Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145349.roa
File: AS145349.roa (raw, json)
Hash identifier: tPq1DJhOcrioqrSJoV4XTvhxsbfUm3CxtKmhEe3amIs=
Subject key identifier: B6:5E:8D:16:66:27:FB:67:9C:40:42:D0:48:A0:70:A0:1A:D9:70:3D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2D1A7DCE1354711EAF8992B14064B6937C27168B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145349.roa
Signing time: Mon 25 May 2026 01:20:19 +0000
ROA not before: Mon 25 May 2026 01:15:19 +0000
ROA not after: Mon 24 May 2027 01:20:19 +0000
asID: 145349
IP address blocks: 240a:aa8b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:1a:7d:ce:13:54:71:1e:af:89:92:b1:40:64:b6:93:7c:27:16:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:15:19 2026 GMT
Not After : May 24 01:20:19 2027 GMT
Subject: CN=B65E8D166627FB679C4042D048A070A01AD9703D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:73:e1:83:e0:df:fe:a2:2c:62:d9:59:20:5d:
63:04:69:2b:6b:74:cd:0e:02:b9:03:51:82:9a:a4:
4a:9c:ba:20:08:73:fb:e6:06:45:3a:f8:81:43:ff:
e1:88:6a:8d:b2:33:34:a1:40:96:f7:32:3e:db:2a:
49:0c:4e:b1:db:b4:1b:1e:b3:c1:77:5f:df:68:08:
bc:ec:d5:c6:5c:27:e8:57:b7:ce:f8:cf:a8:09:75:
81:68:d4:0d:91:76:e6:3b:88:5c:ba:87:2d:60:e6:
0a:66:fb:29:6f:b0:2a:a3:34:8d:96:47:e1:cf:9f:
0c:00:f2:19:5f:c3:9a:59:c4:53:ec:8b:e8:31:cc:
c4:f3:d4:c0:79:b4:0d:b2:0d:e8:ea:5f:ee:9c:e1:
d9:e5:73:3f:23:cc:b8:20:ec:e0:ba:7b:d2:6e:27:
4f:dd:82:cd:3c:3e:dd:70:a7:83:45:3b:79:8a:a4:
f5:1d:fa:2a:71:0b:f2:de:f1:47:87:39:43:82:0d:
b5:96:60:a2:2f:35:d5:a9:84:5e:e0:1b:35:97:40:
2c:cd:97:08:05:08:84:af:3c:92:ca:69:64:bd:6d:
f2:79:f2:43:3b:32:8b:34:58:ec:7d:ca:8b:ee:f8:
1f:17:1c:5b:ac:fe:ad:1f:29:d0:c1:5d:3f:77:d9:
45:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:5E:8D:16:66:27:FB:67:9C:40:42:D0:48:A0:70:A0:1A:D9:70:3D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145349.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa8b::/32
Signature Algorithm: sha256WithRSAEncryption
58:47:27:5e:66:1e:f8:74:f6:b1:2b:fb:50:0c:cf:43:4d:57:
f3:11:9a:86:b4:f0:b3:66:3d:75:42:93:02:c4:99:63:80:c8:
c7:96:03:1b:77:d5:6b:b8:a5:fe:95:a0:32:41:de:c9:51:f8:
ef:92:24:45:e1:e6:ed:f6:b8:bf:36:db:a6:b3:41:51:cc:0d:
6c:05:0b:f3:65:92:88:2e:b8:58:52:9a:09:90:f9:0a:56:b1:
5c:8a:a3:1b:ff:79:90:98:8e:dd:8b:b8:bf:08:aa:53:55:1f:
0b:ad:c9:70:f5:a3:10:a2:d4:87:cf:e5:82:e7:8a:f6:c5:e4:
39:4f:73:5f:d7:63:88:61:bb:a9:02:8b:a0:e0:4e:96:0c:54:
0e:12:39:18:22:12:a7:50:0f:90:93:0f:7a:1f:a4:a0:da:0e:
45:3b:fb:e8:81:88:1e:a7:93:23:2f:b9:27:be:29:d3:92:b0:
0f:58:09:9a:f5:c9:67:fe:3d:e7:15:ec:59:9f:42:8e:cb:d5:
16:8a:67:d2:fd:65:01:7f:a8:ed:17:34:26:4e:d1:8a:3e:1d:
14:0c:57:bd:42:00:25:4b:98:fb:67:76:9f:a9:f3:1b:b8:da:
c6:aa:7f:3f:a4:44:e3:72:c9:6b:a3:ee:85:de:27:d3:bf:cd:
10:c0:3a:02
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIULRp9zhNUcR6viZKxQGS2k3wnFoswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMTE1MTlaFw0yNzA1MjQwMTIwMTlaMDMxMTAvBgNV
BAMTKEI2NUU4RDE2NjYyN0ZCNjc5QzQwNDJEMDQ4QTA3MEEwMUFEOTcwM0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxc+GD4N/+oixi2VkgXWMEaStr
dM0OArkDUYKapEqcuiAIc/vmBkU6+IFD/+GIao2yMzShQJb3Mj7bKkkMTrHbtBse
s8F3X99oCLzs1cZcJ+hXt874z6gJdYFo1A2RduY7iFy6hy1g5gpm+ylvsCqjNI2W
R+HPnwwA8hlfw5pZxFPsi+gxzMTz1MB5tA2yDejqX+6c4dnlcz8jzLgg7OC6e9Ju
J0/dgs08Pt1wp4NFO3mKpPUd+ipxC/Le8UeHOUOCDbWWYKIvNdWphF7gGzWXQCzN
lwgFCISvPJLKaWS9bfJ58kM7Mos0WOx9yovu+B8XHFus/q0fKdDBXT932UUHAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUtl6NFmYn+2ecQELQSKBwoBrZcD0wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1MzQ5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqqizANBgkqhkiG9w0BAQsFAAOCAQEAWEcn
XmYe+HT2sSv7UAzPQ01X8xGahrTws2Y9dUKTAsSZY4DIx5YDG3fVa7il/pWgMkHe
yVH475IkReHm7fa4vzbbprNBUcwNbAUL82WSiC64WFKaCZD5ClaxXIqjG/95kJiO
3Yu4vwiqU1UfC63JcPWjEKLUh8/lgueK9sXkOU9zX9djiGG7qQKLoOBOlgxUDhI5
GCISp1APkJMPeh+koNoORTv76IGIHqeTIy+5J74p05KwD1gJmvXJZ/495xXsWZ9C
jsvVFopn0v1lAX+o7Rc0Jk7Rij4dFAxXvUIAJUuY+2d2n6nzG7jaxqp/P6RE43LJ
a6Puhd4n07/NEMA6Ag==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:00 2026 by rpki-client