Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145682.roa
File: AS145682.roa (raw, json)
Hash identifier: YKxj2bic+oDWI79cdnsYJkFiiOPh7SKLJ9U0BvuZvnY=
Subject key identifier: 6B:C7:DA:AA:4D:4B:42:04:E5:DC:18:58:2B:39:7F:BD:7C:91:B6:9D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 66E61830CF5FF599E69B6DD7E9EA943A2A565D01
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145682.roa
Signing time: Fri 22 May 2026 01:50:16 +0000
ROA not before: Fri 22 May 2026 01:45:16 +0000
ROA not after: Fri 21 May 2027 01:50:16 +0000
asID: 145682
IP address blocks: 240a:abd8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:e6:18:30:cf:5f:f5:99:e6:9b:6d:d7:e9:ea:94:3a:2a:56:5d:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:16 2026 GMT
Not After : May 21 01:50:16 2027 GMT
Subject: CN=6BC7DAAA4D4B4204E5DC18582B397FBD7C91B69D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2c:f0:cb:90:fa:b3:17:d0:44:45:71:40:9e:
01:ee:03:6f:f1:d6:13:e5:43:d1:da:8d:ca:2e:23:
d2:ba:17:2c:d0:66:b3:e9:47:25:50:71:eb:3e:03:
d2:ad:fe:82:15:fb:72:ff:d0:0a:fc:80:a0:96:ae:
71:8f:91:ea:bd:33:0d:7c:22:3e:4f:9c:22:d5:de:
74:e4:04:1e:6d:17:3b:c0:75:ef:c6:71:58:08:19:
06:98:30:40:f6:93:4f:96:cf:75:65:7b:88:56:30:
16:87:71:0a:e8:be:e8:c4:f3:be:5f:3f:04:1c:c3:
0d:0c:33:22:38:6a:0b:eb:59:ce:7f:e8:71:39:b2:
58:61:71:0a:fe:0e:ec:b8:2c:60:84:a8:4d:1c:7d:
d5:89:1b:4c:2f:f3:bd:de:34:6d:8f:29:9d:b2:69:
14:51:c1:78:f4:fd:cb:ac:af:26:bf:02:da:15:9a:
0b:38:b3:cc:2b:3c:46:31:a3:65:50:02:4b:09:85:
24:00:3d:50:3e:0c:b5:13:ac:06:b4:5f:44:d7:64:
ba:e4:f2:2c:61:63:68:90:57:33:b7:a5:f2:58:d0:
66:84:0b:32:74:63:3f:e1:94:0a:64:7e:11:05:20:
7d:8a:b2:af:d8:da:80:4b:ad:c5:af:25:8d:ca:fd:
b5:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:C7:DA:AA:4D:4B:42:04:E5:DC:18:58:2B:39:7F:BD:7C:91:B6:9D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145682.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:abd8::/32
Signature Algorithm: sha256WithRSAEncryption
2e:8f:ec:6f:5f:c8:db:13:6c:c3:fe:07:0e:2c:8f:54:71:3a:
63:09:ab:3d:12:4b:13:c2:f0:91:23:1f:e2:63:30:50:40:b7:
4f:50:f1:58:2e:87:de:ac:33:09:ff:cb:00:5c:0f:a5:c9:76:
2e:a0:4f:22:5c:be:f1:54:34:47:2b:33:c6:ff:94:f4:a8:ba:
7a:de:37:62:74:88:82:a2:94:ad:91:75:49:59:c4:8b:45:29:
e5:55:69:69:0e:88:74:b0:53:e6:10:97:a4:dd:ce:b2:3e:c0:
a0:85:86:18:82:b9:e5:4f:c6:39:8c:11:f2:ed:d3:b9:c3:37:
a2:90:70:d8:67:ac:8a:36:83:b5:72:d4:c4:d6:9b:7d:27:cb:
6c:30:51:94:d6:78:db:2a:ae:73:9b:62:14:1c:ee:23:f5:aa:
64:57:f0:7a:20:6a:63:09:25:f5:9a:60:73:7f:d1:c6:5a:81:
3e:1b:79:82:0d:86:d2:20:b0:a8:17:ee:6b:d3:35:89:62:3e:
d2:1f:4a:48:8a:fd:88:65:88:60:46:93:47:2c:4d:bc:45:1f:
75:c7:c1:a0:51:23:da:0e:3b:1d:ab:a4:2f:e7:5e:0b:a0:d4:
d3:06:16:f1:6a:5c:86:c0:8b:87:63:84:be:8c:aa:72:e8:2a:
80:ca:28:e5
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUZuYYMM9f9Znmm23X6eqUOipWXQEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwMTQ1MTZaFw0yNzA1MjEwMTUwMTZaMDMxMTAvBgNV
BAMTKDZCQzdEQUFBNEQ0QjQyMDRFNURDMTg1ODJCMzk3RkJEN0M5MUI2OUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcLPDLkPqzF9BERXFAngHuA2/x
1hPlQ9HajcouI9K6FyzQZrPpRyVQces+A9Kt/oIV+3L/0Ar8gKCWrnGPkeq9Mw18
Ij5PnCLV3nTkBB5tFzvAde/GcVgIGQaYMED2k0+Wz3Vle4hWMBaHcQrovujE875f
PwQcww0MMyI4agvrWc5/6HE5slhhcQr+Duy4LGCEqE0cfdWJG0wv873eNG2PKZ2y
aRRRwXj0/cusrya/AtoVmgs4s8wrPEYxo2VQAksJhSQAPVA+DLUTrAa0X0TXZLrk
8ixhY2iQVzO3pfJY0GaECzJ0Yz/hlApkfhEFIH2Ksq/Y2oBLrcWvJY3K/bVnAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUa8faqk1LQgTl3BhYKzl/vXyRtp0wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1NjgyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqr2DANBgkqhkiG9w0BAQsFAAOCAQEALo/s
b1/I2xNsw/4HDiyPVHE6YwmrPRJLE8LwkSMf4mMwUEC3T1DxWC6H3qwzCf/LAFwP
pcl2LqBPIly+8VQ0Ryszxv+U9Ki6et43YnSIgqKUrZF1SVnEi0Up5VVpaQ6IdLBT
5hCXpN3Osj7AoIWGGIK55U/GOYwR8u3TucM3opBw2GesijaDtXLUxNabfSfLbDBR
lNZ42yquc5tiFBzuI/WqZFfweiBqYwkl9Zpgc3/RxlqBPht5gg2G0iCwqBfua9M1
iWI+0h9KSIr9iGWIYEaTRyxNvEUfdcfBoFEj2g47HaukL+deC6DU0wYW8WpchsCL
h2OEvoyqcugqgMoo5Q==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:50 2026 by rpki-client