Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145404.roa
File: AS145404.roa (raw, json)
Hash identifier: AwK0a4LdJ8MFV1S9jECPaMaBUnFNB+T2sfDEDQVm2G8=
Subject key identifier: E6:8C:E1:E5:75:64:A6:03:AB:24:5E:70:E4:22:7F:8E:40:64:F8:B1
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3D9B7A45A5F69506DD2402174EDF7C03B781E065
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145404.roa
Signing time: Tue 26 May 2026 06:30:46 +0000
ROA not before: Tue 26 May 2026 06:25:46 +0000
ROA not after: Tue 25 May 2027 06:30:46 +0000
asID: 145404
IP address blocks: 240a:aac2::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:9b:7a:45:a5:f6:95:06:dd:24:02:17:4e:df:7c:03:b7:81:e0:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:25:46 2026 GMT
Not After : May 25 06:30:46 2027 GMT
Subject: CN=E68CE1E57564A603AB245E70E4227F8E4064F8B1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0c:23:0a:11:d6:f3:c9:d2:4f:85:73:b7:cc:
37:2d:52:39:b9:a4:7a:83:73:9d:f3:30:cb:79:9f:
d5:0f:d1:a0:6d:9e:0d:22:c6:1c:9c:a1:f8:cd:fb:
5b:0c:9a:a0:42:7f:8e:c3:69:c7:03:e1:11:c5:1a:
b6:cb:16:2c:4b:8b:ee:3d:d4:ca:91:d2:51:b4:bc:
6f:e8:3e:84:8e:2c:e6:f5:92:4a:e0:72:5e:86:ed:
7f:4e:c8:52:ea:36:c5:b4:f0:fb:7e:6d:dd:7d:d5:
a6:23:b5:2f:25:37:05:00:68:2b:1e:1e:20:30:c9:
aa:af:da:24:bc:db:78:71:fd:14:88:3f:52:95:af:
ff:57:9d:5f:55:ed:98:8e:96:35:33:0a:a2:ee:ef:
e7:37:21:09:8d:4e:2c:2d:a2:8c:10:6a:a1:b0:6c:
43:98:b2:51:c7:8e:96:a5:ed:e2:e2:12:a6:86:da:
fb:54:2e:29:18:1c:e4:44:95:44:89:40:95:60:15:
ed:06:3d:30:50:61:1c:c3:4c:73:b5:a3:37:b6:1e:
2c:32:f7:b7:e0:44:08:e8:d1:be:9b:65:b2:4f:6c:
db:0f:9d:f5:ac:6c:94:ba:db:3d:1a:a2:a0:86:fb:
0b:68:09:da:20:5a:bb:9b:cb:cd:c0:aa:04:2c:01:
09:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:8C:E1:E5:75:64:A6:03:AB:24:5E:70:E4:22:7F:8E:40:64:F8:B1
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145404.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aac2::/32
Signature Algorithm: sha256WithRSAEncryption
76:59:ab:b4:65:9c:15:cd:bb:e1:0e:a0:c0:34:4c:3e:12:5a:
93:3f:4e:78:6a:58:53:a5:f8:3c:a0:da:6c:70:c1:b2:85:b5:
74:1c:2d:63:61:6a:3a:00:09:30:01:99:46:33:f0:0b:ec:ae:
62:24:ac:ec:3a:43:d5:2a:a2:e3:4b:12:9d:7e:e8:7e:a3:70:
09:2a:83:4c:b5:77:f2:03:b0:03:77:76:43:13:1c:f8:a6:75:
f1:f3:f1:44:ed:be:cd:0c:87:28:8e:0d:ca:8b:cc:e7:2b:a0:
89:44:94:e2:2d:13:4b:28:19:10:b8:1b:bd:56:23:c0:27:bf:
41:3a:f6:57:b9:30:f3:16:23:72:b1:18:bb:ee:1f:31:50:39:
68:fe:62:f3:92:ce:22:ee:26:13:9b:63:60:2d:ea:26:d2:23:
e8:9c:11:41:90:63:86:86:e7:6e:d3:48:a0:37:be:b4:d3:3f:
5c:14:a7:05:52:1d:9c:65:2c:7b:e0:e9:f5:9a:27:38:ff:d5:
6f:02:96:2f:55:a2:ff:8b:f3:fa:ac:6f:a7:8b:d2:3f:9f:ec:
fd:27:a8:06:39:f5:3c:6d:5e:41:ac:26:b4:2a:9e:6e:c3:40:
8e:d1:67:47:2c:73:ef:67:9f:7e:a6:d3:98:2a:26:e0:83:fc:
8d:83:31:4e
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUPZt6RaX2lQbdJAIXTt98A7eB4GUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwNjI1NDZaFw0yNzA1MjUwNjMwNDZaMDMxMTAvBgNV
BAMTKEU2OENFMUU1NzU2NEE2MDNBQjI0NUU3MEU0MjI3RjhFNDA2NEY4QjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNDCMKEdbzydJPhXO3zDctUjm5
pHqDc53zMMt5n9UP0aBtng0ixhycofjN+1sMmqBCf47DaccD4RHFGrbLFixLi+49
1MqR0lG0vG/oPoSOLOb1kkrgcl6G7X9OyFLqNsW08Pt+bd191aYjtS8lNwUAaCse
HiAwyaqv2iS823hx/RSIP1KVr/9XnV9V7ZiOljUzCqLu7+c3IQmNTiwtoowQaqGw
bEOYslHHjpal7eLiEqaG2vtULikYHORElUSJQJVgFe0GPTBQYRzDTHO1oze2Hiwy
97fgRAjo0b6bZbJPbNsPnfWsbJS62z0aoqCG+wtoCdogWruby83AqgQsAQkbAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU5ozh5XVkpgOrJF5w5CJ/jkBk+LEwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1NDA0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqqwjANBgkqhkiG9w0BAQsFAAOCAQEAdlmr
tGWcFc274Q6gwDRMPhJakz9OeGpYU6X4PKDabHDBsoW1dBwtY2FqOgAJMAGZRjPw
C+yuYiSs7DpD1Sqi40sSnX7ofqNwCSqDTLV38gOwA3d2QxMc+KZ18fPxRO2+zQyH
KI4NyovM5yugiUSU4i0TSygZELgbvVYjwCe/QTr2V7kw8xYjcrEYu+4fMVA5aP5i
85LOIu4mE5tjYC3qJtIj6JwRQZBjhobnbtNIoDe+tNM/XBSnBVIdnGUse+Dp9Zon
OP/VbwKWL1Wi/4vz+qxvp4vSP5/s/SeoBjn1PG1eQawmtCqebsNAjtFnRyxz72ef
fqbTmCom4IP8jYMxTg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:34 2026 by rpki-client