Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145530.roa
File: AS145530.roa (raw, json)
Hash identifier: 6R3OXzZHGkBb8e+AJROX14DDe5xuTTFXGGOoEQuJS5U=
Subject key identifier: 02:84:F0:2F:35:60:0D:96:F3:AF:63:6A:EF:41:FD:7B:69:92:E7:C6
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2A777AB9D6C52ECBF44E258AACEB5F019EFC9EF1
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145530.roa
Signing time: Fri 22 May 2026 04:27:12 +0000
ROA not before: Fri 22 May 2026 04:22:12 +0000
ROA not after: Fri 21 May 2027 04:27:12 +0000
asID: 145530
IP address blocks: 240a:ab40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:77:7a:b9:d6:c5:2e:cb:f4:4e:25:8a:ac:eb:5f:01:9e:fc:9e:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:22:12 2026 GMT
Not After : May 21 04:27:12 2027 GMT
Subject: CN=0284F02F35600D96F3AF636AEF41FD7B6992E7C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:63:a3:0e:c8:53:c4:49:d4:7d:96:cb:83:fc:
8c:79:7c:0c:33:09:f4:3f:27:02:26:bf:75:1b:1a:
40:c7:60:a1:71:a5:13:5f:28:b6:dc:4c:da:bd:45:
df:0a:a4:26:98:bb:1d:49:d7:d2:c7:c0:6a:2f:c1:
76:ab:79:12:ae:8f:3c:ee:ed:1e:44:55:fb:8f:5c:
fa:1f:11:fd:f9:1c:80:a4:2c:73:29:1c:12:48:7d:
95:85:a9:45:46:08:fd:51:4e:f8:56:64:65:7f:8f:
23:77:47:21:77:61:b4:a2:be:c7:41:7e:ec:7d:a6:
d8:6a:3d:25:bb:37:03:82:65:56:ac:8c:54:54:45:
46:99:0e:bc:74:53:c5:00:47:3f:ab:9a:89:53:97:
93:32:08:b8:59:07:0d:29:d2:5a:9a:ca:a1:9b:86:
ac:52:82:35:a0:90:24:73:f3:da:1d:4d:78:c5:a2:
f9:e5:77:72:6a:81:ea:3a:04:ab:a3:93:89:21:09:
27:3f:1b:42:91:48:83:68:4b:5f:04:57:0a:09:e6:
13:2a:de:a9:f7:39:8c:74:cb:ea:b0:1d:8e:f1:dc:
94:16:c3:90:5f:fb:e4:6a:b7:4b:a5:79:ea:59:91:
21:55:de:9a:dc:9a:3e:d1:29:73:26:c9:a0:a3:62:
b8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:84:F0:2F:35:60:0D:96:F3:AF:63:6A:EF:41:FD:7B:69:92:E7:C6
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ab40::/32
Signature Algorithm: sha256WithRSAEncryption
ab:69:1f:2d:72:3c:3d:5c:34:6d:ee:81:04:aa:a7:a0:ae:f5:
fc:c4:73:e6:5d:57:2a:e8:af:60:b6:08:d9:0f:fd:e2:22:ae:
16:16:a2:ac:70:6a:8b:96:45:03:7a:45:fb:57:1b:24:ed:16:
91:cd:62:0c:db:ef:36:6b:77:49:21:64:a1:97:2b:6a:36:f8:
c3:c8:1d:d8:17:75:5a:1a:31:3e:f9:f5:db:6e:27:2e:d8:2a:
0a:b9:cc:b7:b7:bc:28:92:2b:3e:8e:b0:dd:ee:99:55:27:ad:
67:36:f3:83:3c:8c:78:d7:db:c8:12:ec:7a:e4:1c:51:60:f1:
49:9c:93:8f:15:42:fb:41:d0:c3:da:71:a5:75:bf:dd:7f:4f:
70:16:6d:8f:a0:f3:67:0f:f1:9e:b9:97:76:7d:20:b4:50:13:
e6:16:e2:9a:d5:31:a1:ff:d8:34:ca:d7:c2:60:95:00:9f:4c:
ac:86:78:fa:98:36:ba:51:01:09:48:4c:a4:25:52:0e:1e:a2:
50:81:25:b8:40:4b:fe:19:b4:8f:5e:2b:5b:b8:49:a9:d7:75:
b0:bf:01:9c:53:57:ed:70:60:52:86:68:43:d0:bf:fb:7b:ab:
20:61:b7:77:7f:7c:4d:04:6b:4a:97:6c:54:d0:2b:25:15:28:
74:8f:33:3d
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUKnd6udbFLsv0TiWKrOtfAZ78nvEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNDIyMTJaFw0yNzA1MjEwNDI3MTJaMDMxMTAvBgNV
BAMTKDAyODRGMDJGMzU2MDBEOTZGM0FGNjM2QUVGNDFGRDdCNjk5MkU3QzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwY6MOyFPESdR9lsuD/Ix5fAwz
CfQ/JwImv3UbGkDHYKFxpRNfKLbcTNq9Rd8KpCaYux1J19LHwGovwXareRKujzzu
7R5EVfuPXPofEf35HICkLHMpHBJIfZWFqUVGCP1RTvhWZGV/jyN3RyF3YbSivsdB
fux9pthqPSW7NwOCZVasjFRURUaZDrx0U8UARz+rmolTl5MyCLhZBw0p0lqayqGb
hqxSgjWgkCRz89odTXjFovnld3Jqgeo6BKujk4khCSc/G0KRSINoS18EVwoJ5hMq
3qn3OYx0y+qwHY7x3JQWw5Bf++Rqt0uleepZkSFV3prcmj7RKXMmyaCjYrjdAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUAoTwLzVgDZbzr2Nq70H9e2mS58YwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1NTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqrQDANBgkqhkiG9w0BAQsFAAOCAQEAq2kf
LXI8PVw0be6BBKqnoK71/MRz5l1XKuivYLYI2Q/94iKuFhairHBqi5ZFA3pF+1cb
JO0Wkc1iDNvvNmt3SSFkoZcrajb4w8gd2Bd1WhoxPvn1224nLtgqCrnMt7e8KJIr
Po6w3e6ZVSetZzbzgzyMeNfbyBLseuQcUWDxSZyTjxVC+0HQw9pxpXW/3X9PcBZt
j6DzZw/xnrmXdn0gtFAT5hbimtUxof/YNMrXwmCVAJ9MrIZ4+pg2ulEBCUhMpCVS
Dh6iUIEluEBL/hm0j14rW7hJqdd1sL8BnFNX7XBgUoZoQ9C/+3urIGG3d398TQRr
SpdsVNArJRUodI8zPQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:20 2026 by rpki-client