Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145525.roa
File: AS145525.roa (raw, json)
Hash identifier: 2KRJu2nj7tK3zeEc0C2J5Zx71Kblbs+Ui5EPFq2V6gY=
Subject key identifier: DB:E8:7B:4F:59:07:FA:D6:21:13:25:9A:2C:16:EA:D1:2D:8F:81:4B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 05917019AB57CEFB1383CD419E05BDE7F8032C38
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145525.roa
Signing time: Fri 22 May 2026 06:58:44 +0000
ROA not before: Fri 22 May 2026 06:53:44 +0000
ROA not after: Fri 21 May 2027 06:58:44 +0000
asID: 145525
IP address blocks: 240a:ab3b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:91:70:19:ab:57:ce:fb:13:83:cd:41:9e:05:bd:e7:f8:03:2c:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:44 2026 GMT
Not After : May 21 06:58:44 2027 GMT
Subject: CN=DBE87B4F5907FAD62113259A2C16EAD12D8F814B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:fa:05:7b:de:81:37:cf:e4:70:e4:b4:a6:48:
24:ca:c6:0e:f3:33:ca:a1:da:67:04:6b:6b:c3:9f:
be:8a:a5:54:7d:f1:58:af:c6:6c:58:47:e8:d0:93:
74:c4:fd:05:c2:02:88:28:20:63:45:ca:2d:f7:c8:
9d:88:3e:96:13:c5:c8:e9:fd:9c:21:c1:7f:12:ef:
c5:9d:48:67:c2:17:8d:16:e5:fd:73:44:dd:55:a5:
8e:6b:76:fc:54:7a:ec:4d:aa:a7:07:13:29:75:d4:
d5:f1:d4:c8:cf:b0:15:77:68:64:ab:15:10:cb:cc:
62:d9:f3:a6:8c:b9:ea:71:bc:d1:be:1c:04:1f:71:
c7:84:0b:b5:3d:53:fb:4e:2e:78:6c:8e:12:02:3f:
7d:98:5b:a2:77:23:4a:22:c5:3c:ae:4e:4a:15:45:
0c:87:9b:84:b4:8b:6e:b2:31:2b:c5:6d:87:30:7f:
34:69:ee:17:58:4b:ba:03:15:02:31:be:e8:74:5b:
ec:60:90:71:0b:e7:7f:86:3f:16:7a:1e:17:33:71:
91:30:30:76:b7:e8:a6:34:c3:de:6e:54:68:9b:19:
ca:73:0f:d7:22:85:95:a5:56:1a:31:4c:64:b8:32:
2c:20:82:7f:4e:34:c2:cd:0e:e6:75:5c:70:8b:90:
9f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:E8:7B:4F:59:07:FA:D6:21:13:25:9A:2C:16:EA:D1:2D:8F:81:4B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145525.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ab3b::/32
Signature Algorithm: sha256WithRSAEncryption
36:d0:50:72:f7:67:c6:e4:9e:e0:b5:9a:81:89:e9:05:c8:02:
e5:e9:e8:39:00:f2:52:f4:a2:1a:24:84:d1:1b:7b:80:58:11:
d0:97:81:1e:97:36:39:5c:4a:c9:ad:49:20:cf:3e:2c:c4:33:
64:5c:18:a0:a5:fc:dc:bb:39:15:b3:cd:31:b9:4c:6b:1a:0b:
74:82:1d:37:41:bc:ab:ca:f0:ab:a8:88:9d:7c:3b:30:4f:17:
9b:f3:db:d9:96:50:91:f5:bd:be:30:23:90:d8:b7:18:7c:52:
8c:2e:b3:55:ef:15:f0:53:76:81:ab:4c:27:fc:1e:16:ac:b3:
fe:b3:b2:4c:52:b5:c7:e6:a7:3f:8e:64:32:a2:e7:df:69:49:
ec:e6:c1:39:ff:30:5a:b6:0e:54:13:41:42:78:51:b1:77:a4:
58:1c:54:bb:73:f5:f1:d6:66:7d:14:e3:c8:ed:98:da:25:30:
6e:40:89:67:a2:8e:eb:ab:8c:e9:4f:46:fc:9f:65:dc:f9:ed:
f3:a2:91:4f:82:af:e3:a1:6c:1a:a5:38:ed:1d:8e:05:53:4e:
11:c2:7e:d2:3a:9c:c6:29:b9:e7:82:f9:9d:f0:3e:c6:8b:1e:
0c:fd:71:35:02:14:02:81:e1:e2:52:33:cb:5c:a3:c1:ef:9c:
d3:7b:5d:1e
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUBZFwGatXzvsTg81BngW95/gDLDgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjUzNDRaFw0yNzA1MjEwNjU4NDRaMDMxMTAvBgNV
BAMTKERCRTg3QjRGNTkwN0ZBRDYyMTEzMjU5QTJDMTZFQUQxMkQ4RjgxNEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh+gV73oE3z+Rw5LSmSCTKxg7z
M8qh2mcEa2vDn76KpVR98VivxmxYR+jQk3TE/QXCAogoIGNFyi33yJ2IPpYTxcjp
/ZwhwX8S78WdSGfCF40W5f1zRN1VpY5rdvxUeuxNqqcHEyl11NXx1MjPsBV3aGSr
FRDLzGLZ86aMuepxvNG+HAQfcceEC7U9U/tOLnhsjhICP32YW6J3I0oixTyuTkoV
RQyHm4S0i26yMSvFbYcwfzRp7hdYS7oDFQIxvuh0W+xgkHEL53+GPxZ6HhczcZEw
MHa36KY0w95uVGibGcpzD9cihZWlVhoxTGS4Miwggn9ONMLNDuZ1XHCLkJ9dAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU2+h7T1kH+tYhEyWaLBbq0S2PgUswHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1NTI1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqrOzANBgkqhkiG9w0BAQsFAAOCAQEANtBQ
cvdnxuSe4LWagYnpBcgC5enoOQDyUvSiGiSE0Rt7gFgR0JeBHpc2OVxKya1JIM8+
LMQzZFwYoKX83Ls5FbPNMblMaxoLdIIdN0G8q8rwq6iInXw7ME8Xm/Pb2ZZQkfW9
vjAjkNi3GHxSjC6zVe8V8FN2gatMJ/weFqyz/rOyTFK1x+anP45kMqLn32lJ7ObB
Of8wWrYOVBNBQnhRsXekWBxUu3P18dZmfRTjyO2Y2iUwbkCJZ6KO66uM6U9G/J9l
3Pnt86KRT4Kv46FsGqU47R2OBVNOEcJ+0jqcxim554L5nfA+xoseDP1xNQIUAoHh
4lIzy1yjwe+c03tdHg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:14 2026 by rpki-client