Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145704.roa
File: AS145704.roa (raw, json)
Hash identifier: WlyWfEf9gxMFYIYLk5erI33TjtUNgFAqNvNZsetFjZg=
Subject key identifier: 57:C2:5E:6F:08:A2:88:62:AF:15:0D:FA:F8:05:AA:09:96:29:20:40
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7BC60C09110A6B4FE2C822C4F8CA491ED2A84DEA
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145704.roa
Signing time: Fri 22 May 2026 07:09:13 +0000
ROA not before: Fri 22 May 2026 07:04:13 +0000
ROA not after: Fri 21 May 2027 07:09:13 +0000
asID: 145704
IP address blocks: 240a:abee::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:c6:0c:09:11:0a:6b:4f:e2:c8:22:c4:f8:ca:49:1e:d2:a8:4d:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:04:13 2026 GMT
Not After : May 21 07:09:13 2027 GMT
Subject: CN=57C25E6F08A28862AF150DFAF805AA0996292040
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c0:b4:be:63:04:4f:05:66:99:90:14:43:cd:
8e:9f:54:e4:f4:ef:63:29:e3:73:3d:cb:d9:04:5b:
02:1a:6d:1e:f7:86:e4:03:d7:28:14:76:54:44:77:
a8:c1:f1:31:92:0e:78:98:0b:88:59:2e:63:cf:3f:
3e:40:17:eb:96:79:8d:ec:bd:ad:a1:3c:88:c0:8d:
94:c7:fe:a5:a9:d0:35:88:8e:88:c3:12:10:7a:69:
fa:87:60:b4:0d:26:ef:0a:6d:e1:ab:1a:3d:9f:28:
c2:b0:c3:c5:3c:2b:37:bf:a8:1c:91:f4:42:21:24:
93:12:fe:46:04:2d:bf:f1:b8:fb:0e:39:48:99:46:
a0:64:f4:55:0d:e9:cd:2b:2f:81:44:29:68:6c:c5:
bd:1d:37:71:bf:44:7a:06:04:5a:b6:7a:84:8b:f3:
c0:e6:b7:12:85:0b:11:a1:c9:43:c7:75:fd:86:76:
d2:3a:8b:97:c6:88:91:d2:e3:34:04:77:ee:8e:26:
d4:ae:0c:ea:e5:7c:08:a1:69:0e:97:fd:6f:7b:13:
3a:ae:aa:18:cb:5d:37:ca:9f:48:48:10:b4:50:55:
35:eb:64:e7:78:ea:74:51:42:36:72:f8:0c:30:86:
d7:3b:2f:06:ef:ba:e8:7a:6f:23:91:59:be:d4:0b:
1a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:C2:5E:6F:08:A2:88:62:AF:15:0D:FA:F8:05:AA:09:96:29:20:40
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145704.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:abee::/32
Signature Algorithm: sha256WithRSAEncryption
4d:2f:af:6e:ee:34:96:c2:6b:85:78:5d:16:4f:c1:b9:1a:90:
72:67:83:71:3c:bd:b4:da:d4:b8:72:16:fe:3e:6d:9d:e7:38:
d6:e4:ea:c9:2f:53:64:ac:fe:ac:fc:ef:eb:ef:bc:bc:aa:35:
50:9a:5d:9d:c1:b0:f3:cf:d2:85:2a:11:12:21:62:c0:95:86:
3d:91:10:ce:e6:9c:fe:f8:a7:4b:97:d6:58:fd:71:0c:93:86:
11:c9:53:b7:08:c7:d6:64:ac:dc:d7:cd:12:4d:1a:2f:c7:78:
96:30:d6:e1:8b:15:49:8f:d2:a3:58:c1:e8:cc:fb:4e:9d:5c:
48:f9:30:3c:3c:e7:52:05:6e:03:82:31:20:96:2f:7a:c2:98:
f4:dd:09:27:b1:79:a0:a4:ce:1c:50:64:6e:03:e4:62:8f:c4:
41:08:27:af:83:b5:9f:60:c7:bb:b5:7a:d1:bf:35:64:fc:85:
00:d1:6c:e0:8c:b2:ec:4f:0e:b4:87:20:e1:c0:5e:a0:09:1d:
56:34:15:f8:68:fc:b2:4c:3c:a6:95:29:e0:6b:09:31:fd:37:
ff:e9:45:38:09:7b:5d:79:5b:00:2a:40:e4:1b:7d:7d:92:f1:
69:63:64:7f:47:fc:e3:77:07:fa:3a:00:82:52:da:d4:f9:8b:
b6:94:d3:43
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUe8YMCREKa0/iyCLE+MpJHtKoTeowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzA0MTNaFw0yNzA1MjEwNzA5MTNaMDMxMTAvBgNV
BAMTKDU3QzI1RTZGMDhBMjg4NjJBRjE1MERGQUY4MDVBQTA5OTYyOTIwNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIwLS+YwRPBWaZkBRDzY6fVOT0
72Mp43M9y9kEWwIabR73huQD1ygUdlREd6jB8TGSDniYC4hZLmPPPz5AF+uWeY3s
va2hPIjAjZTH/qWp0DWIjojDEhB6afqHYLQNJu8KbeGrGj2fKMKww8U8Kze/qByR
9EIhJJMS/kYELb/xuPsOOUiZRqBk9FUN6c0rL4FEKWhsxb0dN3G/RHoGBFq2eoSL
88DmtxKFCxGhyUPHdf2GdtI6i5fGiJHS4zQEd+6OJtSuDOrlfAihaQ6X/W97Ezqu
qhjLXTfKn0hIELRQVTXrZOd46nRRQjZy+Awwhtc7Lwbvuuh6byORWb7UCxqRAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUV8JebwiiiGKvFQ36+AWqCZYpIEAwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1NzA0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqr7jANBgkqhkiG9w0BAQsFAAOCAQEATS+v
bu40lsJrhXhdFk/BuRqQcmeDcTy9tNrUuHIW/j5tnec41uTqyS9TZKz+rPzv6++8
vKo1UJpdncGw88/ShSoREiFiwJWGPZEQzuac/vinS5fWWP1xDJOGEclTtwjH1mSs
3NfNEk0aL8d4ljDW4YsVSY/So1jB6Mz7Tp1cSPkwPDznUgVuA4IxIJYvesKY9N0J
J7F5oKTOHFBkbgPkYo/EQQgnr4O1n2DHu7V60b81ZPyFANFs4Iyy7E8OtIcg4cBe
oAkdVjQV+Gj8skw8ppUp4GsJMf03/+lFOAl7XXlbACpA5Bt9fZLxaWNkf0f843cH
+joAglLa1PmLtpTTQw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:25 2026 by rpki-client