Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145420.roa
File: AS145420.roa (raw, json)
Hash identifier: BZOUxO26tLo+JvUrQLukDRQaMqx966vttR/tpbyE0cg=
Subject key identifier: C0:ED:CE:BB:D0:D4:8A:FE:C6:A3:63:ED:E0:3F:06:CD:2D:BA:69:F8
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1883F627FD779FE040407241E9960D9CC2EFD818
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145420.roa
Signing time: Fri 22 May 2026 02:47:28 +0000
ROA not before: Fri 22 May 2026 02:42:28 +0000
ROA not after: Fri 21 May 2027 02:47:28 +0000
asID: 145420
IP address blocks: 240a:aad2::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:83:f6:27:fd:77:9f:e0:40:40:72:41:e9:96:0d:9c:c2:ef:d8:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:42:28 2026 GMT
Not After : May 21 02:47:28 2027 GMT
Subject: CN=C0EDCEBBD0D48AFEC6A363EDE03F06CD2DBA69F8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:21:7e:6b:40:ac:43:66:eb:bd:5d:e6:20:6f:
d7:51:12:49:89:1d:90:be:49:eb:d0:ce:36:5f:dd:
85:2e:60:9e:2c:70:45:d6:45:e0:e0:c8:0a:06:87:
6a:e0:0e:42:5b:1b:fa:95:2f:c9:fc:f2:7f:ff:46:
97:68:d5:2b:12:29:4e:da:47:cc:23:7d:20:48:d0:
4e:ab:47:31:58:16:c0:2d:f4:be:e0:c8:02:83:a6:
a5:bc:c1:3f:61:a4:c5:06:ec:45:0a:cf:5a:15:2c:
d9:7c:69:42:ef:06:a7:b5:97:d6:2d:3e:8b:8b:6b:
7b:1c:8d:bb:08:9b:d5:34:44:59:ec:e9:c2:7a:d6:
10:3d:9f:74:1f:2b:0d:4c:7e:b3:e9:bb:19:5c:81:
2d:6f:94:47:2d:f8:75:c7:81:56:8f:9a:c8:f0:9a:
a8:cc:bb:e4:a1:f4:d5:a6:93:e1:2b:07:dd:22:83:
cf:9b:f9:dd:e2:95:91:3a:48:fb:c7:f9:b8:9d:cc:
17:29:78:55:7c:95:6d:36:b3:7d:49:66:77:5d:51:
75:02:80:98:a8:91:35:f7:1f:13:76:42:db:62:09:
fd:aa:7c:2c:92:dc:94:b6:e9:55:0f:39:85:cd:3a:
a5:5c:a1:f8:9d:73:68:58:07:12:5f:d5:32:e3:68:
80:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:ED:CE:BB:D0:D4:8A:FE:C6:A3:63:ED:E0:3F:06:CD:2D:BA:69:F8
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145420.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aad2::/32
Signature Algorithm: sha256WithRSAEncryption
bd:3c:db:5e:47:ee:92:63:1f:24:86:90:35:7a:86:d9:39:1c:
9f:dc:2c:01:88:eb:96:34:68:be:85:be:0a:2c:af:67:8b:7f:
d6:17:49:ed:eb:16:a3:b5:b1:cd:55:ae:1a:0e:67:74:31:b5:
19:e9:dc:86:83:7a:6d:1d:65:9a:81:2b:ea:51:5f:64:79:50:
17:9d:f3:e3:0d:eb:77:fb:e5:50:f7:c8:22:2d:22:47:95:dc:
62:83:81:ea:16:7d:e2:58:60:a4:9c:50:15:3f:96:d0:46:89:
04:78:f0:86:38:1a:60:48:ea:87:75:85:b8:e9:47:3d:72:9d:
c3:6e:df:1b:c4:06:63:5e:da:6d:c9:b3:37:ed:80:51:78:c5:
81:88:d8:16:07:94:5c:27:92:57:73:5a:d9:38:de:4c:fd:8a:
4b:c4:56:68:70:07:7b:ad:d7:e9:89:1c:b1:4f:22:a4:47:85:
82:15:b4:03:bf:71:54:2e:8c:c1:9c:ec:ac:24:ab:ce:ce:88:
4e:3d:99:f4:ff:96:12:be:2c:7e:a7:f4:a3:1a:9a:20:1d:cf:
3f:d6:07:cd:01:30:24:25:bd:1d:47:d3:ce:d3:b4:ff:21:2f:
13:b7:5f:bd:3d:ae:f3:da:af:dc:35:4d:0f:9b:14:5d:27:e9:
14:3d:2b:f1
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUGIP2J/13n+BAQHJB6ZYNnMLv2BgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwMjQyMjhaFw0yNzA1MjEwMjQ3MjhaMDMxMTAvBgNV
BAMTKEMwRURDRUJCRDBENDhBRkVDNkEzNjNFREUwM0YwNkNEMkRCQTY5RjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkIX5rQKxDZuu9XeYgb9dREkmJ
HZC+SevQzjZf3YUuYJ4scEXWReDgyAoGh2rgDkJbG/qVL8n88n//Rpdo1SsSKU7a
R8wjfSBI0E6rRzFYFsAt9L7gyAKDpqW8wT9hpMUG7EUKz1oVLNl8aULvBqe1l9Yt
PouLa3scjbsIm9U0RFns6cJ61hA9n3QfKw1MfrPpuxlcgS1vlEct+HXHgVaPmsjw
mqjMu+Sh9NWmk+ErB90ig8+b+d3ilZE6SPvH+bidzBcpeFV8lW02s31JZnddUXUC
gJiokTX3HxN2QttiCf2qfCyS3JS26VUPOYXNOqVcofidc2hYBxJf1TLjaICFAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUwO3Ou9DUiv7Go2Pt4D8GzS26afgwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1NDIwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqq0jANBgkqhkiG9w0BAQsFAAOCAQEAvTzb
XkfukmMfJIaQNXqG2Tkcn9wsAYjrljRovoW+CiyvZ4t/1hdJ7esWo7WxzVWuGg5n
dDG1GenchoN6bR1lmoEr6lFfZHlQF53z4w3rd/vlUPfIIi0iR5XcYoOB6hZ94lhg
pJxQFT+W0EaJBHjwhjgaYEjqh3WFuOlHPXKdw27fG8QGY17abcmzN+2AUXjFgYjY
FgeUXCeSV3Na2TjeTP2KS8RWaHAHe63X6YkcsU8ipEeFghW0A79xVC6MwZzsrCSr
zs6ITj2Z9P+WEr4sfqf0oxqaIB3PP9YHzQEwJCW9HUfTztO0/yEvE7dfvT2u89qv
3DVND5sUXSfpFD0r8Q==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:03 2026 by rpki-client