Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145295.roa
File: AS145295.roa (raw, json)
Hash identifier: L4T1zIVRggqEE0TQYejzUPk0B+nsD6HTN0W0YDxWccU=
Subject key identifier: 1F:BC:5D:48:0B:BE:B8:CA:D1:92:D8:84:B5:93:85:A4:C6:0D:50:86
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6E572276D60C5EAF266E67983B80C3A13F33F14F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145295.roa
Signing time: Tue 26 May 2026 06:30:55 +0000
ROA not before: Tue 26 May 2026 06:25:55 +0000
ROA not after: Tue 25 May 2027 06:30:55 +0000
asID: 145295
IP address blocks: 240a:aa55::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:57:22:76:d6:0c:5e:af:26:6e:67:98:3b:80:c3:a1:3f:33:f1:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:25:55 2026 GMT
Not After : May 25 06:30:55 2027 GMT
Subject: CN=1FBC5D480BBEB8CAD192D884B59385A4C60D5086
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:26:59:b1:4e:14:b9:72:3c:58:59:e5:8e:c5:
1e:3f:d9:ec:81:f8:57:30:b2:2f:e4:6d:0c:b1:b9:
a3:f7:d2:bd:44:8b:12:e6:b2:c4:c0:38:f5:3d:e3:
6e:50:31:ef:7f:eb:d6:ce:bc:4c:81:0f:87:20:0c:
9e:5a:84:30:a2:a2:5b:8b:c8:3c:9d:22:2b:2d:2c:
f4:83:4e:d0:2d:bf:a7:9c:1d:65:94:55:8e:d8:19:
04:c8:33:83:7a:55:e9:aa:12:7e:e7:e6:79:f7:c1:
09:03:a9:64:36:9e:da:eb:13:21:75:8f:7a:f0:54:
96:b8:bf:31:3c:2b:fb:07:39:36:04:93:9e:18:79:
7a:77:ca:07:7e:8b:32:67:5b:d7:bd:ff:f6:45:9a:
eb:b7:73:94:6d:53:be:9d:12:f6:f5:90:db:c6:89:
cf:83:be:ad:77:6a:70:64:50:7f:8d:65:0c:e4:6c:
bb:d4:ad:9c:80:aa:9f:fb:5e:e3:8e:a8:68:4f:8b:
7c:87:32:53:4b:b4:be:c9:0c:70:97:f9:16:60:ac:
53:7f:41:e8:c0:fc:a6:5f:a2:2c:8f:94:5e:8a:38:
fa:26:fe:79:24:0f:2a:9f:b1:39:e0:5d:cd:29:3e:
ac:ec:b3:8e:33:c5:38:06:a1:80:47:98:6c:76:66:
95:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:BC:5D:48:0B:BE:B8:CA:D1:92:D8:84:B5:93:85:A4:C6:0D:50:86
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145295.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa55::/32
Signature Algorithm: sha256WithRSAEncryption
01:cf:50:20:6b:d9:f2:4e:e8:df:80:bd:65:45:05:76:65:d7:
bd:98:7d:d9:56:c6:1b:28:77:2a:88:79:fa:1c:60:15:de:4f:
e6:2b:6b:b4:ef:9c:b4:6e:30:51:46:37:c2:6c:34:55:03:4b:
5e:f4:83:76:5f:da:e7:87:b3:3b:b9:ed:dc:2f:32:73:c7:bd:
25:32:34:a8:b5:9a:25:92:a9:a1:23:1a:50:51:8b:a7:9a:66:
d6:86:a4:f0:6f:11:bf:71:08:64:c6:fb:c9:f5:3b:ce:c4:3f:
f2:6c:8a:12:e3:d5:3a:39:29:db:37:a1:94:95:8a:ac:3a:20:
d6:bc:48:90:7a:cf:7a:8d:18:0b:a5:2f:99:5b:27:fb:77:03:
fb:07:3c:7e:2d:2f:c0:53:0f:56:8d:1c:1b:1f:b0:78:e7:be:
41:fb:b4:ea:ee:ea:ed:26:56:3c:98:97:0b:d3:fd:0f:fd:70:
56:cc:e8:e9:07:fd:dc:89:fd:bb:7d:83:bf:0a:e7:a5:57:4e:
a2:0f:7c:34:93:6e:cd:e8:ca:d1:3b:56:4c:a6:2c:de:b7:ad:
bc:1d:6a:5e:40:f6:ba:87:ff:e0:98:12:a6:fa:07:39:fa:a6:
5e:04:f2:e6:6f:2d:5d:b5:90:36:b0:5e:7e:11:01:8c:0d:15:
5d:e8:77:a9
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUblcidtYMXq8mbmeYO4DDoT8z8U8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwNjI1NTVaFw0yNzA1MjUwNjMwNTVaMDMxMTAvBgNV
BAMTKDFGQkM1RDQ4MEJCRUI4Q0FEMTkyRDg4NEI1OTM4NUE0QzYwRDUwODYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMJlmxThS5cjxYWeWOxR4/2eyB
+Fcwsi/kbQyxuaP30r1EixLmssTAOPU9425QMe9/69bOvEyBD4cgDJ5ahDCioluL
yDydIistLPSDTtAtv6ecHWWUVY7YGQTIM4N6VemqEn7n5nn3wQkDqWQ2ntrrEyF1
j3rwVJa4vzE8K/sHOTYEk54YeXp3ygd+izJnW9e9//ZFmuu3c5RtU76dEvb1kNvG
ic+Dvq13anBkUH+NZQzkbLvUrZyAqp/7XuOOqGhPi3yHMlNLtL7JDHCX+RZgrFN/
QejA/KZfoiyPlF6KOPom/nkkDyqfsTngXc0pPqzss44zxTgGoYBHmGx2ZpUXAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUH7xdSAu+uMrRktiEtZOFpMYNUIYwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1Mjk1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqqVTANBgkqhkiG9w0BAQsFAAOCAQEAAc9Q
IGvZ8k7o34C9ZUUFdmXXvZh92VbGGyh3Koh5+hxgFd5P5itrtO+ctG4wUUY3wmw0
VQNLXvSDdl/a54ezO7nt3C8yc8e9JTI0qLWaJZKpoSMaUFGLp5pm1oak8G8Rv3EI
ZMb7yfU7zsQ/8myKEuPVOjkp2zehlJWKrDog1rxIkHrPeo0YC6UvmVsn+3cD+wc8
fi0vwFMPVo0cGx+weOe+Qfu06u7q7SZWPJiXC9P9D/1wVszo6Qf93In9u32Dvwrn
pVdOog98NJNuzejK0TtWTKYs3retvB1qXkD2uof/4JgSpvoHOfqmXgTy5m8tXbWQ
NrBefhEBjA0VXeh3qQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:38 2026 by rpki-client