Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145383.roa
File: AS145383.roa (raw, json)
Hash identifier: 6EaXewdzu6ASai2slZBdaXVT0mIK3Z9AdXFrjcbubBQ=
Subject key identifier: F2:A6:C8:BE:8F:E6:FD:69:C7:E2:F8:A3:E1:BF:1B:18:97:DF:5B:4E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2D85FB1124B6523C16321B04ABB1117D2EE40F83
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145383.roa
Signing time: Fri 22 May 2026 01:50:36 +0000
ROA not before: Fri 22 May 2026 01:45:36 +0000
ROA not after: Fri 21 May 2027 01:50:36 +0000
asID: 145383
IP address blocks: 240a:aaad::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:85:fb:11:24:b6:52:3c:16:32:1b:04:ab:b1:11:7d:2e:e4:0f:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:36 2026 GMT
Not After : May 21 01:50:36 2027 GMT
Subject: CN=F2A6C8BE8FE6FD69C7E2F8A3E1BF1B1897DF5B4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:74:28:bb:81:41:ea:14:23:86:3b:fc:a3:a1:
ed:c7:44:5d:b2:65:a7:72:35:5c:f3:55:6a:22:3e:
48:c9:7c:7c:ec:e1:9c:91:3d:b5:14:8b:86:c5:41:
e4:e9:b2:db:e1:16:80:13:b3:d6:00:6b:6f:d1:c5:
7c:2f:ab:66:9f:3d:a6:57:df:f4:d6:a9:2f:23:12:
2c:ce:6d:66:04:91:b3:30:1b:c8:11:b8:8b:28:2c:
88:97:ea:10:49:6e:16:b7:d3:7b:59:94:20:ec:30:
f3:7c:eb:a8:de:2d:fe:49:9a:60:6e:a5:7b:7b:2f:
68:39:e0:21:7f:e0:08:43:2a:18:c4:73:13:c6:a3:
72:7b:5d:2d:75:a5:1e:c9:4a:43:7a:0a:51:bd:a2:
b6:10:1e:75:24:ac:be:39:15:f8:7a:c3:2e:38:cb:
ba:ee:80:bc:7b:72:97:cc:ce:79:bd:1f:80:16:59:
2b:1e:5d:5c:bd:60:45:81:83:b1:19:3c:56:77:a2:
6c:3a:bb:84:64:e1:ad:c1:b4:11:37:57:b7:c1:00:
c7:ad:cc:8e:4b:95:13:2b:1d:cf:52:a2:ed:44:9c:
1b:05:1f:36:8c:a5:59:48:36:05:ba:b3:1a:bd:3c:
38:66:e1:9a:a0:93:65:7e:a6:0c:19:92:c7:66:c2:
76:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:A6:C8:BE:8F:E6:FD:69:C7:E2:F8:A3:E1:BF:1B:18:97:DF:5B:4E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145383.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aaad::/32
Signature Algorithm: sha256WithRSAEncryption
b6:19:1b:0f:89:f2:f5:7d:4d:35:5b:9e:82:cb:1e:87:fe:63:
78:c3:0d:d2:25:05:08:72:52:5f:2c:91:8c:df:9e:7f:07:f3:
08:7b:63:8f:b3:7c:2a:d3:84:2c:47:7a:3c:83:7e:34:c6:17:
fb:db:76:0b:04:a0:c1:67:0c:53:f8:ef:9a:dd:56:29:1d:af:
ba:0a:cd:a8:d4:d0:0a:2e:7a:a6:9d:0c:7b:7f:83:3a:18:ea:
d0:18:fd:c8:cf:8f:d9:ba:68:68:86:95:47:fd:67:4c:2e:1d:
70:e6:32:64:17:c9:20:a0:d1:3b:dd:db:fe:87:1c:c2:5b:44:
d9:db:ff:dd:30:17:10:31:49:c1:3c:cb:53:21:95:f1:f6:32:
4c:c6:71:0c:61:63:99:cd:e1:51:28:b8:87:61:9f:3a:84:5f:
2f:d6:e6:7b:1a:f4:7d:4a:13:9a:e4:d1:6b:95:f0:ed:71:06:
f3:e8:e0:02:71:41:25:31:56:20:6e:fa:f1:4b:63:52:34:cb:
8c:de:aa:20:36:bf:de:a6:a0:e8:0b:34:c4:71:4a:9e:e3:d2:
68:2d:3a:b5:43:23:ee:d2:25:b5:03:45:c8:2b:ea:b3:12:cd:
00:d8:0f:34:b5:88:2f:ed:e9:2d:42:12:94:19:ee:56:c1:ba:
7c:b2:7d:3f
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIULYX7ESS2UjwWMhsEq7ERfS7kD4MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwMTQ1MzZaFw0yNzA1MjEwMTUwMzZaMDMxMTAvBgNV
BAMTKEYyQTZDOEJFOEZFNkZENjlDN0UyRjhBM0UxQkYxQjE4OTdERjVCNEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkdCi7gUHqFCOGO/yjoe3HRF2y
ZadyNVzzVWoiPkjJfHzs4ZyRPbUUi4bFQeTpstvhFoATs9YAa2/RxXwvq2afPaZX
3/TWqS8jEizObWYEkbMwG8gRuIsoLIiX6hBJbha303tZlCDsMPN866jeLf5JmmBu
pXt7L2g54CF/4AhDKhjEcxPGo3J7XS11pR7JSkN6ClG9orYQHnUkrL45Ffh6wy44
y7rugLx7cpfMznm9H4AWWSseXVy9YEWBg7EZPFZ3omw6u4Rk4a3BtBE3V7fBAMet
zI5LlRMrHc9Sou1EnBsFHzaMpVlINgW6sxq9PDhm4Zqgk2V+pgwZksdmwnZBAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU8qbIvo/m/WnH4vij4b8bGJffW04wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1MzgzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqqrTANBgkqhkiG9w0BAQsFAAOCAQEAthkb
D4ny9X1NNVuegsseh/5jeMMN0iUFCHJSXyyRjN+efwfzCHtjj7N8KtOELEd6PIN+
NMYX+9t2CwSgwWcMU/jvmt1WKR2vugrNqNTQCi56pp0Me3+DOhjq0Bj9yM+P2bpo
aIaVR/1nTC4dcOYyZBfJIKDRO93b/occwltE2dv/3TAXEDFJwTzLUyGV8fYyTMZx
DGFjmc3hUSi4h2GfOoRfL9bmexr0fUoTmuTRa5Xw7XEG8+jgAnFBJTFWIG768Utj
UjTLjN6qIDa/3qag6As0xHFKnuPSaC06tUMj7tIltQNFyCvqsxLNANgPNLWIL+3p
LUISlBnuVsG6fLJ9Pw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:04 2026 by rpki-client