Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145671.roa
File: AS145671.roa (raw, json)
Hash identifier: ZeemTqohgQSNuJWTcsPMIChRhgXEcnLErvT6srWLMag=
Subject key identifier: C7:57:F4:F4:55:3C:AB:87:CC:EE:E7:15:35:F2:0C:90:3E:E7:3C:BD
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 32179A1CBA7064E577373472CADB740140E26705
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145671.roa
Signing time: Mon 25 May 2026 02:22:16 +0000
ROA not before: Mon 25 May 2026 02:17:16 +0000
ROA not after: Mon 24 May 2027 02:22:16 +0000
asID: 145671
IP address blocks: 240a:abcd::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:17:9a:1c:ba:70:64:e5:77:37:34:72:ca:db:74:01:40:e2:67:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:16 2026 GMT
Not After : May 24 02:22:16 2027 GMT
Subject: CN=C757F4F4553CAB87CCEEE71535F20C903EE73CBD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a7:3f:dd:65:a9:46:41:c4:8d:d1:fe:7e:01:
86:df:82:a3:bb:3d:a1:74:6f:db:4a:7d:9a:9e:de:
54:93:58:01:e1:ef:83:6e:59:7c:b4:dc:6b:35:42:
8b:1c:b0:79:cd:08:eb:ce:ab:4a:0d:6e:b7:6c:3e:
e0:01:63:6b:63:5c:63:4e:79:99:b4:16:fe:93:4b:
61:b1:6d:ad:35:3f:19:f6:c8:69:11:30:59:86:80:
1e:1a:93:82:98:b0:55:ce:8e:d6:6d:25:87:36:22:
7d:83:f5:c3:a8:22:10:66:99:4a:fa:30:4c:88:01:
15:fd:af:ac:0d:b4:96:ec:a0:4c:83:4b:c4:65:b3:
62:0b:dd:21:85:bc:6f:16:c4:c4:3e:11:be:3d:e8:
a8:16:97:19:98:31:3e:2e:2b:19:c9:c0:ab:63:f8:
5c:36:8a:04:49:76:ad:9c:35:9c:56:55:f6:d8:5a:
45:cf:cf:fa:f2:99:1d:04:5f:5e:f1:bd:80:ed:87:
82:6e:e4:2a:52:40:4b:c1:89:a5:3c:e3:3a:8e:7a:
98:1a:77:d0:e2:b6:c8:62:47:38:db:af:60:cb:1b:
62:22:10:29:5e:e4:b4:05:14:b9:f9:f1:50:24:73:
64:58:cf:23:9b:dd:9b:65:22:55:e5:3d:a4:95:24:
75:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:57:F4:F4:55:3C:AB:87:CC:EE:E7:15:35:F2:0C:90:3E:E7:3C:BD
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145671.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:abcd::/32
Signature Algorithm: sha256WithRSAEncryption
1f:88:c4:a4:ba:d9:e6:86:7d:03:44:ba:e1:82:0b:af:5a:95:
60:76:13:10:f3:8f:b0:f0:02:e5:41:5c:a7:78:dd:b7:be:11:
93:1c:9d:02:86:da:9c:a4:d2:a7:5f:36:bb:fb:aa:c4:b4:7a:
d9:ff:fd:8f:c8:93:80:67:d6:1d:ba:47:9e:88:94:3e:3d:9a:
84:9c:42:56:b3:03:27:14:49:3d:93:c6:35:ea:2a:96:83:9e:
d6:9b:4b:ae:7c:24:27:0e:03:cd:a2:cb:8f:e4:70:79:2d:cc:
35:29:48:a1:bf:db:9f:43:e7:fb:ca:b5:39:83:17:81:3b:33:
9d:e1:86:c8:a6:93:fa:67:b2:6f:1b:79:3e:c9:c6:db:41:af:
84:a6:c9:b8:ca:7a:33:46:1f:ae:45:04:38:be:1f:ec:cb:ba:
9f:66:9c:b4:25:30:97:ba:66:17:46:23:bf:84:c2:64:07:ed:
26:4f:ab:ec:fc:72:43:a5:b3:bc:fa:45:21:17:16:fb:7d:d2:
4d:0f:a2:34:43:05:b0:7d:4c:42:61:60:68:94:96:3e:d6:07:
94:3a:d2:e5:6c:64:35:51:e3:37:11:1a:42:37:dc:83:65:eb:
ca:6c:43:e6:fe:39:72:c0:5a:95:5a:d2:fa:6e:2f:e5:a5:e8:
59:ab:a9:ad
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUMheaHLpwZOV3NzRyytt0AUDiZwUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMjE3MTZaFw0yNzA1MjQwMjIyMTZaMDMxMTAvBgNV
BAMTKEM3NTdGNEY0NTUzQ0FCODdDQ0VFRTcxNTM1RjIwQzkwM0VFNzNDQkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQpz/dZalGQcSN0f5+AYbfgqO7
PaF0b9tKfZqe3lSTWAHh74NuWXy03Gs1QoscsHnNCOvOq0oNbrdsPuABY2tjXGNO
eZm0Fv6TS2Gxba01Pxn2yGkRMFmGgB4ak4KYsFXOjtZtJYc2In2D9cOoIhBmmUr6
MEyIARX9r6wNtJbsoEyDS8Rls2IL3SGFvG8WxMQ+Eb496KgWlxmYMT4uKxnJwKtj
+Fw2igRJdq2cNZxWVfbYWkXPz/rymR0EX17xvYDth4Ju5CpSQEvBiaU84zqOepga
d9DitshiRzjbr2DLG2IiECle5LQFFLn58VAkc2RYzyOb3ZtlIlXlPaSVJHXBAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUx1f09FU8q4fM7ucVNfIMkD7nPL0wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1NjcxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqrzTANBgkqhkiG9w0BAQsFAAOCAQEAH4jE
pLrZ5oZ9A0S64YILr1qVYHYTEPOPsPAC5UFcp3jdt74RkxydAobanKTSp182u/uq
xLR62f/9j8iTgGfWHbpHnoiUPj2ahJxCVrMDJxRJPZPGNeoqloOe1ptLrnwkJw4D
zaLLj+RweS3MNSlIob/bn0Pn+8q1OYMXgTszneGGyKaT+meybxt5PsnG20GvhKbJ
uMp6M0YfrkUEOL4f7Mu6n2actCUwl7pmF0Yjv4TCZAftJk+r7PxyQ6WzvPpFIRcW
+33STQ+iNEMFsH1MQmFgaJSWPtYHlDrS5WxkNVHjNxEaQjfcg2XrymxD5v45csBa
lVrS+m4v5aXoWauprQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:16 2026 by rpki-client