Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145567.roa
File: AS145567.roa (raw, json)
Hash identifier: MvmjA27wX7Uczs4k7uPlUcZS0rq16hSVMAAOXdtm/5M=
Subject key identifier: 48:75:9F:74:65:1A:15:0D:DD:3A:36:ED:11:70:C8:10:2D:F2:D5:A6
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 400E2A1AF07EB22EC3DE7F457D3D8AC504121C01
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145567.roa
Signing time: Mon 25 May 2026 01:38:13 +0000
ROA not before: Mon 25 May 2026 01:33:13 +0000
ROA not after: Mon 24 May 2027 01:38:13 +0000
asID: 145567
IP address blocks: 240a:ab65::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:0e:2a:1a:f0:7e:b2:2e:c3:de:7f:45:7d:3d:8a:c5:04:12:1c:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:13 2026 GMT
Not After : May 24 01:38:13 2027 GMT
Subject: CN=48759F74651A150DDD3A36ED1170C8102DF2D5A6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:52:fd:42:52:eb:84:14:cd:7e:76:6c:91:6e:
11:e8:c1:3a:46:c7:71:c1:07:d2:15:33:ba:33:a3:
f7:c3:ac:5d:3b:73:82:8b:02:df:39:87:24:f5:d2:
68:89:8c:87:72:19:ab:86:bc:4f:f1:79:c5:14:7b:
d0:db:95:a4:35:6e:d4:49:1a:d8:4a:83:a7:3a:cd:
a5:03:00:35:3c:0d:c3:98:74:bd:1a:b7:46:07:84:
c8:ec:9d:4c:8c:54:6a:55:9c:1c:5b:c7:8c:30:e6:
52:ef:2a:b6:df:52:79:1b:03:32:ba:da:66:6a:ed:
07:e6:24:47:43:35:87:3d:e9:ea:72:13:88:1c:75:
7f:95:45:f1:10:63:02:d1:d4:23:82:ed:aa:02:54:
a7:76:ea:5f:66:33:f3:bf:46:52:1b:0c:0b:d6:13:
5c:a4:43:4d:2b:64:bd:d0:5f:74:5c:51:18:b1:8c:
c2:01:27:a7:85:3d:06:81:5e:ce:88:4b:91:87:9f:
67:e0:9f:d2:02:25:97:8b:9f:db:de:71:0b:29:db:
91:24:c5:54:c5:b0:d7:1a:cf:58:6d:1d:73:ed:b2:
a1:f3:5e:6a:74:81:7b:88:25:72:51:ae:f8:57:8e:
f9:87:f1:97:3c:f5:bb:79:5e:55:9e:c4:a8:73:48:
f0:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:75:9F:74:65:1A:15:0D:DD:3A:36:ED:11:70:C8:10:2D:F2:D5:A6
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145567.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ab65::/32
Signature Algorithm: sha256WithRSAEncryption
4a:a9:0c:10:7b:df:a4:8e:41:75:be:3a:1a:fb:de:6f:9b:f6:
dd:14:cb:54:2e:99:18:1e:ed:5b:aa:bd:2f:e5:d6:37:34:03:
4b:8b:23:3f:7a:05:0d:f0:34:59:33:f6:e7:d2:e7:a3:b0:c1:
6c:b7:90:f4:61:2d:a6:a8:c5:11:49:36:4f:13:07:f6:89:e3:
05:26:8b:b7:d7:9e:03:af:f2:f2:57:a6:0b:16:76:61:78:7a:
ab:7c:0b:06:af:0f:3f:81:94:fc:86:8c:e6:34:d3:d3:4f:cb:
96:ac:f7:cf:e3:ad:46:ce:9d:b4:62:7d:68:ff:6b:3f:04:92:
4d:c6:20:85:60:c0:ff:56:ed:f7:07:ed:6a:87:55:41:f8:b6:
18:e4:21:bf:e3:6c:c6:df:d9:b8:b4:21:c2:d7:72:7c:aa:45:
70:67:c8:0f:09:e3:98:44:e7:d0:be:d7:39:8a:cf:70:c3:48:
9f:44:8b:4b:8f:b8:f8:c1:c8:9e:9e:c3:7a:c9:f5:b8:cc:b9:
dd:d5:5f:91:bf:9d:ed:a2:fa:d6:b8:a1:ad:1f:ed:5d:cc:07:
26:10:ae:8e:03:a1:6d:e7:a6:b8:70:14:2b:4d:cb:82:f9:7e:
c7:bb:5c:5c:8b:05:c2:dc:5d:61:ed:94:23:f2:cb:0e:dc:97:
64:47:3d:19
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUQA4qGvB+si7D3n9FfT2KxQQSHAEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMTMzMTNaFw0yNzA1MjQwMTM4MTNaMDMxMTAvBgNV
BAMTKDQ4NzU5Rjc0NjUxQTE1MERERDNBMzZFRDExNzBDODEwMkRGMkQ1QTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpUv1CUuuEFM1+dmyRbhHowTpG
x3HBB9IVM7ozo/fDrF07c4KLAt85hyT10miJjIdyGauGvE/xecUUe9DblaQ1btRJ
GthKg6c6zaUDADU8DcOYdL0at0YHhMjsnUyMVGpVnBxbx4ww5lLvKrbfUnkbAzK6
2mZq7QfmJEdDNYc96epyE4gcdX+VRfEQYwLR1COC7aoCVKd26l9mM/O/RlIbDAvW
E1ykQ00rZL3QX3RcURixjMIBJ6eFPQaBXs6IS5GHn2fgn9ICJZeLn9vecQsp25Ek
xVTFsNcaz1htHXPtsqHzXmp0gXuIJXJRrvhXjvmH8Zc89bt5XlWexKhzSPANAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUSHWfdGUaFQ3dOjbtEXDIEC3y1aYwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1NTY3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqrZTANBgkqhkiG9w0BAQsFAAOCAQEASqkM
EHvfpI5Bdb46Gvveb5v23RTLVC6ZGB7tW6q9L+XWNzQDS4sjP3oFDfA0WTP259Ln
o7DBbLeQ9GEtpqjFEUk2TxMH9onjBSaLt9eeA6/y8lemCxZ2YXh6q3wLBq8PP4GU
/IaM5jTT00/Llqz3z+OtRs6dtGJ9aP9rPwSSTcYghWDA/1bt9wftaodVQfi2GOQh
v+Nsxt/ZuLQhwtdyfKpFcGfIDwnjmETn0L7XOYrPcMNIn0SLS4+4+MHInp7Desn1
uMy53dVfkb+d7aL61rihrR/tXcwHJhCujgOhbeemuHAUK03Lgvl+x7tcXIsFwtxd
Ye2UI/LLDtyXZEc9GQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:42 2026 by rpki-client