Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145605.roa
File: AS145605.roa (raw, json)
Hash identifier: IDiQKIkpM96gH6jWnCOcLUQ74F6y3UW01ktNReLgBiY=
Subject key identifier: E1:D1:BC:EC:B9:88:1A:46:98:5D:0F:1E:0D:A8:F4:0A:92:97:59:8E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 709E4F8166568DE8B270E3A2EBA7914C035BCB0D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145605.roa
Signing time: Fri 22 May 2026 07:24:30 +0000
ROA not before: Fri 22 May 2026 07:19:30 +0000
ROA not after: Fri 21 May 2027 07:24:30 +0000
asID: 145605
IP address blocks: 240a:ab8b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:9e:4f:81:66:56:8d:e8:b2:70:e3:a2:eb:a7:91:4c:03:5b:cb:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:19:30 2026 GMT
Not After : May 21 07:24:30 2027 GMT
Subject: CN=E1D1BCECB9881A46985D0F1E0DA8F40A9297598E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:1f:6b:ec:df:7b:72:b7:8e:78:b7:3b:cf:dc:
f8:df:c8:84:7a:83:02:e5:a4:3e:4e:8c:c4:cc:e8:
dd:8c:1f:dd:c7:03:be:5b:95:48:75:e3:a7:de:42:
4a:b5:d1:4d:4b:bb:72:df:81:3f:0c:26:c7:1f:fa:
4b:d2:1c:7c:3c:35:c4:a8:02:84:fe:2e:3a:fd:0a:
c2:ec:54:f0:7f:4c:7b:1b:dc:81:1c:5d:50:1e:39:
26:36:1e:44:b0:d9:ee:da:50:df:89:64:82:5f:a2:
36:41:da:25:de:c7:bb:73:36:29:05:0c:bf:77:f5:
84:8a:6d:80:3d:90:14:0b:f8:e3:e2:a5:67:20:03:
39:3c:32:95:0e:15:54:ad:b0:3b:08:21:50:4a:e0:
4c:f1:7b:61:fd:f8:01:d2:a0:69:47:ce:b0:4f:0a:
77:fb:7d:b1:ca:36:22:a0:40:19:cf:47:c1:46:62:
90:34:c7:1d:04:4b:77:88:d3:8b:42:cf:f0:e0:a8:
97:66:0c:c5:d7:b7:56:d3:4e:90:a6:97:76:37:7d:
8d:fe:bd:c9:37:4f:15:40:c1:28:7a:86:aa:0d:2c:
17:2b:09:bb:0b:23:0f:21:ba:3e:1e:03:bf:f4:e7:
7e:c3:2e:d8:e0:3e:2d:d1:6c:f5:18:9b:9d:30:14:
6f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D1:BC:EC:B9:88:1A:46:98:5D:0F:1E:0D:A8:F4:0A:92:97:59:8E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145605.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ab8b::/32
Signature Algorithm: sha256WithRSAEncryption
0d:39:6e:62:a2:93:d6:36:7b:7b:59:ad:22:a7:17:9b:e3:2d:
e7:c8:06:0c:fe:6b:8e:0a:7a:79:92:9d:d0:08:04:2e:44:38:
c1:df:63:77:fa:22:70:30:fe:6d:58:35:f3:d6:30:db:ad:21:
a7:09:30:39:28:22:1f:52:dc:9d:97:c0:78:09:68:78:26:e5:
39:4c:b1:2a:d0:6c:8e:7a:6f:3c:02:c2:a3:0c:6e:0b:27:ef:
1b:d5:a3:7c:4f:2a:15:49:b5:ec:d0:99:c6:c0:55:9e:76:17:
4d:2b:a3:7c:4f:76:d9:15:89:62:b1:e0:9e:b5:ed:da:cf:de:
d1:4f:42:0c:e7:62:a1:fd:f9:98:3e:c7:48:96:8c:e8:45:ad:
9a:86:27:c7:ac:44:f4:b8:c1:9e:8a:38:e4:75:5e:93:a8:4e:
0c:17:36:c9:1c:76:0a:2d:77:91:81:ea:57:e2:94:7b:f8:90:
56:79:6d:f3:e6:e0:2c:ef:14:d2:d3:67:72:68:83:77:e8:c2:
dc:6d:4e:e5:7a:01:fb:a9:8e:3c:d8:a2:65:73:f1:78:fc:80:
cd:51:df:ee:72:d3:30:ab:80:55:96:68:44:fd:24:ad:b3:0f:
2a:dd:0b:5d:e5:ef:e6:c0:18:e2:02:77:9c:f2:cb:de:b4:b0:
b9:b0:b5:f5
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUcJ5PgWZWjeiycOOi66eRTANbyw0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzE5MzBaFw0yNzA1MjEwNzI0MzBaMDMxMTAvBgNV
BAMTKEUxRDFCQ0VDQjk4ODFBNDY5ODVEMEYxRTBEQThGNDBBOTI5NzU5OEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtH2vs33tyt454tzvP3PjfyIR6
gwLlpD5OjMTM6N2MH93HA75blUh146feQkq10U1Lu3LfgT8MJscf+kvSHHw8NcSo
AoT+Ljr9CsLsVPB/THsb3IEcXVAeOSY2HkSw2e7aUN+JZIJfojZB2iXex7tzNikF
DL939YSKbYA9kBQL+OPipWcgAzk8MpUOFVStsDsIIVBK4Ezxe2H9+AHSoGlHzrBP
Cnf7fbHKNiKgQBnPR8FGYpA0xx0ES3eI04tCz/DgqJdmDMXXt1bTTpCml3Y3fY3+
vck3TxVAwSh6hqoNLBcrCbsLIw8huj4eA7/0537DLtjgPi3RbPUYm50wFG/vAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU4dG87LmIGkaYXQ8eDaj0CpKXWY4wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1NjA1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqrizANBgkqhkiG9w0BAQsFAAOCAQEADTlu
YqKT1jZ7e1mtIqcXm+Mt58gGDP5rjgp6eZKd0AgELkQ4wd9jd/oicDD+bVg189Yw
260hpwkwOSgiH1LcnZfAeAloeCblOUyxKtBsjnpvPALCowxuCyfvG9WjfE8qFUm1
7NCZxsBVnnYXTSujfE922RWJYrHgnrXt2s/e0U9CDOdiof35mD7HSJaM6EWtmoYn
x6xE9LjBnoo45HVek6hODBc2yRx2Ci13kYHqV+KUe/iQVnlt8+bgLO8U0tNncmiD
d+jC3G1O5XoB+6mOPNiiZXPxePyAzVHf7nLTMKuAVZZoRP0krbMPKt0LXeXv5sAY
4gJ3nPLL3rSwubC19Q==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:42 2026 by rpki-client