Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145429.roa
File: AS145429.roa (raw, json)
Hash identifier: saq0YvoSN+mTQYphJ3TvIRhEK/GckbDPijrGpBI1xH0=
Subject key identifier: 03:BA:F1:A2:31:26:4A:07:0E:1B:EE:1E:E7:A9:EA:25:8E:32:C6:95
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4616EEFA68A07639F67ABD6A2F0A0965BE4E60B8
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145429.roa
Signing time: Mon 25 May 2026 01:38:14 +0000
ROA not before: Mon 25 May 2026 01:33:14 +0000
ROA not after: Mon 24 May 2027 01:38:14 +0000
asID: 145429
IP address blocks: 240a:aadb::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:16:ee:fa:68:a0:76:39:f6:7a:bd:6a:2f:0a:09:65:be:4e:60:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:14 2026 GMT
Not After : May 24 01:38:14 2027 GMT
Subject: CN=03BAF1A231264A070E1BEE1EE7A9EA258E32C695
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f0:28:59:fd:72:f5:2e:8b:cf:b7:cc:02:7e:
ac:9b:8a:c1:d8:cf:3c:e3:3d:0d:06:2f:b7:e2:85:
bb:07:b2:da:0e:aa:0a:7e:61:d8:37:57:eb:6d:da:
4f:b8:00:4c:7c:b9:84:ce:eb:a5:02:18:0a:b6:66:
a1:41:5d:10:8e:85:6a:ad:6a:3b:0a:a0:59:37:48:
12:c2:ad:c4:92:06:da:1b:86:94:6c:99:24:ce:e9:
42:b4:0e:cf:ef:b7:9a:a0:a3:91:5b:67:34:e1:1a:
47:8c:f7:85:a2:80:fc:80:f6:7f:06:20:2f:de:d8:
8e:1b:e8:c5:a2:1e:2b:a0:c8:d9:fc:5f:75:d1:6c:
ca:b1:9b:f3:41:4e:9d:ae:ee:34:d3:85:25:ba:69:
a7:a5:85:8c:f6:67:ee:ac:43:63:b6:40:ed:fc:4b:
f2:a6:ed:a2:bc:07:21:a8:be:19:f0:c1:b7:1f:12:
b6:a2:2c:d8:89:c1:a5:da:86:83:bb:e2:6f:84:50:
c4:ba:3a:86:7a:cc:3d:68:5e:f7:04:b5:ab:27:db:
b5:cf:77:42:b8:75:5d:9b:b3:c1:e3:a5:ef:b5:7e:
0d:f7:9b:a0:3f:70:99:d0:54:59:48:4f:53:a6:13:
e6:a9:b0:3b:db:20:46:b8:45:31:77:04:90:e5:b3:
2e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:BA:F1:A2:31:26:4A:07:0E:1B:EE:1E:E7:A9:EA:25:8E:32:C6:95
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145429.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aadb::/32
Signature Algorithm: sha256WithRSAEncryption
09:8b:cb:5e:f3:da:cd:e6:ac:3b:b1:20:65:b1:d0:54:87:96:
b4:a2:40:bb:6a:d7:56:6e:8a:c8:4d:65:79:25:86:91:0c:e8:
c1:fe:6c:1e:eb:c2:04:0d:a9:3a:af:da:40:c3:57:26:6f:18:
3b:8a:17:60:1c:e5:eb:4f:aa:4f:cb:0c:36:77:04:ac:71:a3:
ae:16:95:97:cb:83:86:f1:e1:db:6b:3c:5e:40:ab:9c:3c:7d:
de:2d:08:3c:20:1d:3c:d6:77:76:5f:e7:32:f9:da:cb:45:26:
21:9c:f2:cc:ca:3d:3d:6b:31:73:82:1a:35:64:cd:ea:f8:d7:
10:88:ca:2f:b6:74:c9:a1:ea:ba:84:f1:27:9c:1b:1b:b6:70:
22:74:65:68:5d:be:f9:59:e2:56:f1:05:2f:45:7c:13:76:cf:
0f:fe:af:97:e2:d3:f8:8f:68:8b:0d:de:95:f8:03:7e:40:5e:
59:82:9e:11:ae:22:0a:3b:50:8a:25:eb:92:a9:41:19:e5:98:
08:ab:22:a9:04:ab:f4:f6:df:5b:5d:03:1c:d6:0e:60:8f:61:
6a:bb:07:01:58:10:f1:24:3a:c0:ac:84:ec:d0:cc:31:43:1d:
f9:66:bb:95:7a:eb:99:1a:67:5d:59:eb:43:de:70:bd:ab:58:
88:18:a7:9b
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIURhbu+migdjn2er1qLwoJZb5OYLgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMTMzMTRaFw0yNzA1MjQwMTM4MTRaMDMxMTAvBgNV
BAMTKDAzQkFGMUEyMzEyNjRBMDcwRTFCRUUxRUU3QTlFQTI1OEUzMkM2OTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC48ChZ/XL1LovPt8wCfqybisHY
zzzjPQ0GL7fihbsHstoOqgp+Ydg3V+tt2k+4AEx8uYTO66UCGAq2ZqFBXRCOhWqt
ajsKoFk3SBLCrcSSBtobhpRsmSTO6UK0Ds/vt5qgo5FbZzThGkeM94WigPyA9n8G
IC/e2I4b6MWiHiugyNn8X3XRbMqxm/NBTp2u7jTThSW6aaelhYz2Z+6sQ2O2QO38
S/Km7aK8ByGovhnwwbcfEraiLNiJwaXahoO74m+EUMS6OoZ6zD1oXvcEtasn27XP
d0K4dV2bs8Hjpe+1fg33m6A/cJnQVFlIT1OmE+apsDvbIEa4RTF3BJDlsy63AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUA7rxojEmSgcOG+4e56nqJY4yxpUwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1NDI5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqq2zANBgkqhkiG9w0BAQsFAAOCAQEACYvL
XvPazeasO7EgZbHQVIeWtKJAu2rXVm6KyE1leSWGkQzowf5sHuvCBA2pOq/aQMNX
Jm8YO4oXYBzl60+qT8sMNncErHGjrhaVl8uDhvHh22s8XkCrnDx93i0IPCAdPNZ3
dl/nMvnay0UmIZzyzMo9PWsxc4IaNWTN6vjXEIjKL7Z0yaHquoTxJ5wbG7ZwInRl
aF2++VniVvEFL0V8E3bPD/6vl+LT+I9oiw3elfgDfkBeWYKeEa4iCjtQiiXrkqlB
GeWYCKsiqQSr9PbfW10DHNYOYI9harsHAVgQ8SQ6wKyE7NDMMUMd+Wa7lXrrmRpn
XVnrQ95wvatYiBinmw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:35 2026 by rpki-client