Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145641.roa
File: AS145641.roa (raw, json)
Hash identifier: wMMJuKz8tyr0kdZQWpnZoc+4EzfwbPzrg95y1TYzHDo=
Subject key identifier: DE:FB:96:42:9E:E0:78:CE:16:A0:BD:25:5A:75:91:87:58:8A:6C:FB
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 520AA8530C5EAB93A83C87FA4CE17D74463F29F1
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145641.roa
Signing time: Mon 25 May 2026 02:22:33 +0000
ROA not before: Mon 25 May 2026 02:17:33 +0000
ROA not after: Mon 24 May 2027 02:22:33 +0000
asID: 145641
IP address blocks: 240a:abaf::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:0a:a8:53:0c:5e:ab:93:a8:3c:87:fa:4c:e1:7d:74:46:3f:29:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:33 2026 GMT
Not After : May 24 02:22:33 2027 GMT
Subject: CN=DEFB96429EE078CE16A0BD255A759187588A6CFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:6a:e5:7f:8d:01:4b:0d:91:a8:1b:84:1b:2c:
d7:69:89:e4:dd:1d:bc:fb:90:8f:09:d8:34:34:66:
21:92:81:f3:48:a5:9a:20:1e:a3:a0:19:8e:35:22:
59:1b:27:ad:e6:17:4b:ce:55:47:d9:cb:36:f5:37:
73:d7:07:f5:87:a3:8f:76:56:98:5f:b8:82:f0:fd:
9f:9c:c0:8d:c7:7c:1a:ac:b3:a4:f8:cb:c8:63:4c:
c5:1f:4d:80:97:96:b0:eb:4f:fc:66:98:bf:b8:3a:
df:44:ec:ff:6d:6c:75:ec:b4:8f:ce:65:04:1d:5c:
1f:6d:0e:a7:33:08:39:a3:db:fa:00:07:0c:04:eb:
6b:d1:dc:99:be:22:7a:b6:fd:b2:3c:17:4b:50:99:
34:34:3d:a7:1f:8b:3f:2c:47:87:b2:37:f6:15:4b:
76:4f:00:90:73:79:ff:93:d7:d3:62:58:6f:96:bd:
44:aa:6e:ec:40:27:50:d1:27:55:d1:b6:b0:6e:25:
b4:79:27:31:34:38:d2:8a:d5:e7:3f:7b:14:aa:ad:
7d:9a:9c:3b:ed:83:76:ed:8d:39:19:03:81:44:a0:
2e:03:df:12:ea:bb:8d:97:23:b1:88:b6:8a:32:8b:
e1:3f:b1:69:12:bd:ef:21:56:13:68:4f:7b:5a:70:
2d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:FB:96:42:9E:E0:78:CE:16:A0:BD:25:5A:75:91:87:58:8A:6C:FB
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145641.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:abaf::/32
Signature Algorithm: sha256WithRSAEncryption
96:66:cb:ae:30:c1:4d:3f:96:e5:9a:53:a9:f1:af:24:40:fc:
ff:dc:85:2e:b1:75:8f:b3:17:d4:5b:e7:b5:16:51:20:81:72:
c0:ac:40:00:a9:2f:37:b1:74:7a:31:c8:af:85:d1:38:8d:47:
36:03:cd:ed:72:2d:40:88:45:63:63:86:f6:a4:8c:df:e6:56:
36:08:70:b4:e4:f7:af:27:3c:1b:62:1d:c2:2f:69:24:f0:19:
6d:43:b6:f2:dd:b1:60:5e:74:f3:22:8e:44:6d:c6:67:9b:97:
d3:86:b7:32:a3:68:67:a3:7b:2c:e1:08:37:b5:c2:a6:b4:dd:
00:e6:8a:7c:c2:63:26:0d:8a:df:c2:59:7b:07:04:52:72:a7:
fd:fa:f3:45:15:2d:98:7f:b6:0f:5e:05:96:58:26:f4:9a:22:
67:13:b4:c7:5c:63:50:0e:06:0b:fb:62:b2:1d:6c:0f:26:34:
42:cc:95:76:8e:c3:aa:c1:73:51:3f:36:89:72:4e:72:15:fe:
36:28:8d:50:b7:9f:9c:97:4a:7f:a8:7a:f6:31:ad:a8:4d:86:
38:96:bd:df:7e:4d:00:93:1a:83:ed:54:0d:3d:00:04:7f:23:
c4:1f:76:da:90:4c:82:3e:6e:f0:ae:a6:46:6d:74:3d:d5:d7:
a4:d0:d8:5e
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUUgqoUwxeq5OoPIf6TOF9dEY/KfEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMjE3MzNaFw0yNzA1MjQwMjIyMzNaMDMxMTAvBgNV
BAMTKERFRkI5NjQyOUVFMDc4Q0UxNkEwQkQyNTVBNzU5MTg3NTg4QTZDRkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0auV/jQFLDZGoG4QbLNdpieTd
Hbz7kI8J2DQ0ZiGSgfNIpZogHqOgGY41IlkbJ63mF0vOVUfZyzb1N3PXB/WHo492
VphfuILw/Z+cwI3HfBqss6T4y8hjTMUfTYCXlrDrT/xmmL+4Ot9E7P9tbHXstI/O
ZQQdXB9tDqczCDmj2/oABwwE62vR3Jm+Inq2/bI8F0tQmTQ0Pacfiz8sR4eyN/YV
S3ZPAJBzef+T19NiWG+WvUSqbuxAJ1DRJ1XRtrBuJbR5JzE0ONKK1ec/exSqrX2a
nDvtg3btjTkZA4FEoC4D3xLqu42XI7GItooyi+E/sWkSve8hVhNoT3tacC2ZAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU3vuWQp7geM4WoL0lWnWRh1iKbPswHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1NjQxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqrrzANBgkqhkiG9w0BAQsFAAOCAQEAlmbL
rjDBTT+W5ZpTqfGvJED8/9yFLrF1j7MX1FvntRZRIIFywKxAAKkvN7F0ejHIr4XR
OI1HNgPN7XItQIhFY2OG9qSM3+ZWNghwtOT3ryc8G2Idwi9pJPAZbUO28t2xYF50
8yKORG3GZ5uX04a3MqNoZ6N7LOEIN7XCprTdAOaKfMJjJg2K38JZewcEUnKn/frz
RRUtmH+2D14Fllgm9JoiZxO0x1xjUA4GC/tish1sDyY0QsyVdo7DqsFzUT82iXJO
chX+NiiNULefnJdKf6h69jGtqE2GOJa9335NAJMag+1UDT0ABH8jxB922pBMgj5u
8K6mRm10PdXXpNDYXg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:26 2026 by rpki-client