Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145449.roa
File: AS145449.roa (raw, json)
Hash identifier: AQhriaB9YW2TYfqe6GyZiSQC32yDknlDGYC2v9SXesA=
Subject key identifier: 9E:8E:FB:DC:CE:D6:82:EE:2B:8D:0C:AA:90:DE:C5:AA:F5:64:FF:0B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 573B2C7E68F5FDB39F0DFA3D7493EBA34102B3F9
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145449.roa
Signing time: Mon 25 May 2026 02:22:18 +0000
ROA not before: Mon 25 May 2026 02:17:18 +0000
ROA not after: Mon 24 May 2027 02:22:18 +0000
asID: 145449
IP address blocks: 240a:aaef::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:3b:2c:7e:68:f5:fd:b3:9f:0d:fa:3d:74:93:eb:a3:41:02:b3:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:18 2026 GMT
Not After : May 24 02:22:18 2027 GMT
Subject: CN=9E8EFBDCCED682EE2B8D0CAA90DEC5AAF564FF0B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:57:a4:2b:86:94:83:d0:c6:4d:7a:9e:7b:13:
76:19:4a:8c:49:aa:c9:99:fd:cc:2a:0d:c0:32:67:
91:ad:03:1c:68:a0:2b:c0:8c:47:eb:e3:3e:94:c0:
4d:d9:40:3b:ff:f2:77:87:9f:cf:ca:ca:31:99:5e:
22:03:22:09:c4:1a:dd:2a:5c:63:ea:41:1c:01:b4:
b0:85:4b:8d:2a:95:c4:1d:e7:2d:7b:8f:ad:8d:c0:
52:13:8b:79:1d:e9:54:00:58:72:3e:ac:0c:b5:98:
a2:d5:f1:ff:6a:bb:c2:40:a7:d5:33:ad:19:7a:e5:
6c:ea:23:d8:4f:6c:44:f1:96:33:90:1e:4a:b2:96:
c2:e5:47:6b:b8:7a:98:66:36:5d:6e:de:50:4b:db:
50:63:0c:80:2c:42:ac:e2:ec:4f:4f:e6:ef:f7:2d:
aa:6c:19:29:19:ac:59:cd:97:67:b5:0a:0c:0e:a3:
6c:da:d5:03:8e:b5:4c:cf:e2:0e:42:d4:35:f1:2d:
10:1b:1f:6f:ac:d2:3c:9c:2a:7a:c1:6d:f9:65:70:
6e:1b:44:86:7e:ec:ca:09:48:0b:1a:95:5e:2c:5a:
c5:6f:43:88:a5:b8:36:05:9c:7d:35:aa:22:88:4d:
50:53:94:28:0d:6e:08:e1:7e:dd:2e:f5:ba:9d:01:
cb:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:8E:FB:DC:CE:D6:82:EE:2B:8D:0C:AA:90:DE:C5:AA:F5:64:FF:0B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145449.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aaef::/32
Signature Algorithm: sha256WithRSAEncryption
b4:fc:6d:9a:46:f5:9a:a3:f0:f6:fb:17:e3:f6:73:02:c3:6b:
c7:26:f6:02:43:4d:70:0a:c7:12:e7:2a:3e:a7:9c:30:3c:44:
94:74:1f:c3:64:c8:d8:85:4e:83:cf:11:fa:ef:28:80:36:74:
1f:86:92:a4:f1:fd:e1:b8:fc:16:dd:a2:ed:89:b7:33:34:02:
18:f9:2d:93:28:f5:41:54:73:11:a9:b5:63:4c:d4:37:c9:e1:
e6:fb:49:76:23:1b:e2:3a:d8:07:0c:88:77:88:a9:ca:27:3b:
bb:26:5e:33:5f:0d:f5:6a:6e:be:ce:ca:83:fc:19:d1:e3:d9:
d7:0e:15:09:c0:35:fc:99:27:ec:6c:05:f3:0a:04:d3:5a:2e:
4c:e6:ec:94:f6:b6:9a:02:bc:e3:47:3b:4a:91:41:73:ea:df:
0d:20:2b:ce:0f:e3:9f:da:3e:7b:02:a0:5b:fc:76:1b:2c:9d:
18:f8:c4:aa:3c:e0:fd:6a:03:aa:9a:2a:c4:2b:96:5b:e6:c8:
0f:0c:ce:ab:91:43:dc:58:b5:bd:30:56:12:bb:68:df:72:09:
85:ab:00:f0:35:20:92:bf:00:5c:11:d2:a8:d5:e4:b6:87:6d:
9c:32:21:1c:05:78:5c:b6:a8:a5:36:3b:38:95:50:b4:b1:e8:
a9:f4:dd:f2
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUVzssfmj1/bOfDfo9dJPro0ECs/kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMjE3MThaFw0yNzA1MjQwMjIyMThaMDMxMTAvBgNV
BAMTKDlFOEVGQkRDQ0VENjgyRUUyQjhEMENBQTkwREVDNUFBRjU2NEZGMEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3V6QrhpSD0MZNep57E3YZSoxJ
qsmZ/cwqDcAyZ5GtAxxooCvAjEfr4z6UwE3ZQDv/8neHn8/KyjGZXiIDIgnEGt0q
XGPqQRwBtLCFS40qlcQd5y17j62NwFITi3kd6VQAWHI+rAy1mKLV8f9qu8JAp9Uz
rRl65WzqI9hPbETxljOQHkqylsLlR2u4ephmNl1u3lBL21BjDIAsQqzi7E9P5u/3
LapsGSkZrFnNl2e1CgwOo2za1QOOtUzP4g5C1DXxLRAbH2+s0jycKnrBbfllcG4b
RIZ+7MoJSAsalV4sWsVvQ4iluDYFnH01qiKITVBTlCgNbgjhft0u9bqdAcsJAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUno773M7Wgu4rjQyqkN7FqvVk/wswHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1NDQ5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqq7zANBgkqhkiG9w0BAQsFAAOCAQEAtPxt
mkb1mqPw9vsX4/ZzAsNrxyb2AkNNcArHEucqPqecMDxElHQfw2TI2IVOg88R+u8o
gDZ0H4aSpPH94bj8Ft2i7Ym3MzQCGPktkyj1QVRzEam1Y0zUN8nh5vtJdiMb4jrY
BwyId4ipyic7uyZeM18N9Wpuvs7Kg/wZ0ePZ1w4VCcA1/Jkn7GwF8woE01ouTObs
lPa2mgK840c7SpFBc+rfDSArzg/jn9o+ewKgW/x2GyydGPjEqjzg/WoDqpoqxCuW
W+bIDwzOq5FD3Fi1vTBWErto33IJhasA8DUgkr8AXBHSqNXktodtnDIhHAV4XLao
pTY7OJVQtLHoqfTd8g==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:19 2026 by rpki-client