Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145635.roa
File: AS145635.roa (raw, json)
Hash identifier: Gz8QSrnVJS9NIYEdDYgm42gG4q22PZAjItlysj5r/Uc=
Subject key identifier: EB:39:EA:FA:BB:F3:9A:69:4B:E5:2E:4D:31:E1:02:86:48:BE:97:DE
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 101BBD52A74CE22478BB5D77C71E3BD83FEC8370
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145635.roa
Signing time: Fri 22 May 2026 04:08:16 +0000
ROA not before: Fri 22 May 2026 04:03:16 +0000
ROA not after: Fri 21 May 2027 04:08:16 +0000
asID: 145635
IP address blocks: 240a:aba9::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:1b:bd:52:a7:4c:e2:24:78:bb:5d:77:c7:1e:3b:d8:3f:ec:83:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:03:16 2026 GMT
Not After : May 21 04:08:16 2027 GMT
Subject: CN=EB39EAFABBF39A694BE52E4D31E1028648BE97DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e8:f8:1a:62:43:05:a3:48:ed:16:d8:53:95:
bb:ae:fd:4c:32:40:7f:9b:e2:e1:f9:9f:ea:97:37:
a7:5a:eb:ef:cd:b7:e6:f2:a7:a4:cd:78:ca:09:3a:
8b:3d:dd:c0:0d:61:e8:c3:d1:e7:43:8f:c5:e6:00:
97:69:4f:c5:f0:c0:74:da:6f:a7:31:7e:1f:2a:64:
d9:fb:6a:c5:5f:19:13:be:21:50:79:89:22:f8:cd:
24:4f:5e:00:35:01:e6:2c:a8:e5:21:de:cc:3c:39:
59:c9:e0:3e:93:40:c9:da:51:d0:15:93:91:f4:80:
9a:d3:c0:26:88:b8:9c:f6:0d:c1:46:5e:e6:62:c3:
66:4f:ab:c3:e3:12:a5:aa:3e:e4:53:98:ef:20:7c:
31:97:3d:e2:9d:a8:fb:32:28:fb:32:ee:85:5e:f3:
9e:7b:b3:fc:6b:c8:3f:d0:70:89:58:62:da:2c:80:
66:8f:c6:40:99:0e:de:3f:56:fe:44:14:4b:17:c1:
88:9e:53:2d:5c:cb:42:75:c9:e4:2a:f0:b1:88:7b:
88:27:22:69:dd:c1:c8:b2:f7:76:e2:0c:76:e0:35:
59:6e:fb:22:88:47:c5:49:3f:22:ef:21:72:00:78:
8a:68:f4:39:0b:b6:41:cb:2f:12:93:05:d7:11:7b:
40:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:39:EA:FA:BB:F3:9A:69:4B:E5:2E:4D:31:E1:02:86:48:BE:97:DE
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aba9::/32
Signature Algorithm: sha256WithRSAEncryption
b8:ee:8d:8a:9d:33:e7:2e:5e:16:af:f6:df:07:ea:a7:96:57:
7e:a3:75:aa:f3:1f:45:b8:f3:c7:0b:ea:7d:12:0d:26:91:b5:
1d:0f:ec:1b:d8:ae:f7:a9:50:fe:df:78:5c:51:3b:e3:d2:db:
27:b9:84:98:64:d0:1d:66:bd:ea:30:7d:be:32:b6:0d:19:df:
06:25:1e:3a:49:b2:2f:07:ae:86:57:86:bc:a3:99:af:31:92:
a8:a8:b1:b8:93:93:08:8b:31:33:39:3a:26:86:cb:09:48:d8:
1f:d5:e1:eb:1b:30:d0:7a:42:3e:b1:1f:9f:b6:b1:f5:54:49:
45:c6:2d:cc:ce:13:a2:66:a5:d6:da:ea:00:58:41:1b:45:9d:
dc:ac:f3:1b:bd:44:8e:65:4f:09:94:ad:50:3d:a4:6a:8e:19:
68:d2:7d:8f:bb:0e:d4:12:d2:f1:fa:07:f0:57:b8:fe:fb:f1:
90:d1:b7:6a:f9:54:6d:81:2a:49:e2:c9:41:81:f8:3d:9b:7c:
ea:8d:e1:5d:f3:5a:21:05:b0:25:4a:01:b3:78:de:2c:8f:c7:
8a:f7:ba:5a:a6:5a:06:55:ab:b6:db:35:21:74:50:0b:03:15:
6b:f9:96:61:b7:af:f6:96:91:0b:fe:d8:ce:54:75:3b:0d:b0:
2f:64:99:50
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUEBu9UqdM4iR4u113xx472D/sg3AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNDAzMTZaFw0yNzA1MjEwNDA4MTZaMDMxMTAvBgNV
BAMTKEVCMzlFQUZBQkJGMzlBNjk0QkU1MkU0RDMxRTEwMjg2NDhCRTk3REUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB6PgaYkMFo0jtFthTlbuu/Uwy
QH+b4uH5n+qXN6da6+/Nt+byp6TNeMoJOos93cANYejD0edDj8XmAJdpT8XwwHTa
b6cxfh8qZNn7asVfGRO+IVB5iSL4zSRPXgA1AeYsqOUh3sw8OVnJ4D6TQMnaUdAV
k5H0gJrTwCaIuJz2DcFGXuZiw2ZPq8PjEqWqPuRTmO8gfDGXPeKdqPsyKPsy7oVe
8557s/xryD/QcIlYYtosgGaPxkCZDt4/Vv5EFEsXwYieUy1cy0J1yeQq8LGIe4gn
Imndwciy93biDHbgNVlu+yKIR8VJPyLvIXIAeIpo9DkLtkHLLxKTBdcRe0A3AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU6znq+rvzmmlL5S5NMeEChki+l94wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1NjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqrqTANBgkqhkiG9w0BAQsFAAOCAQEAuO6N
ip0z5y5eFq/23wfqp5ZXfqN1qvMfRbjzxwvqfRINJpG1HQ/sG9iu96lQ/t94XFE7
49LbJ7mEmGTQHWa96jB9vjK2DRnfBiUeOkmyLweuhleGvKOZrzGSqKixuJOTCIsx
Mzk6JobLCUjYH9Xh6xsw0HpCPrEfn7ax9VRJRcYtzM4Tomal1trqAFhBG0Wd3Kzz
G71EjmVPCZStUD2kao4ZaNJ9j7sO1BLS8foH8Fe4/vvxkNG3avlUbYEqSeLJQYH4
PZt86o3hXfNaIQWwJUoBs3jeLI/Hive6WqZaBlWrtts1IXRQCwMVa/mWYbev9paR
C/7YzlR1Ow2wL2SZUA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:51 2026 by rpki-client