Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145511.roa
File: AS145511.roa (raw, json)
Hash identifier: PFzYBarMrIUVTvPSPQOTOuN91buzufC/aCEI5TS6eOE=
Subject key identifier: CB:23:CF:59:C0:47:1F:C2:1E:4D:1B:0C:DD:6A:7D:AB:E4:5C:75:78
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 313903FE981498E022C5DEEBC2057B413821B061
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145511.roa
Signing time: Mon 25 May 2026 06:28:42 +0000
ROA not before: Mon 25 May 2026 06:23:42 +0000
ROA not after: Mon 24 May 2027 06:28:42 +0000
asID: 145511
IP address blocks: 240a:ab2d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:39:03:fe:98:14:98:e0:22:c5:de:eb:c2:05:7b:41:38:21:b0:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:42 2026 GMT
Not After : May 24 06:28:42 2027 GMT
Subject: CN=CB23CF59C0471FC21E4D1B0CDD6A7DABE45C7578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:43:2e:38:41:86:f2:82:25:43:ef:d5:fb:ae:
7e:4e:5f:9f:da:e2:f4:36:f7:7c:4a:45:a0:40:79:
42:bf:5a:bd:5f:36:38:0a:e9:1f:99:18:96:36:40:
cc:c7:3f:4e:02:86:70:57:d7:36:c3:34:1e:f7:e8:
f9:40:2e:cf:33:bf:ad:25:e5:b4:20:c1:1f:42:3c:
ff:df:fd:17:18:ad:62:65:55:a1:8a:77:9e:1a:b3:
8d:cc:1d:f9:14:f3:9d:aa:a6:66:ec:c9:f7:73:86:
05:54:d0:8a:17:de:9b:33:39:8b:50:47:1f:7a:dd:
14:f5:00:06:02:c6:d5:0e:d8:a1:0b:28:e8:42:c8:
64:5a:99:81:27:70:da:ec:8c:a9:4d:9f:65:1d:17:
31:43:ce:e8:23:e6:18:43:52:67:6f:ea:f0:4e:85:
4f:95:10:4b:f8:b5:99:dc:db:0d:51:1d:53:69:28:
12:48:cd:6f:5d:6e:ec:77:0a:1a:ea:cd:ef:1c:3a:
dd:70:d2:2b:31:db:ef:fd:c6:3b:95:f2:92:c5:28:
6a:1e:8b:ca:16:46:e5:ef:88:34:f9:b7:c2:13:67:
47:08:a8:34:c7:c1:7d:4a:68:44:c0:63:a8:fc:a6:
d6:bf:aa:b0:a8:d1:b1:4e:6c:33:a3:c3:be:db:7b:
3f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:23:CF:59:C0:47:1F:C2:1E:4D:1B:0C:DD:6A:7D:AB:E4:5C:75:78
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145511.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ab2d::/32
Signature Algorithm: sha256WithRSAEncryption
66:54:0a:22:ec:a4:c2:28:2b:f9:3d:3c:b5:b5:54:9e:af:03:
99:6f:26:d7:2e:d2:49:00:e5:fd:f9:18:0c:0b:58:72:c8:4d:
f8:63:1f:97:9b:b7:bd:12:53:82:b2:0f:9b:90:79:69:91:6b:
bf:f9:c2:b8:19:46:6d:67:e3:2a:76:f2:97:0e:93:cf:c4:5c:
a6:98:8d:22:c9:f3:46:b0:bc:48:43:fc:6a:52:26:ad:95:6c:
a3:af:5d:bd:19:ea:91:37:28:e2:c2:7f:87:e5:5e:06:c9:9a:
b5:dd:d4:68:81:a8:5c:6f:e8:5b:17:67:3d:73:cd:cd:ea:53:
88:9f:a2:7f:3b:0d:f3:a8:4f:39:7b:59:d5:b5:67:ce:ac:46:
cd:04:9e:33:85:62:6a:e1:cc:3d:1a:f3:8d:61:02:89:6d:62:
ac:1e:6f:4f:7a:4d:19:a5:e4:38:12:37:1e:17:20:5b:34:d4:
66:a9:bc:0a:be:7a:7b:25:23:57:07:60:05:3f:29:08:d4:fd:
e0:80:87:d8:78:c9:00:c8:34:35:93:47:48:89:61:a4:0c:ee:
05:be:57:15:6a:aa:31:a1:36:c3:87:5d:a0:b4:9b:55:ee:54:
76:73:65:d7:c1:0d:67:8e:b6:b8:cf:91:82:3c:df:8d:2d:ca:
3b:e6:11:5c
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUMTkD/pgUmOAixd7rwgV7QTghsGEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwNjIzNDJaFw0yNzA1MjQwNjI4NDJaMDMxMTAvBgNV
BAMTKENCMjNDRjU5QzA0NzFGQzIxRTREMUIwQ0RENkE3REFCRTQ1Qzc1NzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkQy44QYbygiVD79X7rn5OX5/a
4vQ293xKRaBAeUK/Wr1fNjgK6R+ZGJY2QMzHP04ChnBX1zbDNB736PlALs8zv60l
5bQgwR9CPP/f/RcYrWJlVaGKd54as43MHfkU852qpmbsyfdzhgVU0IoX3pszOYtQ
Rx963RT1AAYCxtUO2KELKOhCyGRamYEncNrsjKlNn2UdFzFDzugj5hhDUmdv6vBO
hU+VEEv4tZnc2w1RHVNpKBJIzW9dbux3Chrqze8cOt1w0isx2+/9xjuV8pLFKGoe
i8oWRuXviDT5t8ITZ0cIqDTHwX1KaETAY6j8pta/qrCo0bFObDOjw77bez8jAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUyyPPWcBHH8IeTRsM3Wp9q+RcdXgwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1NTExLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqrLTANBgkqhkiG9w0BAQsFAAOCAQEAZlQK
Iuykwigr+T08tbVUnq8DmW8m1y7SSQDl/fkYDAtYcshN+GMfl5u3vRJTgrIPm5B5
aZFrv/nCuBlGbWfjKnbylw6Tz8RcppiNIsnzRrC8SEP8alImrZVso69dvRnqkTco
4sJ/h+VeBsmatd3UaIGoXG/oWxdnPXPNzepTiJ+ifzsN86hPOXtZ1bVnzqxGzQSe
M4ViauHMPRrzjWECiW1irB5vT3pNGaXkOBI3HhcgWzTUZqm8Cr56eyUjVwdgBT8p
CNT94ICH2HjJAMg0NZNHSIlhpAzuBb5XFWqqMaE2w4ddoLSbVe5UdnNl18ENZ462
uM+RgjzfjS3KO+YRXA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:04 2026 by rpki-client