Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145643.roa
File: AS145643.roa (raw, json)
Hash identifier: 3lHvX17grV2AIk6+EuWXLc8qzuB99GLNxrKAvqZfSDo=
Subject key identifier: B7:A2:45:6E:3F:B7:0B:DC:D6:E1:0D:BA:A8:52:B5:CB:C6:51:2F:59
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4CE978A6E911A9E8F8E9A0833ECD07E28E00DBD2
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145643.roa
Signing time: Mon 25 May 2026 06:28:46 +0000
ROA not before: Mon 25 May 2026 06:23:46 +0000
ROA not after: Mon 24 May 2027 06:28:46 +0000
asID: 145643
IP address blocks: 240a:abb1::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:e9:78:a6:e9:11:a9:e8:f8:e9:a0:83:3e:cd:07:e2:8e:00:db:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:46 2026 GMT
Not After : May 24 06:28:46 2027 GMT
Subject: CN=B7A2456E3FB70BDCD6E10DBAA852B5CBC6512F59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:60:0d:65:5a:d3:1d:06:68:0c:c8:a9:e8:0e:
f6:d1:00:72:78:ab:4f:f9:72:29:94:d4:05:54:bc:
5b:35:7b:7f:4d:3c:08:e5:45:88:eb:e9:37:90:95:
2f:ca:af:45:6b:7a:aa:25:c3:1a:8e:94:4a:39:a7:
ba:20:0f:4b:47:5b:1c:b4:4b:84:6d:8a:a1:b9:e8:
2c:d5:60:8d:c0:a8:4e:16:60:b6:cc:92:9b:42:ca:
07:3e:fb:e9:28:90:14:7f:d4:8d:83:4c:df:4b:9e:
de:9f:8e:12:64:3e:0a:7d:aa:ed:49:63:86:83:75:
01:e5:ef:7f:c1:f3:7d:be:8c:5b:49:97:8c:89:22:
ed:47:b5:0e:59:6e:b4:a0:b0:5e:5b:3d:f5:d4:7b:
95:4d:ec:58:1d:19:17:6b:e4:42:8d:b5:52:ec:00:
93:7a:b2:43:ce:21:8c:81:24:38:78:24:f0:58:49:
45:0b:cc:bd:e8:16:f9:ac:f3:e9:a6:86:67:57:71:
5f:86:34:42:bd:40:a6:4a:73:d1:31:3b:a8:c6:74:
86:f6:29:15:a3:1e:10:3b:eb:0f:71:1c:fa:d0:22:
ac:d5:3f:49:2b:99:2b:1d:07:39:8f:68:83:85:21:
38:03:57:84:59:d3:67:47:1e:58:bf:22:19:ef:c1:
fe:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:A2:45:6E:3F:B7:0B:DC:D6:E1:0D:BA:A8:52:B5:CB:C6:51:2F:59
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145643.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:abb1::/32
Signature Algorithm: sha256WithRSAEncryption
37:54:d1:7d:be:94:72:9f:25:75:65:57:b9:db:30:8d:ab:e8:
93:2c:27:51:8c:57:db:98:10:d3:84:dd:92:1d:53:94:6e:fa:
72:2f:4e:06:74:7c:9a:df:c8:d0:ba:7d:4e:75:21:a7:00:b9:
1f:7d:12:d6:2c:df:fb:dc:f9:4c:8a:1e:7a:06:2f:48:49:6f:
8e:f3:d1:65:82:50:99:86:6a:e0:ae:7d:08:22:19:c7:d3:c7:
b1:b5:d1:88:d7:e5:97:1a:cb:cb:2c:ab:40:c5:3d:2c:76:f0:
e9:7d:fd:0c:f1:41:db:20:27:f4:a3:d9:08:99:4e:5c:c8:74:
f1:2a:54:f2:9f:47:79:ad:b3:b3:d4:54:97:05:57:1f:48:00:
44:32:4f:ce:62:85:9e:e3:da:7a:68:88:3c:19:88:63:40:1e:
33:d6:b0:f9:da:9f:3d:01:8f:ab:f0:17:e5:c7:40:b8:8f:34:
5d:16:c5:04:cd:70:5e:c0:6d:c4:63:b6:03:6f:4d:e0:6a:97:
d8:21:ed:1a:5a:d5:34:77:1b:1e:c4:6f:43:3e:c5:b9:a7:67:
9b:18:81:e2:a5:1d:a8:c2:17:73:2f:3d:8e:33:65:cd:d7:98:
9a:0c:40:aa:8c:e7:28:70:76:47:f8:4e:8a:c0:9a:3c:06:c2:
2a:ad:2b:56
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUTOl4pukRqej46aCDPs0H4o4A29IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwNjIzNDZaFw0yNzA1MjQwNjI4NDZaMDMxMTAvBgNV
BAMTKEI3QTI0NTZFM0ZCNzBCRENENkUxMERCQUE4NTJCNUNCQzY1MTJGNTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwYA1lWtMdBmgMyKnoDvbRAHJ4
q0/5cimU1AVUvFs1e39NPAjlRYjr6TeQlS/Kr0VreqolwxqOlEo5p7ogD0tHWxy0
S4RtiqG56CzVYI3AqE4WYLbMkptCygc+++kokBR/1I2DTN9Lnt6fjhJkPgp9qu1J
Y4aDdQHl73/B832+jFtJl4yJIu1HtQ5ZbrSgsF5bPfXUe5VN7FgdGRdr5EKNtVLs
AJN6skPOIYyBJDh4JPBYSUULzL3oFvms8+mmhmdXcV+GNEK9QKZKc9ExO6jGdIb2
KRWjHhA76w9xHPrQIqzVP0krmSsdBzmPaIOFITgDV4RZ02dHHli/Ihnvwf6TAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUt6JFbj+3C9zW4Q26qFK1y8ZRL1kwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1NjQzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqrsTANBgkqhkiG9w0BAQsFAAOCAQEAN1TR
fb6Ucp8ldWVXudswjavokywnUYxX25gQ04Tdkh1TlG76ci9OBnR8mt/I0Lp9TnUh
pwC5H30S1izf+9z5TIoeegYvSElvjvPRZYJQmYZq4K59CCIZx9PHsbXRiNfllxrL
yyyrQMU9LHbw6X39DPFB2yAn9KPZCJlOXMh08SpU8p9Hea2zs9RUlwVXH0gARDJP
zmKFnuPaemiIPBmIY0AeM9aw+dqfPQGPq/AX5cdAuI80XRbFBM1wXsBtxGO2A29N
4GqX2CHtGlrVNHcbHsRvQz7FuadnmxiB4qUdqMIXcy89jjNlzdeYmgxAqoznKHB2
R/hOisCaPAbCKq0rVg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:57 2026 by rpki-client