Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145942.roa
File: AS145942.roa (raw, json)
Hash identifier: MRuLerLOzmfjgChYgIoythUmtAe2lFn15W/EGBcuxZ0=
Subject key identifier: 51:3D:AB:81:D9:5A:05:6C:D9:23:20:6E:EE:B2:02:71:FF:24:C2:E4
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3A9F3FACA51556E34409D1F1296AD2938CBB69D4
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145942.roa
Signing time: Fri 22 May 2026 07:09:03 +0000
ROA not before: Fri 22 May 2026 07:04:03 +0000
ROA not after: Fri 21 May 2027 07:09:03 +0000
asID: 145942
IP address blocks: 240a:acdc::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:9f:3f:ac:a5:15:56:e3:44:09:d1:f1:29:6a:d2:93:8c:bb:69:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:04:03 2026 GMT
Not After : May 21 07:09:03 2027 GMT
Subject: CN=513DAB81D95A056CD923206EEEB20271FF24C2E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5e:6a:f7:d1:e4:d9:10:65:79:06:fc:f5:09:
a0:60:53:d7:b6:eb:1c:8f:3d:97:6f:46:c6:93:3f:
1b:a9:83:e5:ce:0f:7d:dc:78:9d:b9:14:94:32:c4:
61:be:ab:9d:b1:e7:81:29:b5:2a:16:65:44:81:c1:
d4:b9:99:02:17:dd:19:32:b1:63:7a:86:a0:2b:be:
af:68:8d:4a:4a:82:1e:2f:49:51:9e:7a:7a:21:1b:
34:f3:0d:23:43:50:22:06:55:45:87:cc:76:e7:8d:
eb:1d:63:f6:4d:f6:02:47:19:98:ff:aa:b0:39:b4:
f4:9b:8b:f0:03:53:6f:bb:10:36:fa:c5:d3:e1:a7:
78:51:f2:ba:d5:64:50:10:4d:83:c3:cb:c4:df:7a:
8b:64:29:c5:ee:ba:54:37:0a:2c:38:c5:9b:2b:25:
b0:10:8c:bc:d7:86:0a:de:e1:b6:f5:83:38:bd:2b:
0e:91:72:8d:db:7b:fb:a5:d3:1c:91:35:cc:a6:99:
3b:86:63:6d:26:2c:c2:06:f6:bf:a9:6f:bd:1a:b8:
31:04:0c:8e:f8:c2:00:18:05:21:5d:bb:a5:b2:cd:
47:fb:aa:6a:1e:6d:bf:89:7e:89:80:0c:8e:87:b2:
bf:8e:c1:3c:41:94:20:80:be:f3:84:08:e5:26:d2:
6c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:3D:AB:81:D9:5A:05:6C:D9:23:20:6E:EE:B2:02:71:FF:24:C2:E4
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145942.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:acdc::/32
Signature Algorithm: sha256WithRSAEncryption
3d:cd:86:9c:a5:e5:4f:6c:1e:6c:fa:4b:47:e6:8c:9d:1b:d6:
a7:aa:ad:a1:82:32:50:88:2b:5d:4b:0c:fd:42:78:13:92:7e:
0d:c2:57:0e:f6:f9:da:9d:6c:d9:b8:04:1b:5a:6b:a1:aa:54:
9d:d0:c2:1d:70:f9:d4:61:c7:85:b3:ca:ce:66:25:83:2b:b7:
72:d7:ad:0c:6b:db:ca:9e:05:db:4d:fb:78:71:f0:9e:f2:25:
72:9d:82:9f:70:0c:0e:7b:23:eb:bb:c1:94:a6:76:8a:4f:ae:
6e:1f:dd:f5:fb:9e:8f:2d:2d:1d:aa:82:62:92:96:b0:89:b5:
2b:88:38:f0:e7:f4:87:b1:65:88:64:ea:1c:d1:66:22:9b:dd:
cf:96:2d:bd:04:db:ac:fa:c3:44:18:c0:57:78:22:6d:6e:72:
01:2b:99:46:69:0b:da:1f:40:37:cb:35:48:ce:3d:2c:6b:e4:
88:6f:7d:e5:9e:3b:3c:ed:c7:03:e7:97:05:93:da:a5:09:9d:
d7:2f:0b:ac:40:59:3d:5d:02:bc:fb:18:d3:bc:8b:92:ed:95:
05:2b:2d:41:59:b5:ca:f0:7b:94:3b:ca:c9:f5:69:37:f1:99:
50:6d:31:15:2e:97:02:f1:de:9e:e0:28:fa:72:9e:56:b5:78:
61:46:54:23
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUOp8/rKUVVuNECdHxKWrSk4y7adQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzA0MDNaFw0yNzA1MjEwNzA5MDNaMDMxMTAvBgNV
BAMTKDUxM0RBQjgxRDk1QTA1NkNEOTIzMjA2RUVFQjIwMjcxRkYyNEMyRTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbXmr30eTZEGV5Bvz1CaBgU9e2
6xyPPZdvRsaTPxupg+XOD33ceJ25FJQyxGG+q52x54EptSoWZUSBwdS5mQIX3Rky
sWN6hqArvq9ojUpKgh4vSVGeenohGzTzDSNDUCIGVUWHzHbnjesdY/ZN9gJHGZj/
qrA5tPSbi/ADU2+7EDb6xdPhp3hR8rrVZFAQTYPDy8TfeotkKcXuulQ3Ciw4xZsr
JbAQjLzXhgre4bb1gzi9Kw6Rco3be/ul0xyRNcymmTuGY20mLMIG9r+pb70auDEE
DI74wgAYBSFdu6WyzUf7qmoebb+JfomADI6Hsr+OwTxBlCCAvvOECOUm0mxXAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUUT2rgdlaBWzZIyBu7rICcf8kwuQwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1OTQyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqs3DANBgkqhkiG9w0BAQsFAAOCAQEAPc2G
nKXlT2webPpLR+aMnRvWp6qtoYIyUIgrXUsM/UJ4E5J+DcJXDvb52p1s2bgEG1pr
oapUndDCHXD51GHHhbPKzmYlgyu3ctetDGvbyp4F2037eHHwnvIlcp2Cn3AMDnsj
67vBlKZ2ik+ubh/d9fuejy0tHaqCYpKWsIm1K4g48Of0h7FliGTqHNFmIpvdz5Yt
vQTbrPrDRBjAV3gibW5yASuZRmkL2h9AN8s1SM49LGvkiG995Z47PO3HA+eXBZPa
pQmd1y8LrEBZPV0CvPsY07yLku2VBSstQVm1yvB7lDvKyfVpN/GZUG0xFS6XAvHe
nuAo+nKeVrV4YUZUIw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:44 2026 by rpki-client