Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145503.roa
File: AS145503.roa (raw, json)
Hash identifier: L17khUzcY9qAxKsy81JXz1iCWimJe/B4KxSIcV5y3B0=
Subject key identifier: 25:2E:13:75:A0:ED:62:73:21:D2:DD:E3:55:C8:31:61:DB:4D:45:E5
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4BDB0F55724E09343D8CF439F08488D72465489E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145503.roa
Signing time: Fri 22 May 2026 06:46:19 +0000
ROA not before: Fri 22 May 2026 06:41:19 +0000
ROA not after: Fri 21 May 2027 06:46:19 +0000
asID: 145503
IP address blocks: 240a:ab25::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:db:0f:55:72:4e:09:34:3d:8c:f4:39:f0:84:88:d7:24:65:48:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:41:19 2026 GMT
Not After : May 21 06:46:19 2027 GMT
Subject: CN=252E1375A0ED627321D2DDE355C83161DB4D45E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2b:b7:db:52:63:b7:43:76:c0:c1:5e:9b:9a:
c9:ab:4d:37:4e:cb:e9:61:6a:9f:8a:cf:8f:2a:c8:
e7:3c:c1:88:6f:70:d7:ac:91:e5:a0:c3:43:ae:64:
cc:17:c8:44:06:10:5b:e9:ae:87:76:b8:09:5c:7e:
72:ee:89:f8:94:68:c1:e1:32:d4:07:28:aa:d0:b5:
c7:b4:94:ed:2b:83:ba:ab:55:57:02:8f:bc:50:79:
16:8f:9f:66:06:87:5e:06:db:81:1d:8a:62:32:ee:
56:11:6b:b0:9c:31:26:aa:01:43:23:e2:d2:d3:ed:
bc:50:ae:c6:59:7c:e9:a6:dc:dd:a0:ff:99:1b:e0:
2c:bd:41:03:04:2e:a8:8c:e9:17:82:27:38:28:bc:
bf:21:73:41:1d:43:40:42:6b:26:31:b8:14:87:82:
98:c9:9c:f5:4f:b5:50:8c:e2:f2:79:31:56:24:fe:
3b:53:af:bd:6d:48:00:74:29:22:5e:2e:f4:40:43:
bf:e6:18:4d:2e:10:aa:9d:99:8f:6d:04:05:db:d3:
54:83:cd:2f:66:17:3f:b4:58:28:37:ab:33:ca:33:
80:ec:c1:7b:c9:91:88:eb:4b:d2:0f:5a:c2:47:d0:
54:2b:cb:3c:af:f6:c2:16:0c:43:9d:08:91:76:b4:
2e:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:2E:13:75:A0:ED:62:73:21:D2:DD:E3:55:C8:31:61:DB:4D:45:E5
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145503.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ab25::/32
Signature Algorithm: sha256WithRSAEncryption
70:23:c2:ae:30:94:23:81:91:0a:1d:15:4a:15:bc:9b:64:f6:
1c:15:18:3b:96:3c:51:b3:85:5c:57:e4:64:29:5e:cc:91:8a:
3d:82:f9:17:e0:79:78:66:ed:0d:ff:33:04:69:ed:ee:84:5d:
76:d2:15:58:3d:21:e0:14:88:b6:92:43:f7:5c:d6:36:b4:29:
f5:f2:dd:f5:b4:59:be:82:f7:fc:8e:da:21:38:c8:3a:5b:2f:
07:f3:5d:fe:e1:39:c8:c8:4c:72:8e:22:c3:d6:10:63:2c:1b:
2e:47:aa:f7:67:01:65:89:bb:21:f5:9e:2e:ae:e1:7a:8f:e8:
61:c9:23:ce:e2:62:3a:26:ae:1b:4c:46:02:a2:a8:dc:e3:2a:
51:a4:63:2d:23:85:0d:cf:d9:0b:a8:39:7c:ec:68:60:b9:84:
7f:f0:3d:ac:b5:89:cc:ab:a4:56:6f:47:91:ac:45:3a:f5:22:
6d:6a:2d:1e:d7:77:4f:75:aa:c2:26:e8:34:1e:14:62:63:a2:
5b:ae:03:27:90:81:9a:3f:b3:1d:38:1d:a9:ed:e6:52:27:4a:
6d:3c:58:d6:a7:65:e6:83:9d:32:2d:d8:3a:ab:85:e1:7a:8f:
72:36:21:43:3a:68:86:5d:48:57:bb:d6:11:42:7d:8a:2a:4e:
41:51:25:c5
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUS9sPVXJOCTQ9jPQ58ISI1yRlSJ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjQxMTlaFw0yNzA1MjEwNjQ2MTlaMDMxMTAvBgNV
BAMTKDI1MkUxMzc1QTBFRDYyNzMyMUQyRERFMzU1QzgzMTYxREI0RDQ1RTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWK7fbUmO3Q3bAwV6bmsmrTTdO
y+lhap+Kz48qyOc8wYhvcNeskeWgw0OuZMwXyEQGEFvprod2uAlcfnLuifiUaMHh
MtQHKKrQtce0lO0rg7qrVVcCj7xQeRaPn2YGh14G24EdimIy7lYRa7CcMSaqAUMj
4tLT7bxQrsZZfOmm3N2g/5kb4Cy9QQMELqiM6ReCJzgovL8hc0EdQ0BCayYxuBSH
gpjJnPVPtVCM4vJ5MVYk/jtTr71tSAB0KSJeLvRAQ7/mGE0uEKqdmY9tBAXb01SD
zS9mFz+0WCg3qzPKM4DswXvJkYjrS9IPWsJH0FQryzyv9sIWDEOdCJF2tC5fAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUJS4TdaDtYnMh0t3jVcgxYdtNReUwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1NTAzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqrJTANBgkqhkiG9w0BAQsFAAOCAQEAcCPC
rjCUI4GRCh0VShW8m2T2HBUYO5Y8UbOFXFfkZClezJGKPYL5F+B5eGbtDf8zBGnt
7oRddtIVWD0h4BSItpJD91zWNrQp9fLd9bRZvoL3/I7aITjIOlsvB/Nd/uE5yMhM
co4iw9YQYywbLkeq92cBZYm7IfWeLq7heo/oYckjzuJiOiauG0xGAqKo3OMqUaRj
LSOFDc/ZC6g5fOxoYLmEf/A9rLWJzKukVm9HkaxFOvUibWotHtd3T3WqwiboNB4U
YmOiW64DJ5CBmj+zHTgdqe3mUidKbTxY1qdl5oOdMi3YOquF4XqPcjYhQzpohl1I
V7vWEUJ9iipOQVElxQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:17 2026 by rpki-client