Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145631.roa
File: AS145631.roa (raw, json)
Hash identifier: FGMA1D5sGlZj/oZtqTBwS4vlZhA4E+eCIsFCsRZNcgw=
Subject key identifier: D6:25:4E:5B:D2:13:36:15:5C:F2:5E:5D:5B:DC:81:C3:A3:33:31:52
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4D6BFBD56983CF8319C2376479B5F7988B4C2F7B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145631.roa
Signing time: Mon 25 May 2026 02:22:39 +0000
ROA not before: Mon 25 May 2026 02:17:39 +0000
ROA not after: Mon 24 May 2027 02:22:39 +0000
asID: 145631
IP address blocks: 240a:aba5::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:6b:fb:d5:69:83:cf:83:19:c2:37:64:79:b5:f7:98:8b:4c:2f:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:39 2026 GMT
Not After : May 24 02:22:39 2027 GMT
Subject: CN=D6254E5BD21336155CF25E5D5BDC81C3A3333152
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0e:fa:59:52:d4:4b:0e:2d:43:87:fd:97:06:
8d:2d:6c:08:42:4e:fa:04:a5:af:e9:b3:0d:02:9a:
63:47:80:c4:c7:91:b4:27:57:01:c9:87:3f:2f:c5:
c3:e4:49:57:0a:b7:5e:6a:3c:0f:66:27:bc:bf:dc:
e8:e6:dd:af:2c:50:7d:97:6d:9a:6c:31:64:1b:33:
cc:01:4b:af:61:b2:59:62:6f:7b:a4:3d:07:55:e5:
81:5d:1a:51:0e:32:6b:2f:39:24:8c:0e:d3:6c:03:
8d:58:c4:b6:a7:d5:04:b0:b8:8c:59:65:56:03:3c:
16:3d:67:92:10:f9:e0:7b:6e:06:cf:e9:0d:12:08:
bb:b4:52:0a:1c:62:20:4b:77:35:88:bb:62:92:e1:
9f:10:cf:de:8a:7f:1b:b3:a8:f1:23:bc:e2:e4:1b:
6b:5a:17:63:a7:62:83:46:ad:29:d8:ad:4a:4d:48:
96:0d:be:75:8b:6f:73:65:db:07:29:1e:76:81:0c:
6e:ed:8f:bd:ba:62:f8:6d:8f:75:aa:4d:f5:fc:ad:
93:2b:f7:85:fd:3c:63:36:5c:a2:c3:e4:91:da:a5:
4f:67:91:a4:28:58:9c:3c:43:88:81:be:4c:7f:09:
ab:0a:a2:65:24:5f:d8:de:2a:8f:2e:a8:63:24:31:
89:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:25:4E:5B:D2:13:36:15:5C:F2:5E:5D:5B:DC:81:C3:A3:33:31:52
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145631.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aba5::/32
Signature Algorithm: sha256WithRSAEncryption
a7:17:33:62:5a:be:58:07:a6:1e:ae:15:5f:82:38:07:60:6b:
ca:25:e4:06:51:26:84:8a:26:3a:aa:cf:11:1d:b2:89:5c:ef:
d7:ff:5f:b2:3b:66:a0:60:47:9b:4f:f0:9a:45:ec:85:a7:24:
35:52:fa:c7:3c:e5:80:33:40:40:b0:08:d4:f1:02:f7:4c:1e:
3c:ee:c3:46:41:d3:fa:0f:ea:e4:c4:9b:5e:7f:5d:0d:6c:69:
ad:83:74:d4:da:c7:e7:29:29:6b:09:66:97:f3:fc:d0:0b:b9:
7d:3e:05:14:29:22:14:22:4d:d7:da:e4:bc:06:43:b5:5a:61:
32:3d:97:3c:68:ae:57:df:1c:19:a3:b0:d1:13:31:75:38:c3:
ad:7b:be:ca:88:0f:c3:37:26:32:b7:82:07:5e:3b:39:22:70:
48:ff:8c:aa:6c:68:8e:2a:c0:f4:8a:ca:85:da:54:39:d0:cf:
dc:33:0a:3c:f8:9b:46:d4:51:0a:2e:5c:e1:1c:bb:21:64:ee:
4d:0f:4c:92:48:3a:82:84:8b:f8:ac:97:eb:a6:e0:27:72:79:
b4:01:2a:6d:25:aa:49:e6:00:de:da:a3:77:b4:6c:95:88:3d:
f8:59:58:71:81:16:cc:47:1d:38:d2:5d:c7:cd:86:75:b7:9e:
b2:34:12:6e
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUTWv71WmDz4MZwjdkebX3mItML3swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMjE3MzlaFw0yNzA1MjQwMjIyMzlaMDMxMTAvBgNV
BAMTKEQ2MjU0RTVCRDIxMzM2MTU1Q0YyNUU1RDVCREM4MUMzQTMzMzMxNTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtDvpZUtRLDi1Dh/2XBo0tbAhC
TvoEpa/psw0CmmNHgMTHkbQnVwHJhz8vxcPkSVcKt15qPA9mJ7y/3Ojm3a8sUH2X
bZpsMWQbM8wBS69hsllib3ukPQdV5YFdGlEOMmsvOSSMDtNsA41YxLan1QSwuIxZ
ZVYDPBY9Z5IQ+eB7bgbP6Q0SCLu0UgocYiBLdzWIu2KS4Z8Qz96KfxuzqPEjvOLk
G2taF2OnYoNGrSnYrUpNSJYNvnWLb3Nl2wcpHnaBDG7tj726Yvhtj3WqTfX8rZMr
94X9PGM2XKLD5JHapU9nkaQoWJw8Q4iBvkx/CasKomUkX9jeKo8uqGMkMYl5AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU1iVOW9ITNhVc8l5dW9yBw6MzMVIwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1NjMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqrpTANBgkqhkiG9w0BAQsFAAOCAQEApxcz
Ylq+WAemHq4VX4I4B2BryiXkBlEmhIomOqrPER2yiVzv1/9fsjtmoGBHm0/wmkXs
hackNVL6xzzlgDNAQLAI1PEC90wePO7DRkHT+g/q5MSbXn9dDWxprYN01NrH5ykp
awlml/P80Au5fT4FFCkiFCJN19rkvAZDtVphMj2XPGiuV98cGaOw0RMxdTjDrXu+
yogPwzcmMreCB147OSJwSP+MqmxojirA9IrKhdpUOdDP3DMKPPibRtRRCi5c4Ry7
IWTuTQ9Mkkg6goSL+KyX66bgJ3J5tAEqbSWqSeYA3tqjd7RslYg9+FlYcYEWzEcd
ONJdx82GdbeesjQSbg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:02 2026 by rpki-client