Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145425.roa
File: AS145425.roa (raw, json)
Hash identifier: qNGuV6p/DWqN5Y798tBbjodS9ItocQ+R6HPODUUgjVQ=
Subject key identifier: E6:AE:1E:8D:3C:04:72:5F:FC:44:69:F2:E2:13:A2:53:7D:4D:C5:0B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7EA55E6C6E4A9EB0CBF58AE4AF07357D51416FF9
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145425.roa
Signing time: Fri 22 May 2026 06:46:09 +0000
ROA not before: Fri 22 May 2026 06:41:09 +0000
ROA not after: Fri 21 May 2027 06:46:09 +0000
asID: 145425
IP address blocks: 240a:aad7::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:a5:5e:6c:6e:4a:9e:b0:cb:f5:8a:e4:af:07:35:7d:51:41:6f:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:41:09 2026 GMT
Not After : May 21 06:46:09 2027 GMT
Subject: CN=E6AE1E8D3C04725FFC4469F2E213A2537D4DC50B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:a3:51:0f:af:3c:52:62:b0:70:2c:38:95:d4:
f2:c6:ee:5b:53:9b:c1:db:d2:b4:45:5e:c2:15:c8:
94:ee:57:41:93:d2:55:8f:58:a4:15:be:04:9a:67:
9b:01:ef:12:be:18:cf:f4:11:e7:03:da:6c:58:23:
bc:49:27:cf:73:d1:34:9c:4a:0c:91:f9:70:f2:b7:
ad:db:ab:50:93:dc:fc:a4:08:c3:1c:d2:e8:9a:c0:
1b:64:78:aa:61:72:60:20:ee:a4:d4:15:19:63:32:
1d:64:4f:85:aa:55:ac:48:86:13:12:27:77:41:96:
49:aa:51:8a:cc:42:94:74:14:0e:9d:8e:14:a5:12:
89:38:e4:57:de:95:e7:86:ef:ff:7a:84:27:1b:f9:
f3:59:16:13:bc:af:19:4f:52:9b:fe:08:2a:d8:fc:
60:8d:3e:50:de:49:c6:8c:d0:1c:d5:84:5b:8e:02:
39:76:10:91:55:1c:f6:47:51:4c:5c:e2:fc:0e:5f:
5d:21:66:b6:f4:d8:8a:04:99:d0:b3:ba:0c:b5:bb:
2b:59:5c:e1:c8:1b:bf:6c:1c:9b:1f:98:37:05:5d:
7c:62:90:69:b7:38:58:53:ea:ea:e7:7a:c3:f5:b7:
15:1e:ad:a0:fb:ca:d3:4d:cf:59:3d:03:94:1b:c7:
48:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:AE:1E:8D:3C:04:72:5F:FC:44:69:F2:E2:13:A2:53:7D:4D:C5:0B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145425.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aad7::/32
Signature Algorithm: sha256WithRSAEncryption
ad:95:fc:7e:d2:5f:9e:65:31:26:4b:02:01:45:ce:27:b2:80:
76:1b:fb:b0:14:4d:09:7b:28:b1:58:00:04:3e:59:f0:eb:6a:
dd:a8:77:52:65:67:a2:c7:48:80:ae:d9:d9:31:9e:41:1f:86:
ea:41:f6:7a:67:12:04:99:1b:bf:d2:0c:06:9f:77:92:00:1e:
19:50:27:28:48:50:85:70:c9:f7:cd:2c:04:13:34:f8:2b:b0:
fb:2c:34:b7:0f:6b:f6:7f:77:ec:e1:7b:f3:b1:34:ad:8d:83:
03:13:0e:38:63:47:ca:66:d5:38:43:46:c1:85:06:64:f5:61:
11:23:8a:94:a3:bb:0c:bf:03:7c:65:40:76:17:dc:47:7e:2a:
e0:cb:66:3e:93:87:d3:c3:ed:df:49:26:6f:39:76:09:0b:c5:
e0:24:99:b2:21:d8:cf:2f:d6:ac:18:fb:08:67:41:c2:7b:c5:
2c:86:bb:a4:5c:39:e2:a1:63:da:89:87:34:d9:13:34:91:0d:
a9:84:85:78:18:95:be:b6:80:9e:16:c1:b2:7f:0a:b4:4d:85:
5e:7d:49:58:f5:5d:83:bc:ab:34:7f:50:8b:ca:1e:b4:fa:31:
50:3f:61:47:82:25:91:7d:b8:b2:4e:f1:ac:53:b3:4f:88:90:
d0:d1:4e:d9
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUfqVebG5KnrDL9Yrkrwc1fVFBb/kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjQxMDlaFw0yNzA1MjEwNjQ2MDlaMDMxMTAvBgNV
BAMTKEU2QUUxRThEM0MwNDcyNUZGQzQ0NjlGMkUyMTNBMjUzN0Q0REM1MEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZo1EPrzxSYrBwLDiV1PLG7ltT
m8Hb0rRFXsIVyJTuV0GT0lWPWKQVvgSaZ5sB7xK+GM/0EecD2mxYI7xJJ89z0TSc
SgyR+XDyt63bq1CT3PykCMMc0uiawBtkeKphcmAg7qTUFRljMh1kT4WqVaxIhhMS
J3dBlkmqUYrMQpR0FA6djhSlEok45FfeleeG7/96hCcb+fNZFhO8rxlPUpv+CCrY
/GCNPlDeScaM0BzVhFuOAjl2EJFVHPZHUUxc4vwOX10hZrb02IoEmdCzugy1uytZ
XOHIG79sHJsfmDcFXXxikGm3OFhT6urnesP1txUeraD7ytNNz1k9A5Qbx0gxAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU5q4ejTwEcl/8RGny4hOiU31NxQswHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1NDI1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqq1zANBgkqhkiG9w0BAQsFAAOCAQEArZX8
ftJfnmUxJksCAUXOJ7KAdhv7sBRNCXsosVgABD5Z8Otq3ah3UmVnosdIgK7Z2TGe
QR+G6kH2emcSBJkbv9IMBp93kgAeGVAnKEhQhXDJ980sBBM0+Cuw+yw0tw9r9n93
7OF787E0rY2DAxMOOGNHymbVOENGwYUGZPVhESOKlKO7DL8DfGVAdhfcR34q4Mtm
PpOH08Pt30kmbzl2CQvF4CSZsiHYzy/WrBj7CGdBwnvFLIa7pFw54qFj2omHNNkT
NJENqYSFeBiVvraAnhbBsn8KtE2FXn1JWPVdg7yrNH9Qi8oetPoxUD9hR4IlkX24
sk7xrFOzT4iQ0NFO2Q==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:39 2026 by rpki-client