Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145929.roa
File: AS145929.roa (raw, json)
Hash identifier: luxTHRr2h36jYlzxVcw/znRxgXc9pwWwsBukoErf5Ao=
Subject key identifier: 0A:92:CF:9F:6F:C4:4F:C1:9A:A2:77:A5:14:FF:80:EA:1F:C7:B0:75
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 16C1D858F945FCCDEB4893CAB3A5C3721A796F4A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145929.roa
Signing time: Fri 22 May 2026 07:08:41 +0000
ROA not before: Fri 22 May 2026 07:03:41 +0000
ROA not after: Fri 21 May 2027 07:08:41 +0000
asID: 145929
IP address blocks: 240a:accf::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:c1:d8:58:f9:45:fc:cd:eb:48:93:ca:b3:a5:c3:72:1a:79:6f:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:03:41 2026 GMT
Not After : May 21 07:08:41 2027 GMT
Subject: CN=0A92CF9F6FC44FC19AA277A514FF80EA1FC7B075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d9:21:5e:26:24:a3:96:5a:96:a9:a9:4e:12:
b1:6a:be:af:90:a7:29:f7:5d:dd:64:78:51:d7:ed:
d9:61:e9:20:14:b6:d2:d8:43:89:a8:46:c3:76:5a:
6b:fe:bc:58:07:b4:5d:9b:57:70:89:ac:dc:0e:c0:
90:f2:9b:e3:96:59:98:29:0e:83:e0:90:e7:f0:da:
88:a3:8f:82:f2:88:df:0c:61:dc:6a:08:33:85:98:
0f:60:84:cb:6f:bf:50:57:9d:47:2f:ae:63:cf:b3:
7a:c0:14:ea:a5:a0:6b:1f:2e:68:cb:da:59:85:61:
fb:91:a3:71:8e:3c:dc:04:42:ef:ce:db:d5:c5:d7:
d7:f6:fc:8d:a5:32:e5:d6:2d:88:2e:96:68:79:43:
24:55:d7:97:24:98:be:0f:6a:bf:60:b4:a5:33:61:
22:8f:b2:c4:16:d5:9c:71:f8:91:c0:44:e4:a7:ed:
2e:21:05:03:c0:db:d6:76:c6:2f:d9:3d:cf:77:aa:
3c:02:94:cd:71:f6:10:0c:2d:82:e0:35:e8:4b:76:
ea:66:51:cd:52:8f:05:e9:8e:1d:11:a0:db:20:63:
f9:d2:07:03:01:a1:94:8e:49:9d:c3:78:88:5e:a5:
e4:a8:a0:52:47:a4:2b:56:10:e0:7a:8a:b3:22:97:
cf:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:92:CF:9F:6F:C4:4F:C1:9A:A2:77:A5:14:FF:80:EA:1F:C7:B0:75
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145929.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:accf::/32
Signature Algorithm: sha256WithRSAEncryption
0f:e8:19:f0:44:89:aa:a5:93:61:aa:39:0f:78:e3:11:55:5a:
47:9a:21:f5:a6:9a:49:48:32:76:41:0b:1c:43:29:35:7f:42:
ef:26:a7:bf:05:f0:f1:f7:2e:d4:af:56:87:ae:a3:0e:de:2c:
6a:4e:e1:1b:3d:d1:0b:b2:b0:0b:8f:bc:f4:80:c5:66:41:cf:
3a:43:8e:49:d7:c0:65:56:05:62:37:7b:62:ef:4f:30:d4:f1:
a0:31:e7:ca:c8:2a:ce:55:d7:54:ea:58:98:db:00:f9:27:10:
96:52:8f:3f:c2:15:11:9f:9a:94:7e:08:1c:8c:ae:ac:6a:00:
4e:9d:06:50:05:c6:87:8d:b5:42:0c:dd:ba:84:51:6b:86:79:
39:d3:46:e3:30:9c:1b:e5:f0:ea:7d:95:a8:49:7d:7a:84:35:
e2:4a:94:01:ae:42:1d:83:d9:b5:dc:4a:0c:e3:df:6c:ba:51:
13:ec:35:8c:89:d5:17:1a:aa:1b:d3:57:71:c1:b9:b1:0b:8d:
db:62:79:82:49:b0:ad:ec:e0:17:d1:07:1c:70:0f:2e:18:b2:
d9:f6:fe:19:18:9b:ee:9b:2c:7a:21:c1:ab:83:a0:14:9b:ef:
41:a2:59:4b:de:d6:64:2a:4c:52:56:1a:6f:44:6b:86:0e:6e:
18:d2:65:da
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUFsHYWPlF/M3rSJPKs6XDchp5b0owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzAzNDFaFw0yNzA1MjEwNzA4NDFaMDMxMTAvBgNV
BAMTKDBBOTJDRjlGNkZDNDRGQzE5QUEyNzdBNTE0RkY4MEVBMUZDN0IwNzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ2SFeJiSjllqWqalOErFqvq+Q
pyn3Xd1keFHX7dlh6SAUttLYQ4moRsN2Wmv+vFgHtF2bV3CJrNwOwJDym+OWWZgp
DoPgkOfw2oijj4LyiN8MYdxqCDOFmA9ghMtvv1BXnUcvrmPPs3rAFOqloGsfLmjL
2lmFYfuRo3GOPNwEQu/O29XF19f2/I2lMuXWLYgulmh5QyRV15ckmL4Par9gtKUz
YSKPssQW1Zxx+JHAROSn7S4hBQPA29Z2xi/ZPc93qjwClM1x9hAMLYLgNehLdupm
Uc1SjwXpjh0RoNsgY/nSBwMBoZSOSZ3DeIhepeSooFJHpCtWEOB6irMil89pAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUCpLPn2/ET8GaonelFP+A6h/HsHUwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1OTI5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqszzANBgkqhkiG9w0BAQsFAAOCAQEAD+gZ
8ESJqqWTYao5D3jjEVVaR5oh9aaaSUgydkELHEMpNX9C7yanvwXw8fcu1K9Wh66j
Dt4sak7hGz3RC7KwC4+89IDFZkHPOkOOSdfAZVYFYjd7Yu9PMNTxoDHnysgqzlXX
VOpYmNsA+ScQllKPP8IVEZ+alH4IHIyurGoATp0GUAXGh421QgzduoRRa4Z5OdNG
4zCcG+Xw6n2VqEl9eoQ14kqUAa5CHYPZtdxKDOPfbLpRE+w1jInVFxqqG9NXccG5
sQuN22J5gkmwrezgF9EHHHAPLhiy2fb+GRib7psseiHBq4OgFJvvQaJZS97WZCpM
UlYab0Rrhg5uGNJl2g==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:21 2026 by rpki-client