Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145255.roa
File: AS145255.roa (raw, json)
Hash identifier: z/VeMOLq8AEu6mRyXin0YUNag/1bcumzsNX5zTpspY0=
Subject key identifier: 42:C3:18:EF:18:99:88:6C:9B:D1:21:6B:39:B5:03:BD:D4:E1:89:CF
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1F8DF1DEEE0E8DFD5647522F29D390F268DC5C94
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145255.roa
Signing time: Fri 22 May 2026 07:41:07 +0000
ROA not before: Fri 22 May 2026 07:36:07 +0000
ROA not after: Fri 21 May 2027 07:41:07 +0000
asID: 145255
IP address blocks: 240a:aa2d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:8d:f1:de:ee:0e:8d:fd:56:47:52:2f:29:d3:90:f2:68:dc:5c:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:36:07 2026 GMT
Not After : May 21 07:41:07 2027 GMT
Subject: CN=42C318EF1899886C9BD1216B39B503BDD4E189CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:55:e7:ec:96:dd:f4:dd:9a:46:f4:91:fd:6b:
3b:85:45:60:d2:96:22:42:c9:8c:76:29:80:25:d6:
9f:c5:a6:a4:e4:8f:5e:3f:68:02:3a:e1:59:99:40:
19:e5:59:8d:14:5b:e7:f0:3a:97:57:98:92:44:85:
fe:fb:fb:25:53:62:fd:c5:55:04:48:54:3c:f7:35:
2e:8c:48:06:17:65:3b:7e:63:f7:75:f5:97:ee:39:
9b:f7:4c:9c:e5:56:d4:af:ee:06:6f:3c:61:f1:2c:
76:8f:87:d9:30:cd:c6:16:37:0d:22:7b:8d:3a:1d:
3b:d0:2a:bb:3a:49:e4:41:20:86:f6:36:c6:10:9a:
04:1b:60:ab:c5:1f:90:42:df:0a:62:0a:b4:c0:4c:
cd:8b:d3:90:2c:f8:77:40:0f:ed:36:91:d3:ae:af:
13:32:65:94:21:d8:81:38:49:7d:14:40:74:42:d8:
79:48:95:d1:60:5b:ea:f7:e8:71:a2:c0:78:ca:2b:
e2:84:0b:d1:60:9d:65:3b:23:39:87:3c:c9:17:ef:
b5:31:6f:df:5b:be:db:81:24:41:fc:33:87:7c:da:
cd:a8:91:94:bd:91:03:07:de:38:17:2f:f7:91:2b:
e2:9c:ee:fa:bf:e8:69:d4:24:57:4d:0c:16:2f:a3:
a2:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C3:18:EF:18:99:88:6C:9B:D1:21:6B:39:B5:03:BD:D4:E1:89:CF
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145255.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa2d::/32
Signature Algorithm: sha256WithRSAEncryption
32:bc:2c:1d:d1:2e:55:68:95:12:e0:f4:a5:2a:de:30:a8:e1:
2c:e3:25:7f:4c:0a:19:71:a8:bb:33:34:05:52:7b:17:2d:f2:
53:ae:c1:6e:32:9b:3e:2b:de:0f:ae:d9:f3:41:3b:77:a8:b9:
cd:02:4c:02:4c:08:88:1c:36:42:f0:9b:49:88:bd:79:61:64:
d1:6c:1a:9e:41:65:8f:89:a8:00:c7:c0:0c:30:68:dd:00:c4:
87:22:73:1a:95:d1:23:e0:22:10:cf:47:b7:c0:1a:bf:f8:e7:
d9:a6:9e:75:29:2e:53:d7:ad:d8:fe:2b:15:18:ad:92:bd:9d:
40:0b:2e:0a:15:0c:34:d8:40:24:a9:6e:57:b4:2a:65:ca:26:
b4:f7:c3:dc:24:8c:e1:40:94:ef:2f:42:00:3f:1f:09:5c:0a:
c6:d2:1b:0d:3d:0b:d6:40:f1:4f:03:b6:e2:e7:c5:97:57:75:
a6:e1:67:1a:3c:81:6b:6f:d9:54:21:10:ab:2a:67:ff:ca:9f:
ad:d6:82:f3:2f:b3:7d:25:e5:04:c4:94:e1:27:85:72:08:db:
8b:53:6b:30:7c:65:af:09:f8:33:a0:c5:3c:69:6b:da:04:02:
e7:1a:8b:d8:95:2b:0a:f7:7e:55:53:4d:b9:90:25:51:8b:6e:
de:aa:a2:de
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUH43x3u4Ojf1WR1IvKdOQ8mjcXJQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzM2MDdaFw0yNzA1MjEwNzQxMDdaMDMxMTAvBgNV
BAMTKDQyQzMxOEVGMTg5OTg4NkM5QkQxMjE2QjM5QjUwM0JERDRFMTg5Q0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFVefslt303ZpG9JH9azuFRWDS
liJCyYx2KYAl1p/FpqTkj14/aAI64VmZQBnlWY0UW+fwOpdXmJJEhf77+yVTYv3F
VQRIVDz3NS6MSAYXZTt+Y/d19ZfuOZv3TJzlVtSv7gZvPGHxLHaPh9kwzcYWNw0i
e406HTvQKrs6SeRBIIb2NsYQmgQbYKvFH5BC3wpiCrTATM2L05As+HdAD+02kdOu
rxMyZZQh2IE4SX0UQHRC2HlIldFgW+r36HGiwHjKK+KEC9FgnWU7IzmHPMkX77Ux
b99bvtuBJEH8M4d82s2okZS9kQMH3jgXL/eRK+Kc7vq/6GnUJFdNDBYvo6JRAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUQsMY7xiZiGyb0SFrObUDvdThic8wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1MjU1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqqLTANBgkqhkiG9w0BAQsFAAOCAQEAMrws
HdEuVWiVEuD0pSreMKjhLOMlf0wKGXGouzM0BVJ7Fy3yU67BbjKbPiveD67Z80E7
d6i5zQJMAkwIiBw2QvCbSYi9eWFk0WwankFlj4moAMfADDBo3QDEhyJzGpXRI+Ai
EM9Ht8Aav/jn2aaedSkuU9et2P4rFRitkr2dQAsuChUMNNhAJKluV7QqZcomtPfD
3CSM4UCU7y9CAD8fCVwKxtIbDT0L1kDxTwO24ufFl1d1puFnGjyBa2/ZVCEQqypn
/8qfrdaC8y+zfSXlBMSU4SeFcgjbi1NrMHxlrwn4M6DFPGlr2gQC5xqL2JUrCvd+
VVNNuZAlUYtu3qqi3g==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:52 2026 by rpki-client