Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145629.roa
File: AS145629.roa (raw, json)
Hash identifier: KmYN1QZP/6TE+Igu7bIqGKi4L0gzaD/nAj+vtcoh9xc=
Subject key identifier: FF:E6:5A:9A:30:E9:C7:8E:C0:DD:A9:4E:33:D2:D3:A2:53:24:A6:91
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4A4047B5E269BED82D4267779C872D99881EC9F6
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145629.roa
Signing time: Tue 26 May 2026 01:13:14 +0000
ROA not before: Tue 26 May 2026 01:08:14 +0000
ROA not after: Tue 25 May 2027 01:13:14 +0000
asID: 145629
IP address blocks: 240a:aba3::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:40:47:b5:e2:69:be:d8:2d:42:67:77:9c:87:2d:99:88:1e:c9:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:08:14 2026 GMT
Not After : May 25 01:13:14 2027 GMT
Subject: CN=FFE65A9A30E9C78EC0DDA94E33D2D3A25324A691
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:16:43:89:2a:b9:15:54:6d:34:1b:73:84:c7:
fe:a9:f1:71:ee:39:e9:57:26:3c:0c:06:ca:7a:80:
b2:2f:9c:be:b0:bf:a7:08:e7:cc:73:1f:1e:b3:d5:
3a:b7:cd:77:35:9b:54:93:82:72:0f:e0:81:c7:45:
99:08:29:e7:12:d2:f5:8d:18:bd:4d:a9:04:dd:7f:
d6:d5:e1:5b:37:d9:e1:4f:5a:30:8b:df:2c:90:5b:
c6:f0:01:55:c6:10:7a:31:13:e9:5a:bb:65:07:8d:
e4:b2:c2:e2:e5:e9:50:38:9c:fd:bf:c8:e2:f5:1a:
cc:0e:ff:02:c2:22:34:9e:6d:2a:3e:6e:1e:8f:d2:
eb:49:6a:0f:1f:67:9e:1f:66:64:e3:ff:67:51:f1:
b4:37:a5:a6:ba:9d:ec:54:9a:e8:ab:4d:05:24:1a:
1d:07:c5:b3:c7:68:97:09:b0:2a:07:c9:32:a0:77:
6a:cb:2a:25:0b:3d:a5:60:7f:a8:4c:f4:71:e9:fc:
c6:17:c4:9a:1b:46:49:ff:7f:da:e1:9f:58:d6:a8:
ad:8e:ab:e6:97:5d:cf:b2:ba:80:57:f9:d1:96:2e:
42:96:b0:b6:04:4a:72:44:42:1f:3f:2e:e2:10:6f:
12:52:88:44:e6:37:ff:09:a1:3d:78:ac:f7:1c:41:
7d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E6:5A:9A:30:E9:C7:8E:C0:DD:A9:4E:33:D2:D3:A2:53:24:A6:91
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145629.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aba3::/32
Signature Algorithm: sha256WithRSAEncryption
7e:01:e6:50:ab:5e:03:dd:80:d5:72:cf:00:3f:68:de:cd:fd:
89:0f:4c:b3:01:aa:f3:84:3f:a0:5f:73:f4:14:7d:5c:4d:62:
40:37:fa:e3:e9:21:a2:4a:f6:1c:6a:30:57:32:df:f4:67:9b:
46:56:d4:63:be:0f:3f:c3:07:fc:99:5f:54:32:f7:f8:09:54:
77:53:96:dd:08:e4:7c:2f:c6:9a:b0:86:ca:b3:9c:c8:5d:e5:
16:4d:75:4a:f1:3b:6f:8b:f7:46:26:cb:70:dc:81:c7:ae:ec:
d8:c7:f8:b3:80:16:cc:d6:8b:65:b7:ac:0f:05:8f:c7:0f:1d:
ee:97:4a:1a:35:14:68:4c:a9:9a:0a:e7:5c:47:22:e0:ee:5a:
6d:c2:d3:b6:19:5a:16:90:97:fc:66:5f:54:ec:c8:e2:d6:db:
9e:0c:a7:cf:e5:97:d9:70:0b:3a:99:80:37:e2:56:12:57:7f:
46:b5:3c:56:3e:27:d8:8e:d8:7e:1e:9a:7c:7d:8c:f3:35:54:
4a:ff:8d:a6:f4:0e:a9:0b:00:9e:0a:04:d2:eb:20:16:1f:26:
ca:80:8a:16:b0:89:ed:bc:ed:54:60:47:72:24:ee:e1:9d:a9:
17:e6:59:68:d7:c5:b6:eb:ef:11:ee:1d:3a:bf:c4:bc:bd:97:
34:76:ab:66
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUSkBHteJpvtgtQmd3nIctmYgeyfYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMTA4MTRaFw0yNzA1MjUwMTEzMTRaMDMxMTAvBgNV
BAMTKEZGRTY1QTlBMzBFOUM3OEVDMEREQTk0RTMzRDJEM0EyNTMyNEE2OTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaFkOJKrkVVG00G3OEx/6p8XHu
OelXJjwMBsp6gLIvnL6wv6cI58xzHx6z1Tq3zXc1m1STgnIP4IHHRZkIKecS0vWN
GL1NqQTdf9bV4Vs32eFPWjCL3yyQW8bwAVXGEHoxE+lau2UHjeSywuLl6VA4nP2/
yOL1GswO/wLCIjSebSo+bh6P0utJag8fZ54fZmTj/2dR8bQ3paa6nexUmuirTQUk
Gh0HxbPHaJcJsCoHyTKgd2rLKiULPaVgf6hM9HHp/MYXxJobRkn/f9rhn1jWqK2O
q+aXXc+yuoBX+dGWLkKWsLYESnJEQh8/LuIQbxJSiETmN/8JoT14rPccQX35AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU/+ZamjDpx47A3alOM9LTolMkppEwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1NjI5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqrozANBgkqhkiG9w0BAQsFAAOCAQEAfgHm
UKteA92A1XLPAD9o3s39iQ9MswGq84Q/oF9z9BR9XE1iQDf64+khokr2HGowVzLf
9GebRlbUY74PP8MH/JlfVDL3+AlUd1OW3QjkfC/GmrCGyrOcyF3lFk11SvE7b4v3
RibLcNyBx67s2Mf4s4AWzNaLZbesDwWPxw8d7pdKGjUUaEypmgrnXEci4O5abcLT
thlaFpCX/GZfVOzI4tbbngynz+WX2XALOpmAN+JWEld/RrU8Vj4n2I7Yfh6afH2M
8zVUSv+NpvQOqQsAngoE0usgFh8myoCKFrCJ7bztVGBHciTu4Z2pF+ZZaNfFtuvv
Ee4dOr/EvL2XNHarZg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:12 2026 by rpki-client