Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145501.roa
File: AS145501.roa (raw, json)
Hash identifier: g1HEy6hLncIsJZOyT6XWmGCy7CO7hBG5JfQFeWsEhxQ=
Subject key identifier: 7B:82:BC:09:8C:84:75:58:DE:37:D0:89:12:7C:28:99:BF:57:DF:97
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 151151CD3919B6913B08B8BE616617FBAF39703F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145501.roa
Signing time: Fri 22 May 2026 07:32:22 +0000
ROA not before: Fri 22 May 2026 07:27:22 +0000
ROA not after: Fri 21 May 2027 07:32:22 +0000
asID: 145501
IP address blocks: 240a:ab23::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:11:51:cd:39:19:b6:91:3b:08:b8:be:61:66:17:fb:af:39:70:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:27:22 2026 GMT
Not After : May 21 07:32:22 2027 GMT
Subject: CN=7B82BC098C847558DE37D089127C2899BF57DF97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:9d:af:b6:d5:92:44:6b:e0:01:78:23:77:57:
5b:08:b7:21:7f:73:5f:84:dd:33:2e:a9:8b:c2:f2:
ad:9b:72:7b:c8:e4:41:79:2f:0f:11:06:6c:67:79:
36:5b:58:50:a1:25:27:b8:c6:05:80:ba:91:62:9e:
23:e4:30:6f:37:c7:b6:b7:dd:0b:04:86:61:d2:6c:
b3:65:bd:f5:11:86:35:5a:87:04:3f:b9:d5:57:e4:
26:ae:69:06:e7:3b:39:6f:de:9b:9e:37:79:1b:a4:
0b:92:c4:75:e5:c1:5a:05:b3:b8:1a:ef:70:00:f1:
64:7a:26:fe:e8:98:c5:ea:40:ff:10:75:be:46:26:
50:7b:90:44:19:de:c6:1d:4a:4c:0b:ca:1b:3f:43:
2d:0b:ee:e6:a5:e4:cc:53:46:11:0e:59:ee:7e:fa:
93:1e:b1:69:0f:be:a2:df:42:dd:c4:7a:2b:51:b5:
67:26:b1:85:74:bb:38:14:1d:2d:69:20:45:f6:4e:
12:c0:49:a1:bb:a6:82:56:56:30:50:9f:7b:d1:b6:
35:78:ee:0c:79:1e:de:17:33:c0:f8:d8:ef:04:5a:
a1:8f:2a:eb:61:72:22:60:82:88:40:a1:ee:0e:4b:
0b:a0:8a:97:d4:92:c5:80:82:3e:95:53:1a:ed:b0:
6b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:82:BC:09:8C:84:75:58:DE:37:D0:89:12:7C:28:99:BF:57:DF:97
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145501.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ab23::/32
Signature Algorithm: sha256WithRSAEncryption
9b:ba:84:50:fa:02:6f:ca:f6:ba:87:ff:fe:ca:ac:87:47:77:
fe:54:90:3b:bb:de:ba:ca:0d:5f:2c:17:ff:97:56:d3:9a:75:
69:97:ec:90:a5:e6:6c:e9:77:72:86:b7:5b:7e:a6:68:1f:43:
48:8b:80:32:58:32:3b:09:99:b7:2c:93:e3:02:f4:5a:16:d2:
fc:79:74:84:7a:25:b1:78:04:6e:66:49:27:b4:5b:2a:eb:af:
b4:db:eb:05:f1:c2:aa:1f:34:9e:30:f7:dc:85:c4:bd:a2:9a:
da:ff:87:d7:ea:63:ed:6f:6d:3f:2f:a5:b0:16:4f:e0:02:c6:
f2:2b:e9:f8:66:ac:50:c9:92:b6:6a:e9:37:c0:36:5d:ad:aa:
09:10:42:dd:9f:45:30:df:63:a5:42:57:41:65:b0:69:56:d7:
43:f5:83:07:d5:7b:34:56:d4:8a:06:32:04:3d:80:02:36:4d:
b5:d3:d6:d1:9f:6a:5d:be:0d:10:07:5a:cc:ac:0a:9c:86:df:
15:d1:2c:ff:ea:86:cd:e3:b7:a5:1e:f8:1e:de:84:0b:38:58:
8e:71:19:08:e2:e5:90:97:e9:a7:75:68:60:2f:c6:86:61:89:
7d:20:ec:47:94:ce:f1:36:92:0b:63:48:55:4e:7a:2a:13:d9:
38:8e:33:d7
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUFRFRzTkZtpE7CLi+YWYX+685cD8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzI3MjJaFw0yNzA1MjEwNzMyMjJaMDMxMTAvBgNV
BAMTKDdCODJCQzA5OEM4NDc1NThERTM3RDA4OTEyN0MyODk5QkY1N0RGOTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnna+21ZJEa+ABeCN3V1sItyF/
c1+E3TMuqYvC8q2bcnvI5EF5Lw8RBmxneTZbWFChJSe4xgWAupFiniPkMG83x7a3
3QsEhmHSbLNlvfURhjVahwQ/udVX5CauaQbnOzlv3pueN3kbpAuSxHXlwVoFs7ga
73AA8WR6Jv7omMXqQP8Qdb5GJlB7kEQZ3sYdSkwLyhs/Qy0L7ual5MxTRhEOWe5+
+pMesWkPvqLfQt3EeitRtWcmsYV0uzgUHS1pIEX2ThLASaG7poJWVjBQn3vRtjV4
7gx5Ht4XM8D42O8EWqGPKuthciJggohAoe4OSwugipfUksWAgj6VUxrtsGsHAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUe4K8CYyEdVjeN9CJEnwomb9X35cwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1NTAxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqrIzANBgkqhkiG9w0BAQsFAAOCAQEAm7qE
UPoCb8r2uof//sqsh0d3/lSQO7veusoNXywX/5dW05p1aZfskKXmbOl3coa3W36m
aB9DSIuAMlgyOwmZtyyT4wL0WhbS/Hl0hHolsXgEbmZJJ7RbKuuvtNvrBfHCqh80
njD33IXEvaKa2v+H1+pj7W9tPy+lsBZP4ALG8ivp+GasUMmStmrpN8A2Xa2qCRBC
3Z9FMN9jpUJXQWWwaVbXQ/WDB9V7NFbUigYyBD2AAjZNtdPW0Z9qXb4NEAdazKwK
nIbfFdEs/+qGzeO3pR74Ht6ECzhYjnEZCOLlkJfpp3VoYC/GhmGJfSDsR5TO8TaS
C2NIVU56KhPZOI4z1w==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:20 2026 by rpki-client