
Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145314.roa
File: AS145314.roa (raw, json)
Hash identifier: ws3HSBf7/8eoM1oW2cZaN8Ck8EBG6DMbIjEwoEtSnWY=
Subject key identifier: D8:D6:0F:E4:51:19:7D:07:34:EA:61:E3:58:25:AC:A3:07:B3:7D:D3
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 393660C392E8E7EFCA3D66AD2DC84DFCBF91ED2B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145314.roa
Signing time: Tue 26 May 2026 08:53:06 +0000
ROA not before: Tue 26 May 2026 08:48:06 +0000
ROA not after: Tue 25 May 2027 08:53:06 +0000
asID: 145314
IP address blocks: 240a:aa68::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
39:36:60:c3:92:e8:e7:ef:ca:3d:66:ad:2d:c8:4d:fc:bf:91:ed:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 08:48:06 2026 GMT
Not After : May 25 08:53:06 2027 GMT
Subject: CN=D8D60FE451197D0734EA61E35825ACA307B37DD3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:83:38:4c:99:59:ba:8d:4f:03:46:76:63:54:
43:cb:39:43:4c:6a:2d:72:21:b8:7f:63:10:1d:34:
05:81:fb:4c:26:bc:f7:f6:ca:db:29:5d:46:c2:f6:
9e:c0:03:df:a0:63:22:b0:89:5f:52:98:2b:7b:69:
ad:49:9c:44:11:d1:9b:ee:37:f1:24:a0:2a:d0:f4:
a3:2e:d0:b1:92:3d:1d:67:98:c0:95:dd:e2:49:8c:
d8:32:28:f7:df:4e:ad:25:40:1c:ac:f7:c4:29:5b:
7c:e9:cb:f4:b1:b8:57:4c:90:e5:bf:f4:ab:15:42:
60:dd:34:cc:1d:97:18:ad:43:df:cf:81:4f:06:97:
8a:1a:a2:ab:af:f3:f8:51:d6:4d:a0:90:f0:8c:d0:
5c:da:dc:25:9b:49:84:29:ac:e2:f9:94:a4:82:a2:
c8:11:f3:15:04:21:43:ae:d7:b7:cc:08:57:62:78:
8c:2e:d1:a8:a1:bd:68:df:96:16:9a:b0:4c:71:92:
b5:6a:03:56:70:63:e0:fb:43:29:47:ec:24:37:d9:
31:55:7a:50:3d:10:2b:74:18:bb:33:42:f4:70:2d:
82:21:13:ed:21:8e:fc:1b:7c:73:00:cc:73:c4:21:
08:7f:14:23:b6:4f:51:2f:6a:ca:4c:1a:77:12:76:
72:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:D6:0F:E4:51:19:7D:07:34:EA:61:E3:58:25:AC:A3:07:B3:7D:D3
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145314.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa68::/32
Signature Algorithm: sha256WithRSAEncryption
62:74:63:ef:fe:fb:42:df:6a:a8:e9:b0:cb:32:a8:c3:b2:c0:
16:45:35:bb:35:8e:3d:ea:91:13:10:8a:0e:47:87:19:1f:28:
24:be:1d:7e:78:08:f2:cd:5d:40:6e:39:f9:5c:e3:8c:5b:74:
c6:46:6b:a4:d5:6c:fe:d0:1f:a3:b2:5f:b3:f5:5e:ad:9a:15:
6f:aa:1d:e4:72:2a:20:24:3d:11:76:21:da:5b:39:cf:7d:ed:
ad:11:85:89:4e:98:fd:79:f5:6b:28:02:5f:e1:65:aa:52:dd:
79:a3:d2:f7:1a:83:7b:5d:60:0c:f4:22:28:15:e3:05:45:80:
73:e9:f3:83:c8:f9:89:9d:90:d2:a7:da:a1:07:7f:c9:29:d4:
a5:b3:71:71:f4:cb:10:0f:f3:7f:ac:96:3e:8c:f1:68:6a:38:
e8:32:60:3b:13:59:0e:0a:f1:e9:1b:17:8b:68:5d:83:81:5c:
6c:a8:9b:cf:1b:67:33:f5:ce:3f:7c:f1:4e:1d:2d:ba:19:2c:
5b:b4:10:8d:76:96:2e:2b:ec:6e:cd:24:b4:32:1b:ad:09:98:
09:5f:4e:84:a1:e9:3e:f1:f6:66:1e:d1:50:f2:38:5c:72:db:
a3:e2:0e:67:7a:e9:7d:83:56:bb:af:9e:33:a9:ef:94:2f:24:
10:ac:e1:b9
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUOTZgw5Lo5+/KPWatLchN/L+R7SswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwODQ4MDZaFw0yNzA1MjUwODUzMDZaMDMxMTAvBgNV
BAMTKEQ4RDYwRkU0NTExOTdEMDczNEVBNjFFMzU4MjVBQ0EzMDdCMzdERDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBgzhMmVm6jU8DRnZjVEPLOUNM
ai1yIbh/YxAdNAWB+0wmvPf2ytspXUbC9p7AA9+gYyKwiV9SmCt7aa1JnEQR0Zvu
N/EkoCrQ9KMu0LGSPR1nmMCV3eJJjNgyKPffTq0lQBys98QpW3zpy/SxuFdMkOW/
9KsVQmDdNMwdlxitQ9/PgU8Gl4oaoquv8/hR1k2gkPCM0Fza3CWbSYQprOL5lKSC
osgR8xUEIUOu17fMCFdieIwu0aihvWjflhaasExxkrVqA1ZwY+D7QylH7CQ32TFV
elA9ECt0GLszQvRwLYIhE+0hjvwbfHMAzHPEIQh/FCO2T1EvaspMGncSdnIFAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU2NYP5FEZfQc06mHjWCWsowezfdMwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1MzE0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqqaDANBgkqhkiG9w0BAQsFAAOCAQEAYnRj
7/77Qt9qqOmwyzKow7LAFkU1uzWOPeqRExCKDkeHGR8oJL4dfngI8s1dQG45+Vzj
jFt0xkZrpNVs/tAfo7Jfs/VerZoVb6od5HIqICQ9EXYh2ls5z33trRGFiU6Y/Xn1
aygCX+FlqlLdeaPS9xqDe11gDPQiKBXjBUWAc+nzg8j5iZ2Q0qfaoQd/ySnUpbNx
cfTLEA/zf6yWPozxaGo46DJgOxNZDgrx6RsXi2hdg4FcbKibzxtnM/XOP3zxTh0t
uhksW7QQjXaWLivsbs0ktDIbrQmYCV9OhKHpPvH2Zh7RUPI4XHLbo+IOZ3rpfYNW
u6+eM6nvlC8kEKzhuQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:26 2026 by rpki-client