Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145319.roa
File: AS145319.roa (raw, json)
Hash identifier: ZHJQNb9RE79KqGBDfYHZ8f/00JUmfflWpGV56EWCRzI=
Subject key identifier: 35:8B:6F:6F:D2:57:A8:A7:A8:82:84:8D:B5:BE:F5:1D:13:1D:19:0B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6976BEF05954F3220F00910EBA1D650BDAC9AFB7
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145319.roa
Signing time: Mon 25 May 2026 03:19:39 +0000
ROA not before: Mon 25 May 2026 03:14:39 +0000
ROA not after: Mon 24 May 2027 03:19:39 +0000
asID: 145319
IP address blocks: 240a:aa6d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:76:be:f0:59:54:f3:22:0f:00:91:0e:ba:1d:65:0b:da:c9:af:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:39 2026 GMT
Not After : May 24 03:19:39 2027 GMT
Subject: CN=358B6F6FD257A8A7A882848DB5BEF51D131D190B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:82:fe:60:0e:af:d4:99:57:5f:91:e0:bc:37:
23:0e:8b:06:5a:6e:f0:e8:1a:30:90:b9:5d:36:c5:
5e:c0:ad:52:63:1b:b7:1e:0f:f5:80:20:3c:c7:08:
c1:5b:4f:2b:ec:eb:21:fc:de:2c:6b:00:4d:13:90:
f8:55:b3:60:da:3c:13:71:2c:af:be:ab:ec:8d:c3:
44:8d:bb:1a:f1:ce:52:ca:2e:90:0d:2e:13:54:58:
87:43:7a:00:37:b7:48:46:07:21:7a:6c:4d:29:91:
65:e6:59:88:05:78:a6:cc:27:e7:24:ef:da:ee:85:
0f:e0:a7:49:81:e6:d6:c5:03:64:17:73:e5:55:e0:
b9:3f:04:dd:01:f1:45:42:85:8a:05:53:92:62:a8:
c5:9d:f6:82:03:47:7c:d9:40:23:d6:53:96:ce:9e:
9e:d5:73:0a:72:45:01:63:d5:cc:f1:43:79:0e:66:
14:20:2f:63:a5:6b:22:29:2b:58:2c:d7:73:66:f4:
1c:d3:25:db:de:02:fe:a3:9a:c0:a8:46:82:4c:6f:
42:c3:25:e7:24:03:b7:81:f4:d4:d0:f9:7f:6e:a5:
46:30:70:76:7f:29:ab:08:1e:49:a3:a8:d2:4a:80:
55:15:22:2b:10:31:bb:a2:bb:5e:09:58:19:e2:d4:
78:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:8B:6F:6F:D2:57:A8:A7:A8:82:84:8D:B5:BE:F5:1D:13:1D:19:0B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145319.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa6d::/32
Signature Algorithm: sha256WithRSAEncryption
5a:41:f9:e2:73:4c:b5:f4:55:2a:97:72:51:50:49:5c:10:cf:
43:1e:fc:b8:78:da:b9:7a:33:8a:52:6f:1c:27:ef:9b:5b:7d:
bc:f6:d0:f5:87:66:64:32:5e:1c:1c:74:6c:41:be:b1:16:b4:
96:da:ef:ff:d5:ef:e9:b2:75:c0:49:01:04:c9:14:06:d1:0b:
c4:15:ed:1a:89:6c:f5:2d:dc:e0:a4:16:c8:a7:55:6e:cf:2c:
8a:5e:1b:6f:70:62:21:55:04:a6:63:9a:ca:a1:41:1e:30:c4:
1f:33:21:3e:05:4f:ea:4e:b2:f9:8b:fe:28:c6:17:fc:c9:b1:
2b:0c:fc:a4:d6:f0:a6:af:44:5b:26:1a:f9:91:33:72:bc:a1:
bb:05:c0:c2:16:84:f4:4b:3d:82:3f:61:ff:c1:d9:09:fd:47:
7e:d2:e0:be:06:15:4c:6c:32:c0:b9:76:69:55:dd:ef:a3:94:
e0:c3:73:79:41:e2:b9:b1:30:cf:e0:a2:b9:5a:84:d5:82:1d:
93:c8:09:66:08:41:bd:89:7a:e2:3f:62:12:33:dc:31:ce:58:
7f:3f:aa:b9:92:ef:ba:44:cf:bf:26:4f:a2:17:70:07:aa:4c:
e0:e0:7e:71:79:58:8c:b1:df:77:e7:22:aa:ca:ef:c5:2f:09:
72:b1:1d:d2
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUaXa+8FlU8yIPAJEOuh1lC9rJr7cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMzE0MzlaFw0yNzA1MjQwMzE5MzlaMDMxMTAvBgNV
BAMTKDM1OEI2RjZGRDI1N0E4QTdBODgyODQ4REI1QkVGNTFEMTMxRDE5MEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCggv5gDq/UmVdfkeC8NyMOiwZa
bvDoGjCQuV02xV7ArVJjG7ceD/WAIDzHCMFbTyvs6yH83ixrAE0TkPhVs2DaPBNx
LK++q+yNw0SNuxrxzlLKLpANLhNUWIdDegA3t0hGByF6bE0pkWXmWYgFeKbMJ+ck
79ruhQ/gp0mB5tbFA2QXc+VV4Lk/BN0B8UVChYoFU5JiqMWd9oIDR3zZQCPWU5bO
np7VcwpyRQFj1czxQ3kOZhQgL2OlayIpK1gs13Nm9BzTJdveAv6jmsCoRoJMb0LD
JeckA7eB9NTQ+X9upUYwcHZ/KasIHkmjqNJKgFUVIisQMbuiu14JWBni1HjdAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUNYtvb9JXqKeogoSNtb71HRMdGQswHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1MzE5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqqbTANBgkqhkiG9w0BAQsFAAOCAQEAWkH5
4nNMtfRVKpdyUVBJXBDPQx78uHjauXozilJvHCfvm1t9vPbQ9YdmZDJeHBx0bEG+
sRa0ltrv/9Xv6bJ1wEkBBMkUBtELxBXtGols9S3c4KQWyKdVbs8sil4bb3BiIVUE
pmOayqFBHjDEHzMhPgVP6k6y+Yv+KMYX/MmxKwz8pNbwpq9EWyYa+ZEzcryhuwXA
whaE9Es9gj9h/8HZCf1HftLgvgYVTGwywLl2aVXd76OU4MNzeUHiubEwz+CiuVqE
1YIdk8gJZghBvYl64j9iEjPcMc5Yfz+quZLvukTPvyZPohdwB6pM4OB+cXlYjLHf
d+ciqsrvxS8JcrEd0g==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:07 2026 by rpki-client