Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145734.roa
File: AS145734.roa (raw, json)
Hash identifier: Rxh2RBFKO1Z/I7lxhzgTq9P+ciGSfI8evNvkt9INnvE=
Subject key identifier: 59:D4:3F:D0:0B:C8:98:98:3D:EC:42:CB:AE:10:09:0C:28:B3:BF:44
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 066C45B423CD6E39DA1F776FE6095F147C80CA19
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145734.roa
Signing time: Mon 25 May 2026 06:28:22 +0000
ROA not before: Mon 25 May 2026 06:23:22 +0000
ROA not after: Mon 24 May 2027 06:28:22 +0000
asID: 145734
IP address blocks: 240a:ac0c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
06:6c:45:b4:23:cd:6e:39:da:1f:77:6f:e6:09:5f:14:7c:80:ca:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:22 2026 GMT
Not After : May 24 06:28:22 2027 GMT
Subject: CN=59D43FD00BC898983DEC42CBAE10090C28B3BF44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:23:e9:a5:42:7c:77:34:17:d3:f0:2d:d4:7c:
7b:72:b1:0f:1f:46:25:5f:74:fa:fd:cd:84:bb:d2:
42:61:b2:95:02:d5:f8:40:95:26:b8:28:15:47:43:
bb:51:b9:83:b3:d8:cb:3b:9e:31:1a:47:66:93:02:
5a:d7:2b:5d:b0:ae:e9:95:b1:a3:d8:d3:9a:06:03:
02:45:1d:33:7b:2f:f8:e2:cd:37:73:6a:8b:42:f2:
e2:83:92:15:3d:6c:52:61:ca:61:00:89:fe:9d:d9:
01:84:f4:bd:ca:74:80:47:f1:d3:db:86:33:e4:a8:
51:c7:af:74:d8:da:a3:48:b3:9e:53:dc:0f:0c:a4:
3e:4a:7e:a3:3f:27:61:5c:a8:07:ee:95:9e:16:ae:
14:5e:0e:9c:97:4f:dc:f7:fa:8e:2a:5c:8c:2f:a5:
ab:5e:aa:f1:17:c6:10:b5:61:18:86:f0:14:cf:d3:
5d:f9:a8:6a:c5:4a:a9:50:45:ce:f9:a8:c3:6c:4c:
c4:31:e6:ac:86:aa:c5:9b:dc:9d:3f:58:63:1b:02:
a8:34:da:aa:73:f2:41:4b:33:78:95:ec:1a:f4:49:
de:f8:44:13:4c:a0:82:5d:04:47:bc:74:24:b9:33:
7b:6e:32:68:21:be:66:d6:2c:25:05:25:be:6e:77:
bf:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:D4:3F:D0:0B:C8:98:98:3D:EC:42:CB:AE:10:09:0C:28:B3:BF:44
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145734.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ac0c::/32
Signature Algorithm: sha256WithRSAEncryption
24:9d:fe:c5:35:5a:29:36:95:57:6d:d0:97:a7:a1:8f:35:e4:
36:0f:68:fd:ea:0f:92:89:a2:80:5b:08:86:8a:08:c7:b5:cc:
56:3b:57:f5:c5:84:b5:fa:c5:84:d7:6a:d9:87:07:bf:cd:e5:
b8:b9:a4:41:ea:73:25:71:12:f2:94:d5:1d:8a:d3:e7:f6:23:
04:fd:6b:6c:f1:80:48:83:e9:85:8b:67:18:27:df:0a:11:31:
d1:4a:8e:bd:94:4f:6f:69:13:8a:cf:ef:30:b0:ee:58:91:98:
5b:72:61:21:2f:cf:b7:fb:c2:74:f9:a7:a5:55:50:03:ae:10:
5a:17:bd:c4:7f:70:d0:17:da:e4:d1:00:15:32:a6:c3:9b:96:
af:7c:4c:b6:b0:33:43:9f:07:08:00:16:27:29:2b:47:3a:be:
f6:5c:92:ba:16:37:d4:91:ea:00:d3:54:8d:26:4e:70:87:25:
28:5f:60:58:e2:ec:ae:8e:55:de:00:eb:15:70:67:bb:16:d7:
91:a2:19:60:1d:ca:ea:76:20:95:95:7f:45:26:b5:10:4f:30:
ae:6f:a7:be:ec:15:d6:58:ad:38:74:92:61:9d:45:35:1d:5c:
b1:a8:22:66:8b:75:8b:7c:da:78:ce:20:9e:13:fd:53:54:2b:
b0:79:47:f9
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUBmxFtCPNbjnaH3dv5glfFHyAyhkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwNjIzMjJaFw0yNzA1MjQwNjI4MjJaMDMxMTAvBgNV
BAMTKDU5RDQzRkQwMEJDODk4OTgzREVDNDJDQkFFMTAwOTBDMjhCM0JGNDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnI+mlQnx3NBfT8C3UfHtysQ8f
RiVfdPr9zYS70kJhspUC1fhAlSa4KBVHQ7tRuYOz2Ms7njEaR2aTAlrXK12wrumV
saPY05oGAwJFHTN7L/jizTdzaotC8uKDkhU9bFJhymEAif6d2QGE9L3KdIBH8dPb
hjPkqFHHr3TY2qNIs55T3A8MpD5KfqM/J2FcqAfulZ4WrhReDpyXT9z3+o4qXIwv
pateqvEXxhC1YRiG8BTP0135qGrFSqlQRc75qMNsTMQx5qyGqsWb3J0/WGMbAqg0
2qpz8kFLM3iV7Br0Sd74RBNMoIJdBEe8dCS5M3tuMmghvmbWLCUFJb5ud78vAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUWdQ/0AvImJg97ELLrhAJDCizv0QwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1NzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqsDDANBgkqhkiG9w0BAQsFAAOCAQEAJJ3+
xTVaKTaVV23Ql6ehjzXkNg9o/eoPkomigFsIhooIx7XMVjtX9cWEtfrFhNdq2YcH
v83luLmkQepzJXES8pTVHYrT5/YjBP1rbPGASIPphYtnGCffChEx0UqOvZRPb2kT
is/vMLDuWJGYW3JhIS/Pt/vCdPmnpVVQA64QWhe9xH9w0Bfa5NEAFTKmw5uWr3xM
trAzQ58HCAAWJykrRzq+9lySuhY31JHqANNUjSZOcIclKF9gWOLsro5V3gDrFXBn
uxbXkaIZYB3K6nYglZV/RSa1EE8wrm+nvuwV1litOHSSYZ1FNR1csagiZot1i3za
eM4gnhP9U1QrsHlH+Q==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:09 2026 by rpki-client