Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145358.roa
File: AS145358.roa (raw, json)
Hash identifier: El2TcfNxy/01xAjxExQoVVocuRPCtMXOxG48Sud9ZMo=
Subject key identifier: 4D:9F:DC:B5:C2:DF:72:DA:F9:86:25:2D:7C:C6:79:48:56:EC:F8:77
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0A50F4CF6939F0944F4463762E5E80076C9790A3
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145358.roa
Signing time: Tue 26 May 2026 02:35:23 +0000
ROA not before: Tue 26 May 2026 02:30:23 +0000
ROA not after: Tue 25 May 2027 02:35:23 +0000
asID: 145358
IP address blocks: 240a:aa94::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:50:f4:cf:69:39:f0:94:4f:44:63:76:2e:5e:80:07:6c:97:90:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:30:23 2026 GMT
Not After : May 25 02:35:23 2027 GMT
Subject: CN=4D9FDCB5C2DF72DAF986252D7CC6794856ECF877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:44:84:10:7e:1a:c4:9a:ab:b8:a3:f5:cb:69:
07:a8:a9:5b:cd:34:1c:96:2e:e1:90:25:bf:12:9f:
3b:57:ed:e5:b6:41:0c:e4:4e:36:55:7c:ee:25:5e:
cb:b1:1d:75:21:bd:87:83:47:7f:f0:89:66:3f:0a:
27:3f:70:6c:38:87:47:5a:bc:1c:2b:51:e6:50:1f:
b0:d3:e8:87:11:32:32:27:91:2e:2f:ae:62:5b:fe:
bb:f0:ef:a1:4f:a2:c8:5f:02:dd:f6:5d:23:2f:53:
9c:17:7b:1c:34:78:a8:c5:02:59:c9:74:29:13:ae:
8b:68:65:f4:1a:ac:fa:75:6f:b2:8b:d4:45:d6:1b:
40:56:4f:1b:1d:88:59:da:b2:56:e5:0f:c1:e7:17:
37:00:48:89:27:0b:45:cd:b0:4c:e1:65:8b:75:10:
5c:11:14:fc:b2:38:e1:de:8b:95:08:fc:e9:ab:30:
b8:27:6c:17:e3:0f:a4:e4:6e:f0:e7:84:b3:02:c1:
c0:fe:6c:9d:a3:1b:93:85:93:f9:16:43:e0:70:83:
fb:ee:81:ff:fe:4d:a6:9c:b9:eb:7f:d6:9f:7e:97:
77:d1:c1:9b:c6:d9:b7:cb:b4:ac:37:53:9d:3d:ef:
b9:b5:63:8b:68:23:67:2c:d6:e1:cc:32:25:a6:01:
32:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:9F:DC:B5:C2:DF:72:DA:F9:86:25:2D:7C:C6:79:48:56:EC:F8:77
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145358.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa94::/32
Signature Algorithm: sha256WithRSAEncryption
1e:20:cd:2d:a6:2d:36:19:96:74:48:bf:e6:7e:bf:01:61:96:
86:84:ff:e3:41:32:c5:44:c9:fc:3a:83:85:f7:70:fa:e9:7d:
18:8e:3c:b5:8e:36:51:ca:52:90:d9:9b:d4:29:71:6a:3a:c1:
4d:03:e9:0f:92:c8:de:99:18:dc:f9:b5:e8:29:b1:29:02:15:
7f:b4:3e:a6:cd:f9:0e:43:ad:48:d6:00:4e:dc:09:58:4b:bd:
c9:35:a5:36:15:30:14:e4:64:c1:62:ca:23:f5:aa:e9:f3:7d:
1f:56:f0:8b:6f:d5:3c:54:e0:98:c3:f6:f4:e1:1b:13:59:fb:
c7:f8:24:8c:89:e6:92:41:e0:03:5a:2b:8e:db:a8:66:0f:18:
7f:4f:12:9c:bb:01:a1:02:e5:3a:01:36:88:bc:c8:cd:d2:a6:
48:37:1a:c3:50:ad:12:21:e7:fb:d3:78:8f:39:9d:57:0e:8e:
60:21:c4:9c:51:6d:d3:47:0e:13:3f:b2:48:00:8e:b8:f8:4e:
a0:06:42:bf:d7:fa:17:cd:e8:6e:07:96:51:a9:17:e3:3d:00:
24:8e:9b:12:c7:34:24:e2:eb:26:08:0a:89:bd:ed:bf:42:1b:
c6:92:82:22:47:7f:75:23:0a:b2:16:0d:c3:ed:44:99:37:5d:
e5:37:bd:38
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUClD0z2k58JRPRGN2Ll6AB2yXkKMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMjMwMjNaFw0yNzA1MjUwMjM1MjNaMDMxMTAvBgNV
BAMTKDREOUZEQ0I1QzJERjcyREFGOTg2MjUyRDdDQzY3OTQ4NTZFQ0Y4NzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgRIQQfhrEmqu4o/XLaQeoqVvN
NByWLuGQJb8SnztX7eW2QQzkTjZVfO4lXsuxHXUhvYeDR3/wiWY/Cic/cGw4h0da
vBwrUeZQH7DT6IcRMjInkS4vrmJb/rvw76FPoshfAt32XSMvU5wXexw0eKjFAlnJ
dCkTrotoZfQarPp1b7KL1EXWG0BWTxsdiFnaslblD8HnFzcASIknC0XNsEzhZYt1
EFwRFPyyOOHei5UI/OmrMLgnbBfjD6TkbvDnhLMCwcD+bJ2jG5OFk/kWQ+Bwg/vu
gf/+Taacuet/1p9+l3fRwZvG2bfLtKw3U50977m1Y4toI2cs1uHMMiWmATKVAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUTZ/ctcLfctr5hiUtfMZ5SFbs+HcwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1MzU4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqqlDANBgkqhkiG9w0BAQsFAAOCAQEAHiDN
LaYtNhmWdEi/5n6/AWGWhoT/40EyxUTJ/DqDhfdw+ul9GI48tY42UcpSkNmb1Clx
ajrBTQPpD5LI3pkY3Pm16CmxKQIVf7Q+ps35DkOtSNYATtwJWEu9yTWlNhUwFORk
wWLKI/Wq6fN9H1bwi2/VPFTgmMP29OEbE1n7x/gkjInmkkHgA1orjtuoZg8Yf08S
nLsBoQLlOgE2iLzIzdKmSDcaw1CtEiHn+9N4jzmdVw6OYCHEnFFt00cOEz+ySACO
uPhOoAZCv9f6F83obgeWUakX4z0AJI6bEsc0JOLrJggKib3tv0IbxpKCIkd/dSMK
shYNw+1EmTdd5Te9OA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:42 2026 by rpki-client