
Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145379.roa
File: AS145379.roa (raw, json)
Hash identifier: gheeA3MHIFXw3qhwT+298wq6oXuMjjB7/Ew2PBqjZlc=
Subject key identifier: 9F:4E:BF:E9:91:1F:1F:3E:D6:C5:92:E4:DE:AC:7C:99:E8:9F:BD:CF
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 698E4DE1CF76A88569540B5C71C4F80D8FB35CC1
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145379.roa
Signing time: Fri 22 May 2026 01:50:17 +0000
ROA not before: Fri 22 May 2026 01:45:17 +0000
ROA not after: Fri 21 May 2027 01:50:17 +0000
asID: 145379
IP address blocks: 240a:aaa9::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:8e:4d:e1:cf:76:a8:85:69:54:0b:5c:71:c4:f8:0d:8f:b3:5c:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:17 2026 GMT
Not After : May 21 01:50:17 2027 GMT
Subject: CN=9F4EBFE9911F1F3ED6C592E4DEAC7C99E89FBDCF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fe:9f:60:64:69:a0:4e:ec:39:34:53:de:a7:
54:33:28:89:e5:ed:91:83:a4:66:4c:67:07:be:9d:
aa:98:87:82:5e:cb:ed:e2:08:45:c6:58:88:54:f0:
51:56:eb:f3:1c:8b:19:c4:8a:c4:50:1d:98:05:87:
62:c7:9e:af:69:d7:e5:94:f3:a7:1e:6c:08:c8:53:
f3:2a:8e:26:fc:34:27:f6:35:78:6a:28:dd:a8:f5:
ef:1a:79:14:95:c1:b2:0f:05:59:c0:75:f3:de:b3:
5d:17:30:15:80:5b:31:61:cd:d9:c6:eb:99:b9:b0:
44:6b:a3:a1:43:e4:39:b4:27:f2:fd:64:ec:fd:5a:
96:12:a3:44:1e:60:7b:cc:dd:b1:88:d5:ff:ab:94:
00:db:56:e8:51:e4:4a:dc:37:7e:04:92:7a:9a:ba:
45:1c:43:9e:5b:70:88:5c:d0:91:fc:28:7a:21:9b:
21:56:ac:33:a0:80:a6:0b:56:f4:10:56:f5:70:bf:
33:8b:39:09:68:82:fe:94:9b:ea:e4:cc:7f:fc:e6:
bf:97:ad:99:ae:44:5b:42:29:4e:1d:76:28:d3:a6:
77:db:a2:0a:94:95:5c:69:eb:a8:fe:a4:11:3a:8d:
ca:a1:3f:d0:3e:19:9f:08:a8:53:45:7d:ef:f9:69:
14:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:4E:BF:E9:91:1F:1F:3E:D6:C5:92:E4:DE:AC:7C:99:E8:9F:BD:CF
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145379.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aaa9::/32
Signature Algorithm: sha256WithRSAEncryption
4a:3b:1a:b1:0a:4a:9c:c0:23:4c:00:8b:9b:d1:db:6a:df:02:
03:a3:d4:11:62:d9:aa:60:a3:c1:85:76:37:76:aa:b0:b6:4f:
ef:b7:32:b3:df:f6:24:d5:ee:0c:b0:f4:c7:a6:52:cc:f8:25:
bc:2d:ae:7f:c9:b4:42:8e:de:5e:73:ed:0c:84:ea:50:74:1a:
06:33:8f:7a:54:70:07:e5:ba:4b:10:3c:04:cc:f8:db:00:25:
d1:4f:7a:bb:a1:0a:1c:7f:a1:4e:9b:80:e0:1f:00:82:00:a2:
5c:b4:c2:b3:a9:64:f6:c2:09:3d:3b:9c:3e:c8:5f:2f:d8:08:
1d:31:df:10:49:7b:5f:69:57:08:07:ba:43:b4:86:8b:a4:f6:
af:ad:0c:77:b8:de:f1:bf:24:6f:ed:8d:96:cc:4e:ff:dc:9e:
7a:ec:29:14:0d:37:a7:d4:5a:cb:8e:10:63:0a:79:3c:45:06:
b3:93:55:8b:03:3c:90:ca:c9:f5:86:11:24:c9:07:ed:32:11:
92:fa:da:f2:45:ba:be:65:f7:94:97:5c:e2:9b:a9:8b:53:3c:
48:08:43:f8:fc:60:b7:d3:9f:fa:8b:46:76:71:d9:22:87:64:
bc:c9:c3:ea:05:2f:0f:1b:38:8c:64:16:69:3f:f7:9d:f5:1a:
62:05:4d:8a
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUaY5N4c92qIVpVAtcccT4DY+zXMEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwMTQ1MTdaFw0yNzA1MjEwMTUwMTdaMDMxMTAvBgNV
BAMTKDlGNEVCRkU5OTExRjFGM0VENkM1OTJFNERFQUM3Qzk5RTg5RkJEQ0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG/p9gZGmgTuw5NFPep1QzKInl
7ZGDpGZMZwe+naqYh4Jey+3iCEXGWIhU8FFW6/McixnEisRQHZgFh2LHnq9p1+WU
86cebAjIU/Mqjib8NCf2NXhqKN2o9e8aeRSVwbIPBVnAdfPes10XMBWAWzFhzdnG
65m5sERro6FD5Dm0J/L9ZOz9WpYSo0QeYHvM3bGI1f+rlADbVuhR5ErcN34Eknqa
ukUcQ55bcIhc0JH8KHohmyFWrDOggKYLVvQQVvVwvzOLOQlogv6Um+rkzH/85r+X
rZmuRFtCKU4ddijTpnfbogqUlVxp66j+pBE6jcqhP9A+GZ8IqFNFfe/5aRRDAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUn06/6ZEfHz7WxZLk3qx8meifvc8wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1Mzc5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqqqTANBgkqhkiG9w0BAQsFAAOCAQEASjsa
sQpKnMAjTACLm9Hbat8CA6PUEWLZqmCjwYV2N3aqsLZP77cys9/2JNXuDLD0x6ZS
zPglvC2uf8m0Qo7eXnPtDITqUHQaBjOPelRwB+W6SxA8BMz42wAl0U96u6EKHH+h
TpuA4B8AggCiXLTCs6lk9sIJPTucPshfL9gIHTHfEEl7X2lXCAe6Q7SGi6T2r60M
d7je8b8kb+2NlsxO/9yeeuwpFA03p9Ray44QYwp5PEUGs5NViwM8kMrJ9YYRJMkH
7TIRkvra8kW6vmX3lJdc4pupi1M8SAhD+Pxgt9Of+otGdnHZIodkvMnD6gUvDxs4
jGQWaT/3nfUaYgVNig==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:39 2026 by rpki-client