Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145485.roa
File: AS145485.roa (raw, json)
Hash identifier: lzlV5ppHsz2GGtP93masJWkHP/9LbuIRRXRTD8CNrEw=
Subject key identifier: C5:5C:2F:69:C8:4A:2F:6D:39:92:EA:8E:04:91:8D:0C:10:C6:E6:69
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0EED937DB49F6A4D6594E91084651FC060740E34
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145485.roa
Signing time: Fri 22 May 2026 07:25:02 +0000
ROA not before: Fri 22 May 2026 07:20:02 +0000
ROA not after: Fri 21 May 2027 07:25:02 +0000
asID: 145485
IP address blocks: 240a:ab13::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:ed:93:7d:b4:9f:6a:4d:65:94:e9:10:84:65:1f:c0:60:74:0e:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:20:02 2026 GMT
Not After : May 21 07:25:02 2027 GMT
Subject: CN=C55C2F69C84A2F6D3992EA8E04918D0C10C6E669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:4f:a4:35:ee:b9:54:3b:0b:7a:4e:c1:da:92:
67:06:71:bf:f7:9a:c3:f7:51:4e:58:2f:6e:9f:f1:
29:e6:88:97:0b:47:f1:83:97:3e:75:34:fa:70:72:
87:41:7c:48:50:a9:72:56:3a:e4:62:bc:b1:72:13:
26:cf:06:3a:a5:b3:13:ab:ca:3d:bf:27:a5:77:0e:
44:32:64:94:f8:bd:85:d7:be:2a:d3:c2:5f:35:f6:
87:f4:f8:1b:49:1e:6f:32:63:b9:b1:69:00:29:c4:
d5:ad:ef:b1:7f:a9:2c:84:6a:3c:48:4a:ab:2e:09:
1e:f6:2b:8e:65:61:b8:e3:34:20:4d:1a:7f:0d:1c:
87:9f:59:48:5f:77:7d:57:8f:d7:97:2e:d7:fa:b2:
51:34:1e:07:ab:83:ed:87:1c:69:74:60:e9:27:db:
45:2c:d1:5f:d0:e6:95:d9:ce:cc:88:7c:1c:26:e3:
c8:7d:ae:bf:bb:4c:a1:0c:c2:02:94:2b:68:3c:68:
a8:ed:1d:15:19:68:0d:3a:b4:81:e3:1d:fb:72:23:
29:e3:f8:31:ae:80:24:32:1c:da:60:2c:42:f4:af:
8e:8c:a5:1b:2e:9c:81:9d:63:ed:81:5c:d0:c5:83:
25:f8:a1:91:7a:17:46:46:c1:6d:89:e2:4d:03:b1:
d5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:5C:2F:69:C8:4A:2F:6D:39:92:EA:8E:04:91:8D:0C:10:C6:E6:69
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145485.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ab13::/32
Signature Algorithm: sha256WithRSAEncryption
77:6b:cc:32:fe:c5:c4:b0:cc:94:9c:e2:2b:d8:a8:3a:4a:4d:
1c:ca:d9:e2:95:2b:aa:ed:ba:24:8c:69:78:7c:14:2a:41:e5:
35:6b:8a:27:ef:3a:ce:40:d1:f0:fd:3b:2b:f3:2f:63:c5:7e:
38:b3:e8:34:29:a0:4b:81:e5:cf:80:dd:76:e2:15:50:f3:51:
04:5e:78:ab:68:4c:cc:1c:2c:59:43:ea:d4:a3:55:11:0d:15:
a1:a8:61:f1:70:50:f5:1c:c4:53:4a:83:a7:41:9c:20:5f:61:
39:89:ce:08:2d:6a:e3:96:1a:33:a3:ee:19:9c:6c:a1:3d:60:
7d:6e:79:7f:cc:4c:e1:8a:53:8c:bc:11:1b:d5:7c:16:25:57:
b8:e4:56:2c:86:23:3b:67:e2:d7:a7:7a:a4:a0:2d:c8:5d:7f:
f1:55:92:91:47:d8:9b:50:ff:1e:6a:38:f8:63:24:dd:d9:4d:
39:8a:92:a8:11:cd:11:d6:6e:91:ae:8f:16:ec:0b:4c:59:8e:
1d:2f:a4:96:bd:85:b9:0c:79:c3:ec:49:8f:7b:d5:d9:49:42:
f8:8c:d5:1a:5e:44:38:ca:9b:c1:5e:75:87:0e:4a:bc:15:2a:
68:f5:86:70:0e:54:47:d5:d5:cc:e2:2a:f5:cc:b0:13:ed:0b:
f2:df:54:1b
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUDu2TfbSfak1llOkQhGUfwGB0DjQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzIwMDJaFw0yNzA1MjEwNzI1MDJaMDMxMTAvBgNV
BAMTKEM1NUMyRjY5Qzg0QTJGNkQzOTkyRUE4RTA0OTE4RDBDMTBDNkU2NjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCDT6Q17rlUOwt6TsHakmcGcb/3
msP3UU5YL26f8SnmiJcLR/GDlz51NPpwcodBfEhQqXJWOuRivLFyEybPBjqlsxOr
yj2/J6V3DkQyZJT4vYXXvirTwl819of0+BtJHm8yY7mxaQApxNWt77F/qSyEajxI
SqsuCR72K45lYbjjNCBNGn8NHIefWUhfd31Xj9eXLtf6slE0Hgerg+2HHGl0YOkn
20Us0V/Q5pXZzsyIfBwm48h9rr+7TKEMwgKUK2g8aKjtHRUZaA06tIHjHftyIynj
+DGugCQyHNpgLEL0r46MpRsunIGdY+2BXNDFgyX4oZF6F0ZGwW2J4k0DsdVhAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUxVwvachKL205kuqOBJGNDBDG5mkwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1NDg1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqrEzANBgkqhkiG9w0BAQsFAAOCAQEAd2vM
Mv7FxLDMlJziK9ioOkpNHMrZ4pUrqu26JIxpeHwUKkHlNWuKJ+86zkDR8P07K/Mv
Y8V+OLPoNCmgS4Hlz4DdduIVUPNRBF54q2hMzBwsWUPq1KNVEQ0Voahh8XBQ9RzE
U0qDp0GcIF9hOYnOCC1q45YaM6PuGZxsoT1gfW55f8xM4YpTjLwRG9V8FiVXuORW
LIYjO2fi16d6pKAtyF1/8VWSkUfYm1D/Hmo4+GMk3dlNOYqSqBHNEdZuka6PFuwL
TFmOHS+klr2FuQx5w+xJj3vV2UlC+IzVGl5EOMqbwV51hw5KvBUqaPWGcA5UR9XV
zOIq9cywE+0L8t9UGw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:37 2026 by rpki-client