Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145253.roa
File: AS145253.roa (raw, json)
Hash identifier: S3H78KzPosG0Xo9dF2CA4KnUMxNq6FfjphezT+37maE=
Subject key identifier: E5:20:36:21:7E:5D:79:CC:BF:B3:1D:CB:E1:C6:9F:66:2C:B4:36:CE
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3694324D33D48016ADA73C1372498C8797F6F6BE
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145253.roa
Signing time: Fri 22 May 2026 01:50:15 +0000
ROA not before: Fri 22 May 2026 01:45:15 +0000
ROA not after: Fri 21 May 2027 01:50:15 +0000
asID: 145253
IP address blocks: 240a:aa2b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:94:32:4d:33:d4:80:16:ad:a7:3c:13:72:49:8c:87:97:f6:f6:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:15 2026 GMT
Not After : May 21 01:50:15 2027 GMT
Subject: CN=E52036217E5D79CCBFB31DCBE1C69F662CB436CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ac:6b:59:0f:2e:27:38:38:aa:c7:15:cf:85:
13:9a:f8:ac:3a:f5:f2:d8:7c:90:72:39:fd:0d:19:
08:e3:b6:f4:eb:97:81:c8:e4:68:56:31:c7:63:aa:
42:18:7a:3b:27:b2:07:9b:cf:c5:7c:65:a1:2d:61:
08:f4:ca:78:af:d4:87:47:83:22:ac:51:01:80:ad:
03:46:c4:78:46:90:7d:d9:a5:63:24:78:f8:e1:12:
5f:3a:c5:71:5a:2a:53:ca:77:2f:0f:94:0c:18:c0:
c2:bf:01:b8:43:09:ab:ac:68:10:be:c1:31:02:03:
70:59:23:6f:8e:ea:84:fa:33:50:2b:67:07:62:cb:
74:5d:24:fc:d4:4e:2e:2a:17:5d:cc:bf:ea:d9:c3:
ca:92:d0:62:b7:ff:21:11:31:fb:05:28:1f:58:60:
58:69:8d:6e:68:cb:27:8d:21:4f:c1:b5:b5:87:1f:
4f:f9:8c:cf:f3:ef:f5:ef:fe:ea:f3:9a:14:f4:62:
9c:0e:a9:45:70:79:0a:63:86:75:8b:98:f3:36:e0:
03:9e:d0:c8:fc:3e:d0:03:b9:5c:2c:30:35:28:46:
ae:cc:39:aa:fe:f8:a6:be:20:d1:1d:eb:b6:16:ba:
14:b1:fd:38:1b:1c:d9:d7:7e:4c:c1:52:16:13:db:
e0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:20:36:21:7E:5D:79:CC:BF:B3:1D:CB:E1:C6:9F:66:2C:B4:36:CE
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145253.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa2b::/32
Signature Algorithm: sha256WithRSAEncryption
a5:52:97:1a:c9:61:60:97:fc:c2:df:74:a5:e8:0c:0c:b3:38:
14:d4:2d:43:fc:07:d1:99:46:0a:1e:ce:06:d1:fa:7a:db:20:
46:b6:01:ae:40:ab:d6:9a:ca:f7:23:e8:ed:ad:a3:08:6c:c9:
c8:6e:7d:4f:d7:7b:fb:19:1f:57:26:f7:3a:6f:f6:b1:c9:d1:
59:99:09:0a:b9:26:05:f8:4a:35:bd:31:d4:f6:35:9e:e5:e3:
f8:3e:dc:ee:fc:97:4c:3d:6a:b8:f0:5a:75:cb:32:78:8a:86:
00:49:36:15:7b:0d:8e:25:8b:f3:40:9b:21:4a:30:e8:a9:6e:
56:bd:35:14:61:4d:01:47:f8:7c:f6:a8:6b:da:50:ab:dc:7a:
43:4f:2f:31:a1:d4:6b:ac:ee:18:c8:f2:ab:df:2e:94:5e:c7:
d7:6a:86:46:39:49:52:7f:b5:67:a2:46:0a:f1:f5:2b:07:d0:
54:1a:7f:13:db:58:4a:7f:c3:8d:59:93:c7:29:ff:1b:a3:8b:
75:6a:e4:6c:7c:48:84:fe:80:20:b6:db:a1:a2:2b:4a:7b:78:
de:03:28:b5:c4:ca:08:a7:f3:5c:1e:7b:66:8a:6c:4f:34:d5:
8d:2d:29:75:46:68:71:92:3d:b9:7b:0a:2d:13:db:32:af:0b:
12:c6:e3:4d
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUNpQyTTPUgBatpzwTckmMh5f29r4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwMTQ1MTVaFw0yNzA1MjEwMTUwMTVaMDMxMTAvBgNV
BAMTKEU1MjAzNjIxN0U1RDc5Q0NCRkIzMURDQkUxQzY5RjY2MkNCNDM2Q0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqrGtZDy4nODiqxxXPhROa+Kw6
9fLYfJByOf0NGQjjtvTrl4HI5GhWMcdjqkIYejsnsgebz8V8ZaEtYQj0yniv1IdH
gyKsUQGArQNGxHhGkH3ZpWMkePjhEl86xXFaKlPKdy8PlAwYwMK/AbhDCausaBC+
wTECA3BZI2+O6oT6M1ArZwdiy3RdJPzUTi4qF13Mv+rZw8qS0GK3/yERMfsFKB9Y
YFhpjW5oyyeNIU/BtbWHH0/5jM/z7/Xv/urzmhT0YpwOqUVweQpjhnWLmPM24AOe
0Mj8PtADuVwsMDUoRq7MOar++Ka+INEd67YWuhSx/TgbHNnXfkzBUhYT2+CDAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU5SA2IX5decy/sx3L4cafZiy0Ns4wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1MjUzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqqKzANBgkqhkiG9w0BAQsFAAOCAQEApVKX
GslhYJf8wt90pegMDLM4FNQtQ/wH0ZlGCh7OBtH6etsgRrYBrkCr1prK9yPo7a2j
CGzJyG59T9d7+xkfVyb3Om/2scnRWZkJCrkmBfhKNb0x1PY1nuXj+D7c7vyXTD1q
uPBadcsyeIqGAEk2FXsNjiWL80CbIUow6KluVr01FGFNAUf4fPaoa9pQq9x6Q08v
MaHUa6zuGMjyq98ulF7H12qGRjlJUn+1Z6JGCvH1KwfQVBp/E9tYSn/DjVmTxyn/
G6OLdWrkbHxIhP6AILbboaIrSnt43gMotcTKCKfzXB57ZopsTzTVjS0pdUZocZI9
uXsKLRPbMq8LEsbjTQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:45 2026 by rpki-client