Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145456.roa
File: AS145456.roa (raw, json)
Hash identifier: 47TpOq6vsgSVluGdbIWLZPg3Y09TUvVfd+Dt6AQOO6g=
Subject key identifier: 1B:C3:15:EE:43:48:A9:39:F3:88:4D:B1:2F:3D:1A:37:DC:E5:43:DF
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 735CD3F5F23AA624109C653DC96C908196B6A91B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145456.roa
Signing time: Mon 25 May 2026 01:38:20 +0000
ROA not before: Mon 25 May 2026 01:33:20 +0000
ROA not after: Mon 24 May 2027 01:38:20 +0000
asID: 145456
IP address blocks: 240a:aaf6::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:5c:d3:f5:f2:3a:a6:24:10:9c:65:3d:c9:6c:90:81:96:b6:a9:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:20 2026 GMT
Not After : May 24 01:38:20 2027 GMT
Subject: CN=1BC315EE4348A939F3884DB12F3D1A37DCE543DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:58:15:de:81:f7:88:c6:78:15:31:3f:ac:d2:
48:23:76:68:29:8c:e2:72:db:de:99:59:07:9b:23:
7c:16:83:e3:45:ae:8e:da:ff:32:27:4a:a6:d0:7f:
7b:57:c4:b5:af:86:90:52:f2:dc:8a:93:ee:56:3f:
6a:67:6c:03:d8:bd:f1:f4:1b:17:59:a9:00:69:a5:
70:5c:37:c7:b9:3f:49:65:a0:e6:31:96:c5:18:25:
ca:be:da:50:e7:d3:90:9c:86:2a:52:6a:bd:6f:b8:
79:02:ff:56:72:a7:b0:c0:c6:d7:4e:7a:84:f3:81:
f9:c5:b4:d5:e9:02:2f:e6:67:c1:ac:7c:a9:d1:95:
81:2c:6a:7d:48:1e:42:10:e1:fd:a3:6a:3a:0c:25:
fc:81:03:34:17:1c:e9:48:1d:c9:3f:98:ff:34:5a:
27:19:97:b4:57:ed:82:9b:84:9b:bd:eb:cf:26:11:
dd:53:83:6c:70:2c:16:4c:3e:17:d7:19:c5:72:20:
88:5d:09:f1:4f:19:6c:9a:2b:1a:02:cd:8a:fb:60:
90:5d:05:72:96:f6:b9:64:98:8d:d3:c8:f7:f9:cf:
c5:dc:4f:2b:c3:20:85:95:93:04:ab:c0:3d:ad:05:
de:ed:bc:27:60:b6:be:99:d2:ee:f1:33:f1:60:0c:
4c:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:C3:15:EE:43:48:A9:39:F3:88:4D:B1:2F:3D:1A:37:DC:E5:43:DF
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145456.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aaf6::/32
Signature Algorithm: sha256WithRSAEncryption
82:cf:8b:80:a8:67:ee:39:46:e9:f8:ee:f7:d3:e0:c7:d7:fc:
2b:47:56:93:23:52:38:78:81:fd:be:5d:65:70:91:f4:e1:84:
a9:8b:60:ef:d9:1e:97:2f:7a:9c:1c:25:8c:54:9b:2d:c9:87:
1c:86:fd:9b:d5:2b:9d:34:27:16:13:f3:4e:d6:14:d5:8f:f1:
d7:28:1b:46:6c:34:d2:70:b7:44:6b:2d:20:66:7d:e9:db:21:
b4:6b:f5:3b:71:61:89:b2:4c:b9:ab:ee:49:81:52:bb:49:ec:
78:4c:fe:cd:04:92:7f:87:6a:38:75:92:d7:ee:1b:15:68:79:
25:4e:35:60:fb:ea:bb:a1:00:a8:88:ab:47:03:f7:bd:53:65:
5c:66:72:54:eb:7f:b2:ae:11:2c:35:63:68:e7:d9:95:fb:1a:
ac:71:fe:d7:19:70:39:fe:f1:e4:ea:66:b4:71:48:52:d7:4f:
2c:71:fb:17:89:ac:bd:19:d0:08:2f:55:45:c4:35:8e:cd:5b:
24:5f:5c:14:84:7d:80:33:53:64:cd:27:89:62:4c:c2:ae:4c:
8e:3f:11:ef:0a:2e:10:e9:b6:e9:39:a8:d9:22:ec:5c:31:1f:
96:8a:6b:d2:90:a3:c8:38:a0:ad:f7:89:5c:c8:c1:38:ac:e2:
f5:a2:da:e0
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUc1zT9fI6piQQnGU9yWyQgZa2qRswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMTMzMjBaFw0yNzA1MjQwMTM4MjBaMDMxMTAvBgNV
BAMTKDFCQzMxNUVFNDM0OEE5MzlGMzg4NERCMTJGM0QxQTM3RENFNTQzREYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwWBXegfeIxngVMT+s0kgjdmgp
jOJy296ZWQebI3wWg+NFro7a/zInSqbQf3tXxLWvhpBS8tyKk+5WP2pnbAPYvfH0
GxdZqQBppXBcN8e5P0lloOYxlsUYJcq+2lDn05CchipSar1vuHkC/1Zyp7DAxtdO
eoTzgfnFtNXpAi/mZ8GsfKnRlYEsan1IHkIQ4f2jajoMJfyBAzQXHOlIHck/mP80
WicZl7RX7YKbhJu9688mEd1Tg2xwLBZMPhfXGcVyIIhdCfFPGWyaKxoCzYr7YJBd
BXKW9rlkmI3TyPf5z8XcTyvDIIWVkwSrwD2tBd7tvCdgtr6Z0u7xM/FgDEz1AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUG8MV7kNIqTnziE2xLz0aN9zlQ98wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1NDU2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqq9jANBgkqhkiG9w0BAQsFAAOCAQEAgs+L
gKhn7jlG6fju99Pgx9f8K0dWkyNSOHiB/b5dZXCR9OGEqYtg79kely96nBwljFSb
LcmHHIb9m9UrnTQnFhPzTtYU1Y/x1ygbRmw00nC3RGstIGZ96dshtGv1O3FhibJM
uavuSYFSu0nseEz+zQSSf4dqOHWS1+4bFWh5JU41YPvqu6EAqIirRwP3vVNlXGZy
VOt/sq4RLDVjaOfZlfsarHH+1xlwOf7x5OpmtHFIUtdPLHH7F4msvRnQCC9VRcQ1
js1bJF9cFIR9gDNTZM0niWJMwq5Mjj8R7wouEOm26Tmo2SLsXDEflopr0pCjyDig
rfeJXMjBOKzi9aLa4A==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:47 2026 by rpki-client