Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145565.roa
File: AS145565.roa (raw, json)
Hash identifier: XKLhLD/gZweEUwRpPUdJWy3OTAExUTqc4y9Fo2m1OYQ=
Subject key identifier: CD:89:6B:DF:78:20:F4:BE:C2:7E:8C:00:87:AE:4C:DC:D6:E1:CF:2B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3FC9B7C653C15E0C675AD54D47CC1E506F743F18
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145565.roa
Signing time: Fri 22 May 2026 07:08:41 +0000
ROA not before: Fri 22 May 2026 07:03:41 +0000
ROA not after: Fri 21 May 2027 07:08:41 +0000
asID: 145565
IP address blocks: 240a:ab63::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:c9:b7:c6:53:c1:5e:0c:67:5a:d5:4d:47:cc:1e:50:6f:74:3f:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:03:41 2026 GMT
Not After : May 21 07:08:41 2027 GMT
Subject: CN=CD896BDF7820F4BEC27E8C0087AE4CDCD6E1CF2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:9e:1e:8b:24:d9:ba:71:0d:cd:97:a7:ce:8e:
da:40:5c:db:7f:4d:60:33:04:f3:0a:83:bc:db:b3:
44:8b:c6:82:cb:39:d7:42:e2:81:2b:3f:13:38:7a:
c5:16:56:3d:86:45:13:f8:a8:d9:69:55:01:6a:73:
23:ce:04:c3:be:8a:8e:56:dd:52:93:78:80:d7:d9:
d9:e2:73:90:ce:d3:24:40:8d:9f:27:69:f1:fa:91:
45:0c:1a:9f:dc:ce:73:10:57:f4:4a:53:3c:bb:5b:
e1:48:a5:86:fd:23:00:ef:de:03:45:40:3a:39:20:
a3:3c:6f:61:f3:79:82:6f:6c:66:26:8b:15:4d:f8:
82:39:6e:15:b2:b0:1c:93:f6:ca:bb:e6:42:e2:20:
fe:0f:91:26:1c:2c:88:89:bc:c0:24:2a:c1:7d:bd:
d9:ef:23:3f:0f:43:1e:67:3f:51:91:0e:14:73:92:
ee:ee:45:ef:ef:56:94:b3:e3:ff:dd:e6:d9:b5:c7:
6d:9f:45:51:22:9e:20:81:21:14:44:24:07:78:c9:
94:55:f4:d4:a8:d9:0c:50:e3:95:3f:04:bf:02:60:
a5:79:9c:bc:6a:b6:0d:6a:d5:97:65:78:b8:a6:01:
b2:93:e0:78:fe:68:3e:11:fb:ac:42:77:29:c4:cf:
f3:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:89:6B:DF:78:20:F4:BE:C2:7E:8C:00:87:AE:4C:DC:D6:E1:CF:2B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145565.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ab63::/32
Signature Algorithm: sha256WithRSAEncryption
55:cd:a5:74:8f:b4:39:86:34:c0:19:28:9c:b2:f4:cb:3f:e5:
d6:23:6c:31:8e:60:35:47:29:ce:e9:e6:6d:21:0a:f8:2e:66:
32:c2:ad:cc:be:fc:c9:89:97:74:74:2b:b0:9d:b3:93:25:58:
cc:68:e3:e5:50:9c:26:51:63:6c:a8:13:63:83:ae:ea:6a:02:
dc:98:b3:c8:61:21:70:f5:ce:4f:8a:ac:e4:03:f4:f2:71:c9:
02:71:b7:8c:d8:65:eb:36:69:86:02:73:4e:61:b7:a4:41:83:
b1:ad:4c:d7:04:53:c5:7f:76:b8:cf:c3:40:90:2f:f5:c7:ac:
6d:12:47:11:fe:e5:3a:88:01:93:87:29:f7:2d:4e:34:c4:07:
61:b0:bb:d4:06:51:6f:0f:c2:ee:40:da:d8:6a:7b:c5:c8:a8:
e2:3f:dc:fc:09:e9:69:61:22:19:ee:73:7c:e0:39:8b:11:7e:
61:c9:8b:d2:0b:27:ad:2b:ed:b7:43:38:3b:6a:b8:c2:bd:12:
bd:9e:3f:d5:b1:69:b7:d0:e6:71:98:08:f6:b7:40:4f:f9:a7:
35:da:a6:68:b4:0b:a5:c1:ca:1e:28:4e:0d:db:64:8b:74:74:
63:f6:f7:ac:87:e2:db:c6:cb:db:72:3b:0e:73:17:8b:5e:7f:
68:5f:68:b6
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUP8m3xlPBXgxnWtVNR8weUG90PxgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzAzNDFaFw0yNzA1MjEwNzA4NDFaMDMxMTAvBgNV
BAMTKENEODk2QkRGNzgyMEY0QkVDMjdFOEMwMDg3QUU0Q0RDRDZFMUNGMkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZnh6LJNm6cQ3Nl6fOjtpAXNt/
TWAzBPMKg7zbs0SLxoLLOddC4oErPxM4esUWVj2GRRP4qNlpVQFqcyPOBMO+io5W
3VKTeIDX2dnic5DO0yRAjZ8nafH6kUUMGp/cznMQV/RKUzy7W+FIpYb9IwDv3gNF
QDo5IKM8b2HzeYJvbGYmixVN+II5bhWysByT9sq75kLiIP4PkSYcLIiJvMAkKsF9
vdnvIz8PQx5nP1GRDhRzku7uRe/vVpSz4//d5tm1x22fRVEiniCBIRREJAd4yZRV
9NSo2QxQ45U/BL8CYKV5nLxqtg1q1ZdleLimAbKT4Hj+aD4R+6xCdynEz/NLAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUzYlr33gg9L7CfowAh65M3NbhzyswHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1NTY1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqrYzANBgkqhkiG9w0BAQsFAAOCAQEAVc2l
dI+0OYY0wBkonLL0yz/l1iNsMY5gNUcpzunmbSEK+C5mMsKtzL78yYmXdHQrsJ2z
kyVYzGjj5VCcJlFjbKgTY4Ou6moC3JizyGEhcPXOT4qs5AP08nHJAnG3jNhl6zZp
hgJzTmG3pEGDsa1M1wRTxX92uM/DQJAv9cesbRJHEf7lOogBk4cp9y1ONMQHYbC7
1AZRbw/C7kDa2Gp7xcio4j/c/AnpaWEiGe5zfOA5ixF+YcmL0gsnrSvtt0M4O2q4
wr0SvZ4/1bFpt9DmcZgI9rdAT/mnNdqmaLQLpcHKHihODdtki3R0Y/b3rIfi28bL
23I7DnMXi15/aF9otg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:04 2026 by rpki-client