Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145323.roa
File: AS145323.roa (raw, json)
Hash identifier: JCSnwGeC59eM4ivjNdsrAc0lPEp5wu1KfWiVB1q0jFE=
Subject key identifier: 5E:0B:02:FF:5E:D3:38:12:58:F7:74:EE:62:EF:74:15:8F:94:10:E5
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 261252009980263468F899B4CD70118D6080EDCE
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145323.roa
Signing time: Fri 22 May 2026 07:32:23 +0000
ROA not before: Fri 22 May 2026 07:27:23 +0000
ROA not after: Fri 21 May 2027 07:32:23 +0000
asID: 145323
IP address blocks: 240a:aa71::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
26:12:52:00:99:80:26:34:68:f8:99:b4:cd:70:11:8d:60:80:ed:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:27:23 2026 GMT
Not After : May 21 07:32:23 2027 GMT
Subject: CN=5E0B02FF5ED3381258F774EE62EF74158F9410E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e9:50:f4:64:e0:47:83:30:3d:8d:8c:af:70:
a6:47:a9:4a:ee:69:65:b9:43:38:c2:36:10:7e:22:
51:d5:53:02:99:63:08:3b:83:ff:89:79:a9:4e:7b:
1b:75:06:4b:65:3a:0e:9b:94:27:ec:4a:c5:a1:fa:
75:c5:a5:65:2a:01:4f:94:f3:36:62:67:f1:1b:5a:
81:56:b3:5b:bb:ad:4d:81:eb:23:58:9b:7c:61:72:
7f:93:8a:f5:0b:39:fa:52:0b:1e:ec:2f:ea:25:1c:
ef:e6:22:c2:a3:b1:22:6f:60:7e:63:4c:48:bf:ee:
85:b0:d5:45:13:65:19:17:8b:d8:09:bc:05:d5:9e:
00:0b:77:57:0f:65:9f:fc:20:af:ee:1e:f3:15:8d:
e9:75:78:a1:90:0f:01:51:4f:0d:54:67:b4:96:b6:
79:6e:7c:82:5f:9d:40:9d:c7:aa:df:f8:60:46:34:
2a:17:e1:eb:9f:ac:88:24:fb:0f:29:00:b8:a8:7f:
b5:f5:fb:4e:5a:42:00:38:f7:fb:b3:08:43:14:02:
56:2c:8a:54:7a:76:00:bb:f7:2a:8c:8c:4c:46:09:
65:a5:74:80:95:a0:e3:83:c4:ab:79:04:a2:05:6f:
be:5e:4f:77:6a:30:63:13:77:b4:f0:55:9b:0d:ac:
27:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:0B:02:FF:5E:D3:38:12:58:F7:74:EE:62:EF:74:15:8F:94:10:E5
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145323.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa71::/32
Signature Algorithm: sha256WithRSAEncryption
1f:a8:3c:b9:61:37:99:7b:84:01:4c:87:da:48:65:0c:f2:11:
f0:a1:83:fd:8e:c0:ec:0d:7f:ba:a6:26:b8:11:d7:91:b4:e9:
42:ca:2e:cf:25:f1:c5:da:a2:a0:2a:5e:50:a4:ea:5a:b5:ae:
16:b1:0e:a6:c5:3c:71:80:50:c5:10:45:0c:85:3c:2d:44:2d:
dd:9c:ed:78:5e:11:36:fa:3f:9b:61:78:d3:48:49:5f:bb:30:
f0:fc:7b:6a:10:5e:75:fe:49:c4:ae:34:13:f3:ad:6e:e2:69:
46:18:fc:0a:47:fd:30:f4:a8:d7:17:ab:26:eb:b2:da:99:76:
45:35:38:c2:b6:88:10:2b:c4:d8:6b:29:9f:e1:65:d5:ca:3a:
58:ca:f4:f3:d2:38:f2:18:a1:1d:85:0e:21:63:fc:75:3e:57:
7e:95:c8:57:4f:a4:f6:e3:68:cd:6c:44:b0:e3:59:be:c1:16:
42:ed:2d:8e:22:17:0d:fe:e9:07:c5:a0:77:89:80:11:4b:28:
b6:e2:48:c6:df:96:44:6b:58:fe:b5:6f:6a:6c:76:c4:8d:3d:
b3:9f:0d:f6:a0:3d:d6:05:ec:65:da:22:c1:89:66:ef:26:29:
96:ca:7b:67:a6:9d:af:29:b9:79:a5:a5:fb:79:4b:49:cb:9f:
7f:80:2e:e4
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUJhJSAJmAJjRo+Jm0zXARjWCA7c4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzI3MjNaFw0yNzA1MjEwNzMyMjNaMDMxMTAvBgNV
BAMTKDVFMEIwMkZGNUVEMzM4MTI1OEY3NzRFRTYyRUY3NDE1OEY5NDEwRTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf6VD0ZOBHgzA9jYyvcKZHqUru
aWW5QzjCNhB+IlHVUwKZYwg7g/+JealOext1BktlOg6blCfsSsWh+nXFpWUqAU+U
8zZiZ/EbWoFWs1u7rU2B6yNYm3xhcn+TivULOfpSCx7sL+olHO/mIsKjsSJvYH5j
TEi/7oWw1UUTZRkXi9gJvAXVngALd1cPZZ/8IK/uHvMVjel1eKGQDwFRTw1UZ7SW
tnlufIJfnUCdx6rf+GBGNCoX4eufrIgk+w8pALiof7X1+05aQgA49/uzCEMUAlYs
ilR6dgC79yqMjExGCWWldICVoOODxKt5BKIFb75eT3dqMGMTd7TwVZsNrCdpAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUXgsC/17TOBJY93TuYu90FY+UEOUwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1MzIzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqqcTANBgkqhkiG9w0BAQsFAAOCAQEAH6g8
uWE3mXuEAUyH2khlDPIR8KGD/Y7A7A1/uqYmuBHXkbTpQsouzyXxxdqioCpeUKTq
WrWuFrEOpsU8cYBQxRBFDIU8LUQt3ZzteF4RNvo/m2F400hJX7sw8Px7ahBedf5J
xK40E/OtbuJpRhj8Ckf9MPSo1xerJuuy2pl2RTU4wraIECvE2Gspn+Fl1co6WMr0
89I48hihHYUOIWP8dT5XfpXIV0+k9uNozWxEsONZvsEWQu0tjiIXDf7pB8Wgd4mA
EUsotuJIxt+WRGtY/rVvamx2xI09s58N9qA91gXsZdoiwYlm7yYplsp7Z6adrym5
eaWl+3lLScuff4Au5A==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:47 2026 by rpki-client