Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145667.roa
File: AS145667.roa (raw, json)
Hash identifier: 0jVkaDOhtds2XXKFC2oexhOaLHiwJnaszXG3zL4qHtI=
Subject key identifier: E7:81:5D:70:AB:31:33:76:23:5B:A8:06:66:42:A1:BD:C0:FC:1A:8B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1AF316CC90FDC97B744ABC650105D1DD1DE0CEA8
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145667.roa
Signing time: Tue 26 May 2026 03:16:54 +0000
ROA not before: Tue 26 May 2026 03:11:54 +0000
ROA not after: Tue 25 May 2027 03:16:54 +0000
asID: 145667
IP address blocks: 240a:abc9::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:f3:16:cc:90:fd:c9:7b:74:4a:bc:65:01:05:d1:dd:1d:e0:ce:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:11:54 2026 GMT
Not After : May 25 03:16:54 2027 GMT
Subject: CN=E7815D70AB313376235BA8066642A1BDC0FC1A8B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6f:05:ac:81:cc:e1:43:f8:78:3b:40:90:59:
58:bd:11:0a:fa:3d:95:74:ab:b7:8f:4b:8c:06:61:
b5:19:1c:4c:fe:16:88:90:f1:10:29:1b:09:36:14:
1e:24:73:ff:20:87:8e:e3:34:2a:39:24:69:fb:35:
5a:65:1e:b9:c9:42:e2:ce:89:c0:11:b5:27:c9:8d:
c3:22:b1:96:0b:bb:5a:ff:a2:67:14:e2:22:1d:1b:
cf:a1:c1:6f:e7:a7:3e:3f:48:74:9e:9b:26:ed:e8:
d5:2a:58:55:6d:ce:01:b3:76:0b:df:90:b8:fc:db:
2d:b5:19:a7:cd:13:91:fb:05:1f:cd:20:11:5e:54:
81:b7:43:53:1a:24:21:a7:2a:fe:b6:7a:31:b6:f6:
9a:7d:53:d4:ef:e8:f7:9c:0d:a6:72:56:49:59:84:
6b:49:d1:19:2c:39:f4:5e:e7:4a:81:f6:5b:00:aa:
e9:c0:88:22:97:9c:dc:33:7c:62:0b:63:03:d0:10:
95:a0:74:da:ce:b8:b1:ed:7d:05:40:35:00:12:20:
e3:0b:83:1e:c6:1b:5d:8f:1c:38:26:0a:5a:3f:a1:
7d:34:ce:74:e6:85:54:24:57:61:69:d4:4c:16:34:
94:f5:4c:55:38:b5:98:fb:68:71:9e:66:81:1f:7c:
11:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:81:5D:70:AB:31:33:76:23:5B:A8:06:66:42:A1:BD:C0:FC:1A:8B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145667.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:abc9::/32
Signature Algorithm: sha256WithRSAEncryption
62:00:62:fe:49:ce:dd:77:e6:0c:77:78:d8:6d:5c:44:5a:a3:
5a:c4:b1:16:31:5d:fa:44:ea:02:51:9d:07:c2:ae:6c:83:a4:
20:57:b1:51:f3:e7:1a:2a:d6:c3:62:fb:e2:0c:25:52:45:34:
66:51:4b:4b:81:2e:0b:58:15:16:b1:ab:8b:10:e0:10:4e:79:
00:a7:20:d5:47:08:5d:d4:67:f1:44:9a:66:ec:86:51:d8:e5:
47:0a:8d:4d:89:98:0f:cf:cd:4f:3b:d5:10:b5:1b:32:25:7f:
6d:17:2d:c9:aa:fd:45:15:e2:e7:0d:f4:5d:c1:c1:3a:c2:bb:
a4:4a:64:e3:df:1b:cc:fe:8b:bf:d4:76:3b:1b:c7:34:b1:1b:
8c:f0:a3:43:9c:c0:fe:c1:03:07:80:82:d8:87:48:69:21:e0:
6b:48:06:a5:ec:b3:83:ca:53:64:e3:3f:ae:16:8b:1c:fd:c1:
bc:4b:ee:c3:15:40:44:52:98:0e:59:56:dc:ce:29:f5:b7:5b:
f5:39:2e:64:2e:aa:e9:e3:3f:f7:d7:83:1c:3d:e7:88:9e:1c:
ad:ad:0b:87:48:86:b9:ed:2e:da:3b:62:e0:08:3c:c3:4a:14:
4b:e6:a5:93:02:b7:87:fe:9a:94:1e:ff:3e:fa:d9:1f:47:70:
25:7f:cd:41
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUGvMWzJD9yXt0SrxlAQXR3R3gzqgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMzExNTRaFw0yNzA1MjUwMzE2NTRaMDMxMTAvBgNV
BAMTKEU3ODE1RDcwQUIzMTMzNzYyMzVCQTgwNjY2NDJBMUJEQzBGQzFBOEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6bwWsgczhQ/h4O0CQWVi9EQr6
PZV0q7ePS4wGYbUZHEz+FoiQ8RApGwk2FB4kc/8gh47jNCo5JGn7NVplHrnJQuLO
icARtSfJjcMisZYLu1r/omcU4iIdG8+hwW/npz4/SHSemybt6NUqWFVtzgGzdgvf
kLj82y21GafNE5H7BR/NIBFeVIG3Q1MaJCGnKv62ejG29pp9U9Tv6PecDaZyVklZ
hGtJ0RksOfRe50qB9lsAqunAiCKXnNwzfGILYwPQEJWgdNrOuLHtfQVANQASIOML
gx7GG12PHDgmClo/oX00znTmhVQkV2Fp1EwWNJT1TFU4tZj7aHGeZoEffBEnAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU54FdcKsxM3YjW6gGZkKhvcD8GoswHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1NjY3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqryTANBgkqhkiG9w0BAQsFAAOCAQEAYgBi
/knO3XfmDHd42G1cRFqjWsSxFjFd+kTqAlGdB8KubIOkIFexUfPnGirWw2L74gwl
UkU0ZlFLS4EuC1gVFrGrixDgEE55AKcg1UcIXdRn8USaZuyGUdjlRwqNTYmYD8/N
TzvVELUbMiV/bRctyar9RRXi5w30XcHBOsK7pEpk498bzP6Lv9R2OxvHNLEbjPCj
Q5zA/sEDB4CC2IdIaSHga0gGpeyzg8pTZOM/rhaLHP3BvEvuwxVARFKYDllW3M4p
9bdb9TkuZC6q6eM/99eDHD3niJ4cra0Lh0iGue0u2jti4Ag8w0oUS+alkwK3h/6a
lB7/PvrZH0dwJX/NQQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:36 2026 by rpki-client