Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145914.roa
File: AS145914.roa (raw, json)
Hash identifier: cc+DWRiiCwzDk/HofofQojtF22wywcOKniegrbnEMDU=
Subject key identifier: 2C:6A:F3:5F:3B:DA:22:B5:C2:91:7A:37:52:55:46:F6:09:9B:9C:3C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 492FE9693EEFBD8C4101D31E5A4EDB0F9C08C688
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145914.roa
Signing time: Mon 25 May 2026 02:22:11 +0000
ROA not before: Mon 25 May 2026 02:17:11 +0000
ROA not after: Mon 24 May 2027 02:22:11 +0000
asID: 145914
IP address blocks: 240a:acc0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:2f:e9:69:3e:ef:bd:8c:41:01:d3:1e:5a:4e:db:0f:9c:08:c6:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:11 2026 GMT
Not After : May 24 02:22:11 2027 GMT
Subject: CN=2C6AF35F3BDA22B5C2917A37525546F6099B9C3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:40:34:8f:f4:a6:31:7b:1b:4e:4f:d7:c6:30:
16:bd:91:94:67:90:45:51:2b:26:96:5c:81:42:3d:
f8:f5:e8:be:eb:3d:cb:f7:91:ab:33:00:89:3e:69:
49:d3:3d:7a:30:3b:ef:79:20:49:0b:70:93:43:72:
27:2a:16:bd:d0:c4:18:af:e5:9b:ed:1e:8a:35:9d:
0b:26:1a:90:0f:27:b7:bc:15:28:81:f9:36:17:a8:
a6:7e:6f:86:19:28:13:7b:85:f2:52:62:d8:83:8a:
f7:8f:c4:93:4a:35:c7:3c:94:2b:c1:89:86:ba:8e:
d0:7f:98:ef:d5:d8:04:4b:ba:5f:56:c5:1d:36:ba:
11:29:f8:8d:09:b0:ae:ac:16:c0:53:7b:3a:a3:1f:
2d:d7:61:d4:f4:63:ca:13:2c:30:28:6f:b7:d4:6d:
6d:7b:f3:8b:da:4d:95:02:2b:43:3c:48:c2:f3:80:
9c:b6:62:87:66:5a:99:f1:fa:a3:ef:8e:bf:15:0a:
e3:5e:84:f2:1a:06:49:95:7b:c0:b9:7c:48:be:b1:
85:0b:86:4b:e5:79:b8:b9:ee:a0:99:46:d2:63:df:
a0:b9:e1:5f:64:96:2f:13:11:81:e1:f0:16:51:39:
d9:72:03:dc:91:54:8f:c2:f5:eb:2d:e5:b3:08:1b:
36:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:6A:F3:5F:3B:DA:22:B5:C2:91:7A:37:52:55:46:F6:09:9B:9C:3C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145914.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:acc0::/32
Signature Algorithm: sha256WithRSAEncryption
3a:bd:35:a4:c3:b2:94:a0:f6:39:b4:b9:dd:cf:5a:a3:34:58:
7e:7c:53:90:84:b8:10:2d:ec:fd:f2:6a:af:15:cb:92:63:66:
f0:64:fc:88:ae:2f:62:30:23:3e:33:31:c6:2d:e7:6d:82:c9:
df:01:62:46:a5:71:5c:c2:e5:ba:76:0e:43:1c:04:1c:8f:08:
21:04:3b:9a:45:aa:d7:17:73:9c:d4:47:f6:f1:07:60:3c:c8:
f5:fe:e8:3b:cd:c8:4e:42:c3:64:65:2b:b2:60:3c:d2:55:87:
05:fe:d8:95:ee:8a:bc:95:f0:7c:cf:e5:f3:14:f7:92:2e:62:
4b:a7:fc:4d:e6:16:18:d2:83:e0:47:da:10:56:f9:4e:63:48:
d8:41:85:03:d6:cb:7a:03:d4:46:67:9a:8c:8b:81:55:1a:8e:
ff:25:a2:62:04:5e:5f:d5:f5:55:4a:07:43:9c:1b:09:af:6c:
80:3e:7a:f2:7d:65:5d:d8:8b:94:df:b9:9e:49:58:ae:fd:ad:
ed:6e:7a:95:98:16:95:81:fb:6d:14:fd:2d:e8:d5:b6:f4:86:
08:56:62:94:7d:7c:34:75:85:61:8a:67:fb:ab:56:58:cd:28:
e7:89:9d:fb:a4:e9:73:b3:da:7d:84:26:a8:09:64:55:2b:03:
65:af:45:36
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUSS/paT7vvYxBAdMeWk7bD5wIxogwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMjE3MTFaFw0yNzA1MjQwMjIyMTFaMDMxMTAvBgNV
BAMTKDJDNkFGMzVGM0JEQTIyQjVDMjkxN0EzNzUyNTU0NkY2MDk5QjlDM0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbQDSP9KYxextOT9fGMBa9kZRn
kEVRKyaWXIFCPfj16L7rPcv3kaszAIk+aUnTPXowO+95IEkLcJNDcicqFr3QxBiv
5ZvtHoo1nQsmGpAPJ7e8FSiB+TYXqKZ+b4YZKBN7hfJSYtiDivePxJNKNcc8lCvB
iYa6jtB/mO/V2ARLul9WxR02uhEp+I0JsK6sFsBTezqjHy3XYdT0Y8oTLDAob7fU
bW1784vaTZUCK0M8SMLzgJy2YodmWpnx+qPvjr8VCuNehPIaBkmVe8C5fEi+sYUL
hkvlebi57qCZRtJj36C54V9kli8TEYHh8BZROdlyA9yRVI/C9est5bMIGzblAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQULGrzXzvaIrXCkXo3UlVG9gmbnDwwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1OTE0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqswDANBgkqhkiG9w0BAQsFAAOCAQEAOr01
pMOylKD2ObS53c9aozRYfnxTkIS4EC3s/fJqrxXLkmNm8GT8iK4vYjAjPjMxxi3n
bYLJ3wFiRqVxXMLlunYOQxwEHI8IIQQ7mkWq1xdznNRH9vEHYDzI9f7oO83ITkLD
ZGUrsmA80lWHBf7Yle6KvJXwfM/l8xT3ki5iS6f8TeYWGNKD4EfaEFb5TmNI2EGF
A9bLegPURmeajIuBVRqO/yWiYgReX9X1VUoHQ5wbCa9sgD568n1lXdiLlN+5nklY
rv2t7W56lZgWlYH7bRT9LejVtvSGCFZilH18NHWFYYpn+6tWWM0o54md+6Tpc7Pa
fYQmqAlkVSsDZa9FNg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:08 2026 by rpki-client