Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145469.roa
File: AS145469.roa (raw, json)
Hash identifier: crlg5TdzE8klj0XqCe8u9tqLRWAdlAindkRsbjAx0Cc=
Subject key identifier: 94:30:1D:22:7B:B7:07:34:7D:2C:48:4C:B7:75:53:17:4C:E5:1D:B8
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 62B99C5632ABC1BB4926A82F834A507E94A14BCD
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145469.roa
Signing time: Fri 22 May 2026 06:05:38 +0000
ROA not before: Fri 22 May 2026 06:00:38 +0000
ROA not after: Fri 21 May 2027 06:05:38 +0000
asID: 145469
IP address blocks: 240a:ab03::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:b9:9c:56:32:ab:c1:bb:49:26:a8:2f:83:4a:50:7e:94:a1:4b:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:38 2026 GMT
Not After : May 21 06:05:38 2027 GMT
Subject: CN=94301D227BB707347D2C484CB77553174CE51DB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:f6:29:84:21:81:66:22:a9:ba:e6:fc:1d:c0:
cb:d6:67:3c:4b:23:28:5f:04:26:f2:74:21:6e:69:
1f:23:26:23:e6:0d:9c:3d:3b:dc:88:45:e9:00:51:
35:fb:d7:9f:97:17:6f:41:25:eb:2c:87:ef:fb:5f:
eb:b7:85:aa:9a:18:ad:d7:eb:b9:bb:1b:a4:6f:1c:
5f:32:01:ef:ba:fc:77:d7:63:53:4d:bf:a2:7f:de:
f9:4a:2d:85:9f:f6:ac:81:b6:19:ca:70:9e:ed:68:
0d:f3:82:a1:78:e0:b3:bc:d0:33:5b:36:6e:e1:34:
33:b8:9c:11:b3:b6:8d:a3:4a:64:ed:db:ec:e5:72:
02:52:29:fb:0c:15:79:8a:9d:43:54:a5:1c:01:e0:
5c:7a:67:93:c5:09:1d:f5:22:64:cd:8b:c4:dd:32:
39:90:78:d6:52:5e:45:4a:cf:f2:11:a0:38:f6:8a:
10:4a:26:5d:50:39:da:0e:9b:c3:49:13:41:91:eb:
0e:20:1f:dc:02:d1:32:d8:13:e5:0c:37:7c:a5:2e:
b5:7a:7d:d7:68:e5:90:91:30:61:ca:90:69:cc:ee:
44:4a:8a:c0:06:be:64:20:b2:3c:c9:d2:52:7d:b2:
ab:b2:77:32:0f:1a:52:89:0c:81:87:3d:5b:31:4d:
f1:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:30:1D:22:7B:B7:07:34:7D:2C:48:4C:B7:75:53:17:4C:E5:1D:B8
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145469.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ab03::/32
Signature Algorithm: sha256WithRSAEncryption
88:a9:d9:0d:98:2a:db:19:71:0c:c1:73:36:b6:4e:f2:2c:5b:
06:a3:67:ee:65:08:61:96:a0:ad:7b:62:ef:48:de:9d:91:7b:
85:eb:fa:cf:19:62:34:0f:9e:e7:8e:0c:71:33:43:90:3e:62:
b2:f0:51:94:65:61:a7:67:a3:14:e7:ac:ec:fe:18:99:ce:18:
aa:9c:20:72:8a:cf:13:da:a6:31:e6:8e:d1:e1:19:db:af:e8:
8e:48:9d:a6:14:29:be:7d:c6:cf:36:f3:5d:ad:00:c3:8f:e7:
65:86:b8:57:b7:61:3d:ee:63:16:58:82:75:65:2f:60:36:a3:
17:d8:37:ab:33:9c:ee:67:72:4a:0b:16:4d:fb:7d:58:85:7c:
79:26:0a:a2:cd:aa:b5:ed:80:44:68:cf:1f:65:16:d2:e6:19:
58:c0:02:4b:91:70:8c:5b:52:6d:99:4f:bd:38:3a:e8:ca:e2:
cd:58:4c:0e:4f:f3:ae:ee:fc:71:29:ea:f8:b8:10:69:2d:52:
24:cb:61:a8:c1:83:34:59:f4:b7:d6:e0:8b:8f:05:d4:a5:f2:
d0:ee:2c:45:58:5c:38:34:00:fa:a0:89:e6:a5:70:24:f9:22:
77:95:e6:2a:a1:4d:22:a5:b9:fa:15:1f:1c:33:fc:cc:25:47:
f9:e5:af:23
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUYrmcVjKrwbtJJqgvg0pQfpShS80wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjAwMzhaFw0yNzA1MjEwNjA1MzhaMDMxMTAvBgNV
BAMTKDk0MzAxRDIyN0JCNzA3MzQ3RDJDNDg0Q0I3NzU1MzE3NENFNTFEQjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt9imEIYFmIqm65vwdwMvWZzxL
IyhfBCbydCFuaR8jJiPmDZw9O9yIRekAUTX715+XF29BJessh+/7X+u3haqaGK3X
67m7G6RvHF8yAe+6/HfXY1NNv6J/3vlKLYWf9qyBthnKcJ7taA3zgqF44LO80DNb
Nm7hNDO4nBGzto2jSmTt2+zlcgJSKfsMFXmKnUNUpRwB4Fx6Z5PFCR31ImTNi8Td
MjmQeNZSXkVKz/IRoDj2ihBKJl1QOdoOm8NJE0GR6w4gH9wC0TLYE+UMN3ylLrV6
fddo5ZCRMGHKkGnM7kRKisAGvmQgsjzJ0lJ9squydzIPGlKJDIGHPVsxTfEZAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUlDAdInu3BzR9LEhMt3VTF0zlHbgwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1NDY5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqrAzANBgkqhkiG9w0BAQsFAAOCAQEAiKnZ
DZgq2xlxDMFzNrZO8ixbBqNn7mUIYZagrXti70jenZF7hev6zxliNA+e544McTND
kD5isvBRlGVhp2ejFOes7P4Ymc4YqpwgcorPE9qmMeaO0eEZ26/ojkidphQpvn3G
zzbzXa0Aw4/nZYa4V7dhPe5jFliCdWUvYDajF9g3qzOc7mdySgsWTft9WIV8eSYK
os2qte2ARGjPH2UW0uYZWMACS5FwjFtSbZlPvTg66MrizVhMDk/zru78cSnq+LgQ
aS1SJMthqMGDNFn0t9bgi48F1KXy0O4sRVhcODQA+qCJ5qVwJPkid5XmKqFNIqW5
+hUfHDP8zCVH+eWvIw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:41 2026 by rpki-client