Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145275.roa
File: AS145275.roa (raw, json)
Hash identifier: JkijcBKBG5VadWTcBUvMhnV8+KVce3m12LK89Nmkdi4=
Subject key identifier: DA:ED:68:1A:16:C4:73:A2:2D:A5:E3:B6:D8:6C:03:C7:A9:19:E6:85
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 14B115B97FBDB1F13D54952C66F8FFFDBFC5380A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145275.roa
Signing time: Mon 25 May 2026 01:20:08 +0000
ROA not before: Mon 25 May 2026 01:15:08 +0000
ROA not after: Mon 24 May 2027 01:20:08 +0000
asID: 145275
IP address blocks: 240a:aa41::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:b1:15:b9:7f:bd:b1:f1:3d:54:95:2c:66:f8:ff:fd:bf:c5:38:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:15:08 2026 GMT
Not After : May 24 01:20:08 2027 GMT
Subject: CN=DAED681A16C473A22DA5E3B6D86C03C7A919E685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:08:61:fd:9c:40:6b:95:5f:c0:7a:83:fb:25:
48:ad:05:c6:f4:15:46:6d:45:1e:f2:08:cb:6b:23:
a4:54:b2:61:a2:6e:21:73:f0:61:81:86:96:27:b4:
2f:54:e5:99:27:f2:bc:c6:d7:34:75:61:6c:3f:17:
51:eb:68:0e:53:98:a4:f4:cf:17:fe:e3:bf:34:06:
11:9d:13:8b:6b:bb:62:58:85:ce:11:ce:fb:82:ba:
9a:72:2e:10:e2:e3:ab:85:09:c2:cf:27:0b:35:cc:
3e:b1:14:2f:07:65:0e:04:0f:62:fa:0a:4e:75:9a:
6a:1b:18:7a:98:39:24:f6:e0:f3:67:ca:a2:08:c2:
3d:3a:cd:b9:83:38:5e:20:95:df:5d:e0:0a:b7:e1:
c2:7e:31:b0:8c:23:ba:be:23:67:f9:2f:30:ae:3e:
e2:81:31:c6:f1:3f:6a:d1:d4:fa:ff:2c:f3:6c:26:
39:ce:b9:ea:c5:66:3a:9a:04:9e:88:4b:d4:7c:16:
0d:f2:a8:e1:24:22:0e:3a:0a:25:53:e1:16:1c:9c:
bf:57:e2:b9:89:40:ea:88:23:37:77:ed:7e:3b:f1:
d9:7a:6e:0f:f4:ce:b9:d0:01:e6:48:c1:97:c2:0b:
92:1b:aa:4a:3b:14:d6:7f:19:e6:57:ea:d8:c3:89:
e4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:ED:68:1A:16:C4:73:A2:2D:A5:E3:B6:D8:6C:03:C7:A9:19:E6:85
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145275.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa41::/32
Signature Algorithm: sha256WithRSAEncryption
a7:cd:f9:a8:b4:8b:b7:e7:1a:72:d0:f9:bd:e7:55:b1:3a:19:
c7:3d:72:5d:ee:9f:20:41:fa:45:0c:14:24:8f:13:57:6c:3f:
e3:63:5f:22:66:99:d3:a5:51:9e:b8:01:a1:7c:e1:67:2f:2c:
ab:d7:8f:1f:cb:ec:34:a7:ee:b2:fc:7d:4f:ab:33:45:5e:7f:
a7:a9:47:8f:7f:a5:8a:36:00:ac:71:c3:2d:90:a9:b4:3b:0c:
8f:52:ae:43:67:ac:b8:e9:45:cc:1f:48:7c:d8:13:bb:b5:3b:
6d:92:2e:11:4b:c6:22:4c:a2:84:e9:cf:64:e6:76:a0:2d:f9:
ee:14:1b:4f:21:ff:31:4b:fc:c6:d2:1a:2d:d1:08:a4:ee:62:
ae:89:a6:30:ed:bf:77:58:c8:38:fa:88:ed:65:fa:fb:d1:96:
ad:ba:72:6e:78:fd:0f:c5:c3:fa:6a:da:7b:fb:a8:5f:bb:77:
a4:c4:fe:c7:ae:83:ee:3d:73:d8:e6:3d:bd:a6:ec:18:e8:b3:
16:d5:a9:91:73:2c:5b:9b:97:f7:e6:0e:83:a0:3d:c8:3e:ed:
ca:d5:2a:7e:4d:08:b2:f6:46:f0:55:76:95:04:03:83:43:ac:
67:a7:45:de:f9:68:5d:33:ed:35:5d:c7:1d:e6:8f:b8:cf:cd:
b0:7d:f7:d7
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUFLEVuX+9sfE9VJUsZvj//b/FOAowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMTE1MDhaFw0yNzA1MjQwMTIwMDhaMDMxMTAvBgNV
BAMTKERBRUQ2ODFBMTZDNDczQTIyREE1RTNCNkQ4NkMwM0M3QTkxOUU2ODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNCGH9nEBrlV/AeoP7JUitBcb0
FUZtRR7yCMtrI6RUsmGibiFz8GGBhpYntC9U5Zkn8rzG1zR1YWw/F1HraA5TmKT0
zxf+4780BhGdE4tru2JYhc4RzvuCuppyLhDi46uFCcLPJws1zD6xFC8HZQ4ED2L6
Ck51mmobGHqYOST24PNnyqIIwj06zbmDOF4gld9d4Aq34cJ+MbCMI7q+I2f5LzCu
PuKBMcbxP2rR1Pr/LPNsJjnOuerFZjqaBJ6IS9R8Fg3yqOEkIg46CiVT4RYcnL9X
4rmJQOqIIzd37X478dl6bg/0zrnQAeZIwZfCC5Ibqko7FNZ/GeZX6tjDieTFAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU2u1oGhbEc6ItpeO22GwDx6kZ5oUwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1Mjc1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqqQTANBgkqhkiG9w0BAQsFAAOCAQEAp835
qLSLt+cactD5vedVsToZxz1yXe6fIEH6RQwUJI8TV2w/42NfImaZ06VRnrgBoXzh
Zy8sq9ePH8vsNKfusvx9T6szRV5/p6lHj3+lijYArHHDLZCptDsMj1KuQ2esuOlF
zB9IfNgTu7U7bZIuEUvGIkyihOnPZOZ2oC357hQbTyH/MUv8xtIaLdEIpO5iromm
MO2/d1jIOPqI7WX6+9GWrbpybnj9D8XD+mrae/uoX7t3pMT+x66D7j1z2OY9vabs
GOizFtWpkXMsW5uX9+YOg6A9yD7tytUqfk0IsvZG8FV2lQQDg0OsZ6dF3vloXTPt
NV3HHeaPuM/NsH331w==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:49 2026 by rpki-client