV
n4ywUwU1MleIGukI/WuI9Qe7f/Mv1louSG/EBwPkpB08Dbn/JaVvptbdfNIXZmmu
PYuZF0QDIw3s0zqvW2PlrJ8XAR7Zq5A8+Jn8jqLmzaCvXmUgf9SDSad4cTWoEyOx
a1BK88NT9V3QAyvpmlXBSgA0HSxObAAsORWs9YmxwE3Lm6NX9TemBLjRFp+jAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUNW3ABNFOOUXscqksSKors1jSJIwwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1MjUwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqqKDANBgkqhkiG9w0BAQsFAAOCAQEAgMQJ
a/czsZpsOY9Ea2Ls+my+eXUnsToXq+8Wc5jsk2EwgRUpDmUXwtgwnGsAs0HT8yUd
4aYz2KH+JCt4LOC8IySttWUZAqR5lQ4bE9tYMJLdO3WXxwesdxALqi6LrnupYQy/
I2qvbS3kwtunY7uVIrCqSkbxUYK1bYTogu6uGOJDOD21/si+d3drAfxnSOEeXU5q
LKnB1+B/R3iI5PQYtwEMwhb5eTmCqq5ZlG+RNsY9TqvFdjLZ9bV8KHsxasdStqNa
OF/7obJOPZa9ZYfSIOIgEk00IjTu/8bwNNxQnuYWzUyzfPYzSLif4JUm/S0SU69D
gXqYMyCrsHfxqTnXow==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:07 2026 by rpki-client