Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145343.roa
File: AS145343.roa (raw, json)
Hash identifier: PpuqGVLt73b/a7mFWoUkz5FU9KBV5BvlGlHnLCWs4GA=
Subject key identifier: 28:19:5E:BD:C6:68:C3:77:59:96:44:48:61:AE:06:59:5B:82:E3:F9
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6E9472E86F17AC77D2B42D37BD9B5A1D4945EDCD
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145343.roa
Signing time: Mon 25 May 2026 03:19:18 +0000
ROA not before: Mon 25 May 2026 03:14:18 +0000
ROA not after: Mon 24 May 2027 03:19:18 +0000
asID: 145343
IP address blocks: 240a:aa85::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:94:72:e8:6f:17:ac:77:d2:b4:2d:37:bd:9b:5a:1d:49:45:ed:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:18 2026 GMT
Not After : May 24 03:19:18 2027 GMT
Subject: CN=28195EBDC668C3775996444861AE06595B82E3F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:65:c3:24:3d:07:cc:23:81:82:fc:20:8f:15:
a1:65:b8:41:31:a2:ec:18:b2:c2:6e:ba:2d:21:10:
ad:6c:92:5a:20:45:1e:8b:5d:c8:d3:06:c2:f8:f8:
2b:a6:18:62:de:81:f3:de:07:75:a4:77:60:80:7b:
b3:b3:0d:c3:7e:d7:5d:d8:1c:57:71:30:89:20:a1:
bb:ae:01:05:af:c8:ea:81:32:b9:82:51:f5:af:e6:
25:d1:9d:9c:3a:78:06:52:9c:3e:62:1b:d2:ff:90:
47:97:8c:27:f5:0a:1a:00:2b:01:18:85:3d:c7:04:
9b:cf:e3:fd:14:00:b3:d5:ac:4a:3b:6f:58:6e:1e:
cd:16:14:0c:43:31:5a:92:1b:47:e6:c2:0f:97:c1:
3c:64:ae:0b:04:ec:cf:31:d2:13:9d:e0:b0:24:5b:
59:3f:d5:40:dc:7a:eb:d4:bd:a3:d5:04:4b:78:65:
d7:fe:20:d9:2f:9d:f5:01:48:d6:70:cf:b1:55:a2:
5c:a1:b7:b3:c9:81:5e:ab:8a:b9:fd:ee:84:d9:2c:
a3:79:17:7c:da:a9:a4:8f:56:25:ba:37:4d:8c:9b:
f1:39:bd:17:51:14:a2:46:6c:b3:2c:6b:b2:f0:5b:
00:dd:3a:24:e4:7d:b1:1f:3c:ce:21:1c:83:ce:54:
17:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:19:5E:BD:C6:68:C3:77:59:96:44:48:61:AE:06:59:5B:82:E3:F9
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145343.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa85::/32
Signature Algorithm: sha256WithRSAEncryption
af:1c:ff:ad:66:19:f5:08:5d:8b:b8:86:50:e7:05:30:f9:de:
4a:67:70:9c:8d:03:7c:21:28:df:ba:0f:79:2f:eb:41:8a:b9:
a5:27:52:10:2d:d4:2e:0b:f6:c0:01:dd:1e:d2:c7:95:2a:1e:
70:79:25:0c:2f:5f:e5:eb:34:06:b9:e9:58:01:3c:f4:93:b3:
96:5e:a2:c1:69:c9:31:bc:b8:c2:9e:16:50:98:b1:dc:eb:7a:
e0:48:2d:69:08:84:03:a5:79:1e:b0:87:01:c8:f2:82:65:76:
79:0a:bf:cf:fb:94:3a:ef:5a:cd:7e:13:e5:b7:f2:3e:25:07:
43:aa:03:9a:0d:75:18:be:40:d3:6a:50:d1:aa:8f:70:ab:7a:
58:20:2b:6f:8c:9c:04:b8:1e:2c:7c:19:75:4c:e1:d1:95:7d:
a2:9e:a6:20:9c:54:5f:3e:e6:1d:86:ec:9e:f0:62:42:6d:0b:
90:6d:2f:2a:07:9b:56:9c:74:ac:7d:a8:41:57:9f:3b:74:07:
3e:af:6d:43:43:07:dd:d8:05:44:ae:f1:ff:16:de:e7:57:cf:
42:6f:4f:e3:48:f1:b7:b7:df:49:f4:29:e1:97:97:6f:b5:e5:
21:20:32:e9:d5:59:f5:a8:b0:95:b0:d4:54:aa:7a:8c:f9:d2:
5e:b6:06:c7
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUbpRy6G8XrHfStC03vZtaHUlF7c0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMzE0MThaFw0yNzA1MjQwMzE5MThaMDMxMTAvBgNV
BAMTKDI4MTk1RUJEQzY2OEMzNzc1OTk2NDQ0ODYxQUUwNjU5NUI4MkUzRjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrZcMkPQfMI4GC/CCPFaFluEEx
ouwYssJuui0hEK1sklogRR6LXcjTBsL4+CumGGLegfPeB3Wkd2CAe7OzDcN+113Y
HFdxMIkgobuuAQWvyOqBMrmCUfWv5iXRnZw6eAZSnD5iG9L/kEeXjCf1ChoAKwEY
hT3HBJvP4/0UALPVrEo7b1huHs0WFAxDMVqSG0fmwg+XwTxkrgsE7M8x0hOd4LAk
W1k/1UDceuvUvaPVBEt4Zdf+INkvnfUBSNZwz7FVolyht7PJgV6rirn97oTZLKN5
F3zaqaSPViW6N02Mm/E5vRdRFKJGbLMsa7LwWwDdOiTkfbEfPM4hHIPOVBfjAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUKBlevcZow3dZlkRIYa4GWVuC4/kwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1MzQzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqqhTANBgkqhkiG9w0BAQsFAAOCAQEArxz/
rWYZ9Qhdi7iGUOcFMPneSmdwnI0DfCEo37oPeS/rQYq5pSdSEC3ULgv2wAHdHtLH
lSoecHklDC9f5es0BrnpWAE89JOzll6iwWnJMby4wp4WUJix3Ot64EgtaQiEA6V5
HrCHAcjygmV2eQq/z/uUOu9azX4T5bfyPiUHQ6oDmg11GL5A02pQ0aqPcKt6WCAr
b4ycBLgeLHwZdUzh0ZV9op6mIJxUXz7mHYbsnvBiQm0LkG0vKgebVpx0rH2oQVef
O3QHPq9tQ0MH3dgFRK7x/xbe51fPQm9P40jxt7ffSfQp4ZeXb7XlISAy6dVZ9aiw
lbDUVKp6jPnSXrYGxw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:36 2026 by rpki-client