Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145572.roa
File: AS145572.roa (raw, json)
Hash identifier: oPL8eC40wwsfsE1yq4LmF580Orvf53x0hkUtVOgK0vs=
Subject key identifier: 52:6D:02:3B:F3:FE:12:EA:98:33:8D:E2:95:F2:30:86:EF:60:9F:A1
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1BDC971ACF8AA37DC9736EC3F517AF48102E4515
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145572.roa
Signing time: Mon 25 May 2026 06:28:33 +0000
ROA not before: Mon 25 May 2026 06:23:33 +0000
ROA not after: Mon 24 May 2027 06:28:33 +0000
asID: 145572
IP address blocks: 240a:ab6a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:dc:97:1a:cf:8a:a3:7d:c9:73:6e:c3:f5:17:af:48:10:2e:45:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:33 2026 GMT
Not After : May 24 06:28:33 2027 GMT
Subject: CN=526D023BF3FE12EA98338DE295F23086EF609FA1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:75:50:2d:35:d5:f1:30:89:11:9f:6b:97:bb:
4a:87:bc:93:b1:db:79:00:30:63:26:00:bf:e6:7c:
bf:d8:f5:27:11:34:70:34:5b:b3:2a:17:a2:de:7a:
42:8c:cd:72:94:50:b3:d9:9b:a3:6a:b9:72:17:15:
61:a6:0f:67:49:98:70:80:57:27:ba:21:58:16:62:
77:95:f9:cd:bc:51:ac:29:32:4e:16:7e:d5:b3:c7:
c1:34:68:0a:70:8a:8f:d7:ff:e9:2d:02:c5:b1:82:
2b:d1:f5:ff:e6:1e:71:45:fd:33:1e:41:b9:c3:b7:
f9:57:08:7e:af:93:da:1b:54:da:4c:1f:0a:09:d2:
2c:d8:04:e8:f7:1b:43:ac:04:3d:53:36:2f:c8:7a:
04:e6:90:73:8e:2f:da:81:41:00:5d:ac:e2:87:96:
7d:66:f6:74:0d:6f:35:b5:f9:1d:54:44:c3:9c:72:
1d:ce:2a:83:8a:bb:2b:9f:23:72:a8:1b:9a:f2:4e:
df:d4:4a:10:fb:23:2e:92:f1:eb:ec:35:02:b9:e4:
cb:f3:76:68:9a:14:9b:f3:9d:14:e0:d2:00:cd:b5:
6e:4b:35:cd:c2:76:eb:b0:56:61:1d:93:b5:ed:17:
ef:17:75:26:db:72:a9:e6:10:55:19:88:d3:08:d1:
0e:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:6D:02:3B:F3:FE:12:EA:98:33:8D:E2:95:F2:30:86:EF:60:9F:A1
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145572.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ab6a::/32
Signature Algorithm: sha256WithRSAEncryption
74:c9:cc:62:b8:c2:0d:de:29:2e:1a:60:aa:70:e5:c7:ee:62:
2b:f9:51:0e:f9:cb:f6:c3:4a:8b:58:e1:b0:15:4c:05:98:56:
22:75:07:d9:9c:24:9d:37:93:42:9c:5a:ba:23:42:bb:8f:a9:
6e:01:6f:d8:dc:3e:57:f0:1b:18:6b:9e:57:91:8c:79:4e:b9:
14:ad:7c:3c:7c:5e:2a:3a:e0:3f:58:24:a7:42:45:95:4e:48:
05:f7:fb:55:56:69:24:af:ba:29:2d:63:1f:5d:de:12:10:85:
28:19:e9:71:5c:cc:dd:5a:e9:0b:b3:76:26:74:cd:0f:74:d6:
49:2f:ef:a3:43:aa:f2:fd:2c:c9:5f:2e:b8:06:a8:0a:b8:a5:
4d:a2:8e:23:1a:8c:31:67:e7:3e:21:15:8c:b2:78:1a:bc:8e:
09:d6:f7:39:4e:c4:e5:db:fc:f5:e0:4d:9a:3c:5e:fc:e7:bb:
80:68:b5:db:60:f6:d0:af:f0:7d:07:19:0d:ab:b0:d9:8c:52:
52:36:7b:d8:7a:ae:b2:7b:6b:98:0d:bb:85:8d:88:7b:58:af:
ca:4d:26:43:13:60:5d:eb:35:29:3b:3c:df:0a:6c:82:18:10:
85:0e:d5:44:31:b9:85:18:ba:57:6f:e5:9f:3c:2a:1a:6d:41:
49:a0:af:58
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUG9yXGs+Ko33Jc27D9RevSBAuRRUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwNjIzMzNaFw0yNzA1MjQwNjI4MzNaMDMxMTAvBgNV
BAMTKDUyNkQwMjNCRjNGRTEyRUE5ODMzOERFMjk1RjIzMDg2RUY2MDlGQTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvdVAtNdXxMIkRn2uXu0qHvJOx
23kAMGMmAL/mfL/Y9ScRNHA0W7MqF6LeekKMzXKUULPZm6NquXIXFWGmD2dJmHCA
Vye6IVgWYneV+c28UawpMk4WftWzx8E0aApwio/X/+ktAsWxgivR9f/mHnFF/TMe
QbnDt/lXCH6vk9obVNpMHwoJ0izYBOj3G0OsBD1TNi/IegTmkHOOL9qBQQBdrOKH
ln1m9nQNbzW1+R1URMOcch3OKoOKuyufI3KoG5ryTt/UShD7Iy6S8evsNQK55Mvz
dmiaFJvznRTg0gDNtW5LNc3CduuwVmEdk7XtF+8XdSbbcqnmEFUZiNMI0Q7HAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUUm0CO/P+EuqYM43ilfIwhu9gn6EwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1NTcyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqrajANBgkqhkiG9w0BAQsFAAOCAQEAdMnM
YrjCDd4pLhpgqnDlx+5iK/lRDvnL9sNKi1jhsBVMBZhWInUH2ZwknTeTQpxauiNC
u4+pbgFv2Nw+V/AbGGueV5GMeU65FK18PHxeKjrgP1gkp0JFlU5IBff7VVZpJK+6
KS1jH13eEhCFKBnpcVzM3VrpC7N2JnTND3TWSS/vo0Oq8v0syV8uuAaoCrilTaKO
IxqMMWfnPiEVjLJ4GryOCdb3OU7E5dv89eBNmjxe/Oe7gGi122D20K/wfQcZDauw
2YxSUjZ72HqusntrmA27hY2Ie1ivyk0mQxNgXes1KTs83wpsghgQhQ7VRDG5hRi6
V2/lnzwqGm1BSaCvWA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:56 2026 by rpki-client