Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145446.roa
File: AS145446.roa (raw, json)
Hash identifier: lZeAolu8fxyZr1roJhq0ifO3DAOvWI9Dd6IWPk6zcX4=
Subject key identifier: 13:78:60:39:C4:BD:71:93:DD:92:74:7E:98:22:2B:C4:45:18:0E:02
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 186969E0649AFE7711F43BE3E50711E1E72D005B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145446.roa
Signing time: Mon 25 May 2026 02:22:21 +0000
ROA not before: Mon 25 May 2026 02:17:21 +0000
ROA not after: Mon 24 May 2027 02:22:21 +0000
asID: 145446
IP address blocks: 240a:aaec::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:69:69:e0:64:9a:fe:77:11:f4:3b:e3:e5:07:11:e1:e7:2d:00:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:21 2026 GMT
Not After : May 24 02:22:21 2027 GMT
Subject: CN=13786039C4BD7193DD92747E98222BC445180E02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:78:23:dc:c1:ae:b6:dc:28:0a:56:5e:26:6f:
bf:d1:02:50:36:6b:b3:1b:88:a7:50:c6:7f:72:4f:
41:45:70:08:07:48:71:84:b4:ee:f5:74:3e:03:e0:
bc:be:21:75:cf:7f:49:e2:12:13:b5:6d:0b:15:16:
b9:2c:3f:b7:06:f0:c6:b0:45:f7:c1:bd:6a:0b:57:
7d:5a:b1:48:03:4e:a1:be:17:0a:02:59:e2:28:11:
cf:bc:49:e6:17:69:d5:0b:7f:74:8f:8c:6f:a6:15:
a5:57:fa:83:a7:c6:6f:9d:d3:5c:38:86:12:75:f2:
ea:ea:91:a6:a4:c2:a5:6f:3d:8a:f0:11:b0:c1:89:
77:c3:30:f3:fb:f0:89:15:3b:48:48:8f:85:96:30:
85:be:0d:26:32:5a:6e:a9:38:64:b2:48:4d:d7:8a:
f9:ce:a9:4c:1a:70:74:1b:eb:a2:61:32:f0:f6:65:
4e:a6:66:d8:83:56:5b:04:c0:16:95:55:44:52:64:
27:0e:89:e8:ba:63:b0:d4:9f:60:78:f3:9f:aa:56:
9b:05:e8:9b:76:e4:5d:75:2c:af:9d:60:26:0f:33:
21:7d:b1:7e:35:48:e2:43:bb:52:af:34:52:64:74:
35:1d:f2:08:2a:f4:ac:90:14:59:59:61:83:32:65:
a8:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:78:60:39:C4:BD:71:93:DD:92:74:7E:98:22:2B:C4:45:18:0E:02
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145446.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aaec::/32
Signature Algorithm: sha256WithRSAEncryption
36:95:c5:f5:09:d9:ef:e1:d8:bd:5b:b6:bc:65:8f:0d:87:21:
64:3e:a6:fa:02:8d:96:51:3e:d3:9a:65:4d:c9:ee:c2:54:99:
d7:81:b3:16:4f:f7:21:ea:bd:a7:43:96:1c:56:ce:d4:3d:d5:
57:48:42:8c:cf:70:c2:25:12:04:27:f0:39:12:30:dd:14:84:
b9:d2:5d:66:84:3d:64:17:19:21:33:7b:48:89:26:32:99:32:
d8:92:bf:9b:87:59:b6:a8:70:1d:c4:9e:dc:61:18:1e:f4:79:
20:26:cc:2c:3a:55:61:cd:07:49:ef:c7:f4:f6:2b:a9:f4:09:
ab:09:34:6c:8a:6e:93:08:0a:39:18:25:b6:39:6c:89:89:e5:
d2:38:04:cc:26:ba:91:05:76:ba:f5:1b:e4:f1:2f:18:30:46:
1f:fe:d6:bd:53:7b:8f:7f:50:2d:e9:83:75:66:01:20:36:64:
87:c9:15:d9:fa:74:68:78:b1:e3:15:e4:fc:06:2a:45:e5:b8:
1d:e7:22:ec:ab:56:23:c9:6c:49:19:1a:45:d3:46:5e:d3:61:
71:64:0c:76:a3:c1:ff:a9:ed:5d:f0:75:4a:54:90:22:d0:ff:
79:ea:67:e9:14:95:00:98:c2:06:64:e8:3d:03:46:47:fe:04:
94:ee:a7:5b
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUGGlp4GSa/ncR9Dvj5QcR4ectAFswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMjE3MjFaFw0yNzA1MjQwMjIyMjFaMDMxMTAvBgNV
BAMTKDEzNzg2MDM5QzRCRDcxOTNERDkyNzQ3RTk4MjIyQkM0NDUxODBFMDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOeCPcwa623CgKVl4mb7/RAlA2
a7MbiKdQxn9yT0FFcAgHSHGEtO71dD4D4Ly+IXXPf0niEhO1bQsVFrksP7cG8Maw
RffBvWoLV31asUgDTqG+FwoCWeIoEc+8SeYXadULf3SPjG+mFaVX+oOnxm+d01w4
hhJ18urqkaakwqVvPYrwEbDBiXfDMPP78IkVO0hIj4WWMIW+DSYyWm6pOGSySE3X
ivnOqUwacHQb66JhMvD2ZU6mZtiDVlsEwBaVVURSZCcOiei6Y7DUn2B485+qVpsF
6Jt25F11LK+dYCYPMyF9sX41SOJDu1KvNFJkdDUd8ggq9KyQFFlZYYMyZaj7AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUE3hgOcS9cZPdknR+mCIrxEUYDgIwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1NDQ2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqq7DANBgkqhkiG9w0BAQsFAAOCAQEANpXF
9QnZ7+HYvVu2vGWPDYchZD6m+gKNllE+05plTcnuwlSZ14GzFk/3Ieq9p0OWHFbO
1D3VV0hCjM9wwiUSBCfwORIw3RSEudJdZoQ9ZBcZITN7SIkmMpky2JK/m4dZtqhw
HcSe3GEYHvR5ICbMLDpVYc0HSe/H9PYrqfQJqwk0bIpukwgKORgltjlsiYnl0jgE
zCa6kQV2uvUb5PEvGDBGH/7WvVN7j39QLemDdWYBIDZkh8kV2fp0aHix4xXk/AYq
ReW4Heci7KtWI8lsSRkaRdNGXtNhcWQMdqPB/6ntXfB1SlSQItD/eepn6RSVAJjC
BmToPQNGR/4ElO6nWw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:34 2026 by rpki-client