Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145610.roa
File: AS145610.roa (raw, json)
Hash identifier: IIjp77x2d9hVgfDTa7YuWhLwQlXOErCMKttoZkEj9e0=
Subject key identifier: A3:84:C2:83:82:12:C5:AE:D9:24:C3:3C:13:65:5E:86:1F:9F:CB:3D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 72CE002227B7BD7FA1D505D7E99EB634B0EF5E02
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145610.roa
Signing time: Fri 22 May 2026 07:09:08 +0000
ROA not before: Fri 22 May 2026 07:04:08 +0000
ROA not after: Fri 21 May 2027 07:09:08 +0000
asID: 145610
IP address blocks: 240a:ab90::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
72:ce:00:22:27:b7:bd:7f:a1:d5:05:d7:e9:9e:b6:34:b0:ef:5e:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:04:08 2026 GMT
Not After : May 21 07:09:08 2027 GMT
Subject: CN=A384C2838212C5AED924C33C13655E861F9FCB3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:19:06:f3:ee:af:06:3e:4a:31:2a:c1:31:73:
1a:45:da:14:2b:4c:28:1d:5f:49:9e:cc:ec:37:23:
9a:5a:b7:30:e0:08:4a:5a:6f:a1:31:3f:58:72:53:
a0:b9:f5:95:51:0f:98:b9:78:8f:93:66:99:f7:51:
c2:26:db:2c:6b:44:a7:45:cd:19:fb:c8:76:b4:7b:
9b:69:56:c7:eb:30:cb:63:45:f9:d9:5b:a4:71:55:
73:1d:51:1b:5c:13:9a:9c:89:9f:0b:21:f5:6f:65:
3b:82:5f:22:cb:3f:92:65:af:ef:37:b5:b9:bc:b0:
8d:6c:ed:8c:0c:f8:d3:0e:16:77:0e:37:c2:a1:ad:
f1:3f:79:3e:68:22:5b:5d:1d:47:fd:ae:13:09:47:
19:46:f2:a6:83:9a:4f:f6:93:98:e1:82:b4:bc:cf:
25:75:58:4a:4a:9b:74:71:40:40:7b:c3:33:2f:35:
9c:e8:83:c8:32:41:9d:e9:28:c7:b4:1a:2a:a5:cf:
ba:fa:bc:85:11:20:40:d2:dc:15:21:45:83:ff:fb:
33:aa:7f:c2:a2:61:20:2c:3e:8a:02:79:90:16:b2:
fe:c2:9b:f9:30:71:79:32:55:27:24:ba:1b:26:8c:
3c:19:5a:93:da:bc:ac:71:13:f4:14:ac:8d:5f:d6:
c6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:84:C2:83:82:12:C5:AE:D9:24:C3:3C:13:65:5E:86:1F:9F:CB:3D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145610.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ab90::/32
Signature Algorithm: sha256WithRSAEncryption
3a:b1:0a:07:f0:69:d7:ba:4e:a5:31:56:58:24:a6:4d:7c:01:
cc:74:07:23:92:ad:cf:43:22:46:cb:27:e5:99:40:35:a0:19:
5c:ba:51:d4:35:86:28:a7:0b:50:e4:d3:5e:1c:8c:12:f4:42:
e3:61:02:b5:7c:0d:7e:6f:38:38:a1:f6:e0:e2:65:6d:b9:e8:
68:6e:b8:7c:ea:5b:2e:3c:0b:23:f9:26:e7:1e:b8:5d:72:d1:
1f:90:b1:16:a6:a2:0e:10:ba:79:d2:9b:ee:cd:93:a3:24:25:
3c:39:91:77:51:a1:20:5e:b3:46:b1:55:76:05:dc:a5:83:bc:
4e:c2:77:dc:93:44:c9:98:8f:e8:9a:be:af:82:0c:69:17:37:
06:c9:43:00:84:4d:97:bb:ec:43:95:98:dc:b0:90:e4:44:58:
bc:21:cd:9c:34:66:89:57:a9:11:90:ae:57:cf:e9:75:fc:f6:
98:b2:9c:94:aa:53:eb:08:02:ea:03:18:9b:9e:97:74:b4:8f:
c4:5d:4c:28:cc:4c:9e:26:4d:48:ba:4f:9d:1f:b4:3d:25:1f:
54:50:1f:2e:6c:af:8d:dc:0b:b9:28:96:57:41:69:8a:1c:6d:
96:32:6c:e3:8f:f0:1f:fa:19:61:27:fd:ce:bb:2e:de:ef:fa:
2e:45:96:d7
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUcs4AIie3vX+h1QXX6Z62NLDvXgIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzA0MDhaFw0yNzA1MjEwNzA5MDhaMDMxMTAvBgNV
BAMTKEEzODRDMjgzODIxMkM1QUVEOTI0QzMzQzEzNjU1RTg2MUY5RkNCM0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTGQbz7q8GPkoxKsExcxpF2hQr
TCgdX0mezOw3I5patzDgCEpab6ExP1hyU6C59ZVRD5i5eI+TZpn3UcIm2yxrRKdF
zRn7yHa0e5tpVsfrMMtjRfnZW6RxVXMdURtcE5qciZ8LIfVvZTuCXyLLP5Jlr+83
tbm8sI1s7YwM+NMOFncON8KhrfE/eT5oIltdHUf9rhMJRxlG8qaDmk/2k5jhgrS8
zyV1WEpKm3RxQEB7wzMvNZzog8gyQZ3pKMe0Giqlz7r6vIURIEDS3BUhRYP/+zOq
f8KiYSAsPooCeZAWsv7Cm/kwcXkyVSckuhsmjDwZWpPavKxxE/QUrI1f1sY1AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUo4TCg4ISxa7ZJMM8E2Vehh+fyz0wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1NjEwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqrkDANBgkqhkiG9w0BAQsFAAOCAQEAOrEK
B/Bp17pOpTFWWCSmTXwBzHQHI5Ktz0MiRssn5ZlANaAZXLpR1DWGKKcLUOTTXhyM
EvRC42ECtXwNfm84OKH24OJlbbnoaG64fOpbLjwLI/km5x64XXLRH5CxFqaiDhC6
edKb7s2ToyQlPDmRd1GhIF6zRrFVdgXcpYO8TsJ33JNEyZiP6Jq+r4IMaRc3BslD
AIRNl7vsQ5WY3LCQ5ERYvCHNnDRmiVepEZCuV8/pdfz2mLKclKpT6wgC6gMYm56X
dLSPxF1MKMxMniZNSLpPnR+0PSUfVFAfLmyvjdwLuSiWV0FpihxtljJs44/wH/oZ
YSf9zrsu3u/6LkWW1w==
-----END CERTIFICATE-----
Generated at Wed Jun 17 11:24:33 2026 by rpki-client