Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145642.roa
File: AS145642.roa (raw, json)
Hash identifier: PIUnGn/yW6KdVev1Q5Gzhd9WZwRdvfJPeeLB0BKFy+k=
Subject key identifier: D5:58:3C:26:EE:B9:58:D1:26:A0:D7:87:AA:C7:CA:D5:09:3B:29:58
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 22C0BDC4917844BA0F2EA0EB32536FF4C0AFBEAD
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145642.roa
Signing time: Tue 26 May 2026 03:16:47 +0000
ROA not before: Tue 26 May 2026 03:11:47 +0000
ROA not after: Tue 25 May 2027 03:16:47 +0000
asID: 145642
IP address blocks: 240a:abb0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:c0:bd:c4:91:78:44:ba:0f:2e:a0:eb:32:53:6f:f4:c0:af:be:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:11:47 2026 GMT
Not After : May 25 03:16:47 2027 GMT
Subject: CN=D5583C26EEB958D126A0D787AAC7CAD5093B2958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:01:e4:98:37:ba:1d:fa:26:df:cc:12:08:ad:
46:50:ee:0b:eb:6b:d4:93:96:47:06:02:8b:7e:90:
26:be:6a:62:51:4b:86:4b:86:00:1e:9f:57:74:48:
d6:d1:ae:d6:92:5e:60:f9:a2:f2:0b:35:7e:e1:77:
37:34:24:cb:10:32:a2:47:62:62:84:e0:ce:97:a7:
82:3a:9a:a3:c5:50:ee:6d:eb:c4:6b:08:b8:30:30:
74:55:a9:71:28:47:71:2b:c5:04:4f:8e:b6:13:ac:
20:3d:3d:f0:9d:ce:15:00:ea:6e:c0:fb:d7:95:52:
c5:2d:f6:e6:8a:b8:05:7d:2e:74:d1:c2:9a:c2:4b:
b1:36:dc:ab:67:e5:01:e7:88:b2:88:52:d0:94:a7:
7b:8a:11:1b:8f:2c:ee:e7:33:0a:df:a0:9f:7c:92:
f8:d7:63:66:03:c4:a8:5e:25:0c:ce:b8:d6:e2:df:
cf:60:d2:1e:cc:8b:a0:a7:5a:42:e1:43:fb:15:f6:
19:7a:b5:d5:5c:f9:e2:c8:67:8b:df:29:18:05:70:
ec:17:8c:37:64:86:ea:b5:f7:84:b0:2b:9a:44:a5:
19:79:e9:22:d2:71:dd:8f:66:64:c4:90:9e:a6:90:
ac:16:94:5a:0d:ed:69:61:c7:f3:7f:9a:c1:2d:81:
33:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:58:3C:26:EE:B9:58:D1:26:A0:D7:87:AA:C7:CA:D5:09:3B:29:58
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145642.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:abb0::/32
Signature Algorithm: sha256WithRSAEncryption
14:40:0d:7d:24:01:60:71:d2:f9:df:29:54:65:0a:71:49:0b:
8a:47:5e:08:e9:dd:71:ba:90:c5:97:d8:88:85:58:d1:25:f6:
0b:13:bb:7f:f1:f2:1f:13:ca:56:7b:07:97:51:0b:bf:a1:e9:
15:7d:f0:57:50:05:07:15:0a:0a:e7:3c:82:e0:30:ce:a5:ef:
ec:f7:0a:87:a0:3d:a9:48:91:80:25:85:80:56:73:bd:7b:62:
15:4b:cc:22:6d:c2:89:f2:f8:37:5f:81:3d:92:a1:50:57:0e:
ba:9b:1f:f7:c1:54:9c:a2:98:fe:24:02:e4:bc:7d:ef:b7:c2:
39:4b:cc:b7:4d:c6:ae:5f:84:c8:e5:95:21:16:68:3e:b8:93:
db:4e:d9:49:8b:67:8d:c5:54:42:0d:ce:09:38:52:34:1c:a6:
50:6a:56:9b:53:fb:36:86:12:28:3d:7c:13:89:b8:97:b9:f5:
f0:a8:60:6a:42:77:68:7f:09:c1:67:04:cb:f6:90:87:68:3c:
0d:99:23:fb:0b:84:e6:ab:09:c3:43:9f:59:a4:49:bd:d4:19:
41:cd:37:7f:49:bc:dd:f6:fa:94:79:8a:44:5f:ef:c3:b6:38:
6b:e5:c2:a1:ef:fb:9f:72:7b:7f:3e:b3:24:ee:24:cd:5d:0d:
eb:a8:e5:a7
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUIsC9xJF4RLoPLqDrMlNv9MCvvq0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMzExNDdaFw0yNzA1MjUwMzE2NDdaMDMxMTAvBgNV
BAMTKEQ1NTgzQzI2RUVCOTU4RDEyNkEwRDc4N0FBQzdDQUQ1MDkzQjI5NTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYAeSYN7od+ibfzBIIrUZQ7gvr
a9STlkcGAot+kCa+amJRS4ZLhgAen1d0SNbRrtaSXmD5ovILNX7hdzc0JMsQMqJH
YmKE4M6Xp4I6mqPFUO5t68RrCLgwMHRVqXEoR3ErxQRPjrYTrCA9PfCdzhUA6m7A
+9eVUsUt9uaKuAV9LnTRwprCS7E23Ktn5QHniLKIUtCUp3uKERuPLO7nMwrfoJ98
kvjXY2YDxKheJQzOuNbi389g0h7Mi6CnWkLhQ/sV9hl6tdVc+eLIZ4vfKRgFcOwX
jDdkhuq194SwK5pEpRl56SLScd2PZmTEkJ6mkKwWlFoN7Wlhx/N/msEtgTO5AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU1Vg8Ju65WNEmoNeHqsfK1Qk7KVgwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1NjQyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqrsDANBgkqhkiG9w0BAQsFAAOCAQEAFEAN
fSQBYHHS+d8pVGUKcUkLikdeCOndcbqQxZfYiIVY0SX2CxO7f/HyHxPKVnsHl1EL
v6HpFX3wV1AFBxUKCuc8guAwzqXv7PcKh6A9qUiRgCWFgFZzvXtiFUvMIm3CifL4
N1+BPZKhUFcOupsf98FUnKKY/iQC5Lx977fCOUvMt03Grl+EyOWVIRZoPriT207Z
SYtnjcVUQg3OCThSNBymUGpWm1P7NoYSKD18E4m4l7n18KhgakJ3aH8JwWcEy/aQ
h2g8DZkj+wuE5qsJw0OfWaRJvdQZQc03f0m83fb6lHmKRF/vw7Y4a+XCoe/7n3J7
fz6zJO4kzV0N66jlpw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:32 2026 by rpki-client