Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145328.roa
File: AS145328.roa (raw, json)
Hash identifier: M5sNGEERaGyoHyc6tw0wog5Wwuqcbqi5Cuvd7KvMg88=
Subject key identifier: 6C:C9:4B:B4:F9:AF:A5:43:EE:8C:8C:2D:83:C0:B6:97:84:00:C5:07
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 09172081941AC94438ED0129EB19B5D1278FA5DF
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145328.roa
Signing time: Mon 25 May 2026 01:38:24 +0000
ROA not before: Mon 25 May 2026 01:33:24 +0000
ROA not after: Mon 24 May 2027 01:38:24 +0000
asID: 145328
IP address blocks: 240a:aa76::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:17:20:81:94:1a:c9:44:38:ed:01:29:eb:19:b5:d1:27:8f:a5:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:24 2026 GMT
Not After : May 24 01:38:24 2027 GMT
Subject: CN=6CC94BB4F9AFA543EE8C8C2D83C0B6978400C507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:21:ee:3d:c1:f5:93:99:ca:e6:64:54:01:20:
f0:d2:7f:eb:0e:54:bb:56:82:de:c3:d8:1f:c6:b8:
64:e0:29:49:27:9c:40:64:8d:fe:82:f6:76:f8:86:
67:91:38:95:70:dd:b8:8f:7a:64:a6:52:8e:58:7f:
73:bb:d0:dd:21:a8:89:c3:85:ae:82:94:ce:f7:f4:
25:59:75:31:2b:fa:5f:d8:2a:38:c8:20:fd:5c:59:
5e:1c:3a:d1:8b:1d:97:5f:c9:3c:ef:f5:42:b1:29:
f9:ea:31:44:a3:b0:ea:09:e9:2f:07:f1:f0:64:09:
d9:15:c9:13:40:bf:69:d1:0c:bd:98:d0:5e:1b:0d:
74:47:e0:79:3c:39:5c:c9:a1:8b:a1:ec:14:d2:b4:
48:8d:fb:27:4e:e3:80:7b:9d:2c:2a:28:6c:83:ad:
77:c0:e1:89:f9:e3:0d:0b:03:80:f1:60:ad:57:dc:
c5:68:99:a8:33:26:b1:8d:e9:c3:c0:27:9e:8e:89:
25:be:38:24:6a:fb:88:62:9f:3c:d9:45:5f:74:78:
92:10:f7:75:37:15:bb:e5:08:aa:ec:20:a5:cd:f7:
62:cd:9e:aa:8a:54:73:36:10:f2:dc:b8:9b:99:19:
03:ef:f7:92:f4:b3:b4:7f:9d:a4:1d:ea:bc:1e:04:
84:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:C9:4B:B4:F9:AF:A5:43:EE:8C:8C:2D:83:C0:B6:97:84:00:C5:07
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145328.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa76::/32
Signature Algorithm: sha256WithRSAEncryption
0e:f6:a7:41:1a:b4:7e:f9:21:4f:7c:7a:09:0f:51:65:bb:76:
10:8d:d5:50:62:ac:18:ad:32:ac:89:1e:0c:ad:be:ec:1f:b3:
ae:2b:75:e7:71:6c:de:e7:ca:d1:83:72:04:df:38:a4:52:0f:
5d:2b:90:93:b9:e2:08:3a:67:4b:fe:35:9a:4b:1b:3d:b6:b3:
93:7d:20:aa:de:43:1a:93:17:e0:c5:98:4b:e4:0a:aa:2b:da:
ef:6e:97:73:6c:c0:c9:a2:7f:f4:7c:c3:d4:ce:09:3a:4f:40:
49:e5:96:0f:1c:82:08:c1:a4:3d:83:01:4d:d1:bb:f7:21:f7:
65:7d:85:12:4a:4b:8e:bb:3a:44:95:0f:a9:f6:4b:dc:3f:66:
88:97:1f:ac:06:a4:d4:28:39:08:e1:9f:c4:08:53:15:0f:30:
6e:3e:13:3a:1c:57:bf:89:d5:d9:25:df:0e:4e:dc:d3:4e:3d:
c0:48:ff:5c:7f:5f:56:ae:20:94:e3:9a:21:0e:6a:3c:e3:d9:
4c:15:68:25:e9:91:f8:64:22:7d:83:79:57:95:14:68:3d:dc:
e0:97:2b:47:0c:7c:71:89:25:85:d2:a9:23:85:23:3b:74:ce:
0e:1e:a5:b5:fd:76:1b:94:0d:1a:83:d7:19:77:df:67:77:b7:
64:8a:07:52
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUCRcggZQayUQ47QEp6xm10SePpd8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMTMzMjRaFw0yNzA1MjQwMTM4MjRaMDMxMTAvBgNV
BAMTKDZDQzk0QkI0RjlBRkE1NDNFRThDOEMyRDgzQzBCNjk3ODQwMEM1MDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgIe49wfWTmcrmZFQBIPDSf+sO
VLtWgt7D2B/GuGTgKUknnEBkjf6C9nb4hmeROJVw3biPemSmUo5Yf3O70N0hqInD
ha6ClM739CVZdTEr+l/YKjjIIP1cWV4cOtGLHZdfyTzv9UKxKfnqMUSjsOoJ6S8H
8fBkCdkVyRNAv2nRDL2Y0F4bDXRH4Hk8OVzJoYuh7BTStEiN+ydO44B7nSwqKGyD
rXfA4Yn54w0LA4DxYK1X3MVomagzJrGN6cPAJ56OiSW+OCRq+4hinzzZRV90eJIQ
93U3FbvlCKrsIKXN92LNnqqKVHM2EPLcuJuZGQPv95L0s7R/naQd6rweBITPAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUbMlLtPmvpUPujIwtg8C2l4QAxQcwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1MzI4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqqdjANBgkqhkiG9w0BAQsFAAOCAQEADvan
QRq0fvkhT3x6CQ9RZbt2EI3VUGKsGK0yrIkeDK2+7B+zrit153Fs3ufK0YNyBN84
pFIPXSuQk7niCDpnS/41mksbPbazk30gqt5DGpMX4MWYS+QKqiva726Xc2zAyaJ/
9HzD1M4JOk9ASeWWDxyCCMGkPYMBTdG79yH3ZX2FEkpLjrs6RJUPqfZL3D9miJcf
rAak1Cg5COGfxAhTFQ8wbj4TOhxXv4nV2SXfDk7c0049wEj/XH9fVq4glOOaIQ5q
POPZTBVoJemR+GQifYN5V5UUaD3c4JcrRwx8cYklhdKpI4UjO3TODh6ltf12G5QN
GoPXGXffZ3e3ZIoHUg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:44 2026 by rpki-client