Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145686.roa
File: AS145686.roa (raw, json)
Hash identifier: c0nSFya7LS9n7KXkDO/8Ecp7VD+IKh5gRsB66mJqk5Y=
Subject key identifier: DB:7B:17:B5:61:D7:95:5E:EB:B9:24:88:2F:78:DC:2A:E6:06:9A:A2
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5CEEE446A4900E427BF85991203CBCBE3F8E3660
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145686.roa
Signing time: Fri 22 May 2026 02:47:30 +0000
ROA not before: Fri 22 May 2026 02:42:30 +0000
ROA not after: Fri 21 May 2027 02:47:30 +0000
asID: 145686
IP address blocks: 240a:abdc::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:ee:e4:46:a4:90:0e:42:7b:f8:59:91:20:3c:bc:be:3f:8e:36:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:42:30 2026 GMT
Not After : May 21 02:47:30 2027 GMT
Subject: CN=DB7B17B561D7955EEBB924882F78DC2AE6069AA2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7f:34:89:60:03:56:62:99:7c:5c:de:03:4c:
2c:a3:27:ab:bb:3f:79:37:63:78:91:50:33:11:37:
1d:76:97:02:62:67:b2:a2:d9:1b:9e:42:66:b4:29:
05:46:e4:85:01:62:ca:84:37:a7:dc:78:e4:34:ea:
13:b6:a7:41:4e:bb:e1:9a:7d:01:d3:04:ab:a6:49:
7b:f4:ec:5f:82:ae:a4:d1:55:f8:95:ef:d6:80:f9:
9b:bb:37:38:52:9f:48:23:ac:ec:5c:10:db:c5:9a:
e7:48:0c:07:73:e1:dc:bf:63:fd:e0:a1:62:8f:09:
e1:cd:9d:17:d0:0f:72:e6:9f:9a:fe:71:0f:ad:3a:
2b:e1:9d:4a:b7:f1:65:02:a6:cc:12:5b:26:81:8a:
fd:ce:3e:da:bd:2a:6c:6f:2a:f8:a7:ae:6d:ba:ec:
a8:1c:e6:89:d8:fa:0e:ec:cd:c1:04:b2:cd:30:0a:
d5:1e:11:da:01:81:25:ea:40:d5:25:42:2a:42:8b:
b5:79:34:dd:fa:13:f4:f5:70:7d:7b:ef:34:06:27:
a5:7c:04:78:f8:bd:32:22:8d:5a:6a:dc:d3:53:2b:
1f:9b:25:02:d2:ea:18:f9:2e:2c:85:75:62:2e:66:
1f:6b:99:17:0c:43:cf:1e:56:45:6c:ff:e4:f8:5a:
31:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:7B:17:B5:61:D7:95:5E:EB:B9:24:88:2F:78:DC:2A:E6:06:9A:A2
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145686.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:abdc::/32
Signature Algorithm: sha256WithRSAEncryption
92:0e:c1:19:7a:42:c6:03:60:51:35:d4:50:fb:81:21:7a:6d:
d2:e3:4b:30:33:e8:c3:ca:0e:77:35:b0:dc:2e:62:ea:69:2b:
dc:05:ef:02:11:50:47:fd:e3:e7:11:6a:40:cb:9d:46:d5:56:
d1:8c:de:38:d8:ca:67:2f:cd:06:47:ce:df:e1:59:23:03:db:
de:54:0e:37:cf:a4:ff:43:1c:1a:c3:e3:7e:68:57:cf:3c:fa:
1b:df:83:b0:b5:48:8a:0e:fd:53:94:24:3c:d7:10:86:95:6f:
16:d5:e5:73:75:87:b6:a3:ed:d0:e9:8c:a2:98:8d:fb:44:0d:
ac:12:62:6f:54:5d:55:ac:fa:99:21:b8:b8:42:cd:9b:3b:d3:
cc:86:bd:b7:0f:a8:ad:3d:df:ea:f7:18:25:78:15:a5:fc:1f:
77:d0:f0:4b:ad:8e:d4:6c:66:e7:4b:09:af:4c:86:1d:da:f9:
0f:a9:1b:30:cc:c4:d5:7f:d9:98:81:d5:da:7e:15:f3:d0:d6:
87:fe:7b:ef:8f:0d:2c:c9:d2:75:0f:2f:ca:6e:d8:dc:4c:36:
83:0e:a6:40:0c:8e:aa:33:ea:2c:59:53:64:dc:59:31:2b:bc:
06:6e:a8:b1:c3:d3:c4:32:40:ba:86:cd:59:b1:05:7b:00:1d:
2c:d3:ab:59
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUXO7kRqSQDkJ7+FmRIDy8vj+ONmAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwMjQyMzBaFw0yNzA1MjEwMjQ3MzBaMDMxMTAvBgNV
BAMTKERCN0IxN0I1NjFENzk1NUVFQkI5MjQ4ODJGNzhEQzJBRTYwNjlBQTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsfzSJYANWYpl8XN4DTCyjJ6u7
P3k3Y3iRUDMRNx12lwJiZ7Ki2RueQma0KQVG5IUBYsqEN6fceOQ06hO2p0FOu+Ga
fQHTBKumSXv07F+CrqTRVfiV79aA+Zu7NzhSn0gjrOxcENvFmudIDAdz4dy/Y/3g
oWKPCeHNnRfQD3Lmn5r+cQ+tOivhnUq38WUCpswSWyaBiv3OPtq9KmxvKvinrm26
7Kgc5onY+g7szcEEss0wCtUeEdoBgSXqQNUlQipCi7V5NN36E/T1cH177zQGJ6V8
BHj4vTIijVpq3NNTKx+bJQLS6hj5LiyFdWIuZh9rmRcMQ88eVkVs/+T4WjG9AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU23sXtWHXlV7ruSSIL3jcKuYGmqIwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1Njg2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqr3DANBgkqhkiG9w0BAQsFAAOCAQEAkg7B
GXpCxgNgUTXUUPuBIXpt0uNLMDPow8oOdzWw3C5i6mkr3AXvAhFQR/3j5xFqQMud
RtVW0YzeONjKZy/NBkfO3+FZIwPb3lQON8+k/0McGsPjfmhXzzz6G9+DsLVIig79
U5QkPNcQhpVvFtXlc3WHtqPt0OmMopiN+0QNrBJib1RdVaz6mSG4uELNmzvTzIa9
tw+orT3f6vcYJXgVpfwfd9DwS62O1Gxm50sJr0yGHdr5D6kbMMzE1X/ZmIHV2n4V
89DWh/57748NLMnSdQ8vym7Y3Ew2gw6mQAyOqjPqLFlTZNxZMSu8Bm6oscPTxDJA
uobNWbEFewAdLNOrWQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:52 2026 by rpki-client