Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145705.roa
File: AS145705.roa (raw, json)
Hash identifier: vhmeaKokrQvWh3aOlIPewO3gWg/jiR3vgeRNm/zReqQ=
Subject key identifier: CC:45:25:FA:64:20:38:76:57:C4:55:19:30:CE:EC:C7:A9:F1:EF:9C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 01B179CC43921A1B411FEC31A612B7344223B925
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145705.roa
Signing time: Mon 25 May 2026 01:38:30 +0000
ROA not before: Mon 25 May 2026 01:33:30 +0000
ROA not after: Mon 24 May 2027 01:38:30 +0000
asID: 145705
IP address blocks: 240a:abef::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:b1:79:cc:43:92:1a:1b:41:1f:ec:31:a6:12:b7:34:42:23:b9:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:30 2026 GMT
Not After : May 24 01:38:30 2027 GMT
Subject: CN=CC4525FA6420387657C4551930CEECC7A9F1EF9C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:61:52:f9:c2:2c:72:90:8b:8c:59:e8:25:93:
ac:63:2e:e4:28:8d:1a:f2:48:f4:68:6d:6a:19:01:
a0:55:f1:ae:af:c3:4a:71:cf:bb:50:c1:a0:2f:6d:
da:69:02:c8:19:21:d4:87:8b:e2:86:57:56:25:34:
75:2c:7d:82:5c:b0:eb:c3:ac:b2:5b:d8:e1:52:51:
2e:7c:ec:52:2e:e6:e1:e4:c3:10:55:24:2b:7e:78:
15:d2:aa:cf:cc:90:b0:5b:64:6a:63:06:16:57:cd:
5b:c2:b3:8a:da:9b:e4:97:da:3e:83:4e:bd:d3:0a:
f5:29:ee:70:09:b0:74:90:2a:82:f7:0a:5f:38:de:
0f:2c:30:c9:96:0f:1c:21:ae:88:52:7f:67:32:ef:
5c:69:e8:33:73:fb:2f:ac:f6:39:00:4c:95:25:17:
01:d8:e7:63:20:c4:2b:ff:63:19:82:de:4e:a1:0a:
16:7c:9f:ac:b1:76:42:b6:2e:e7:42:bc:f1:0a:af:
3a:1a:1e:a4:22:aa:81:3e:2e:f3:95:97:5f:9e:ce:
89:0d:63:99:64:49:99:14:f2:a9:75:2e:f9:42:25:
fd:df:26:aa:cd:b9:07:72:95:a7:74:32:27:9f:9f:
7d:93:51:d3:fe:b2:c2:a0:2b:99:8a:9d:cc:5d:31:
87:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:45:25:FA:64:20:38:76:57:C4:55:19:30:CE:EC:C7:A9:F1:EF:9C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145705.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:abef::/32
Signature Algorithm: sha256WithRSAEncryption
70:6b:0a:63:fc:81:89:55:b6:d2:48:86:30:66:05:9e:40:be:
6e:9b:56:ef:38:d4:bd:36:5e:df:c7:87:ce:33:6f:d3:7e:48:
73:f3:77:33:49:e7:d2:7f:83:f8:73:59:ea:10:e6:69:94:4e:
83:af:24:26:32:6c:53:fe:5e:73:78:f9:fd:ec:db:09:a0:83:
8d:a9:9d:ba:6b:22:e8:96:84:3d:dd:1f:1f:98:8a:9d:01:83:
09:7f:0c:41:80:bd:5a:a8:b7:f8:f3:df:ad:e6:39:8e:9b:90:
c4:ec:13:d8:74:4c:bb:a4:4d:24:cd:dd:5a:ed:8e:07:6a:63:
dc:ea:47:b1:9b:8b:5d:3c:4b:54:9f:55:02:a7:89:66:dd:5c:
13:16:4f:1b:a0:4f:bc:fc:f6:00:88:19:5e:5e:c0:a4:9d:15:
6c:e0:6e:37:d3:b7:42:2a:83:d0:16:e4:7f:53:14:06:0d:c6:
04:13:7f:9c:f8:22:9c:72:e9:b2:fc:76:09:30:a1:87:4a:05:
f0:12:5e:90:e9:b9:f7:10:81:21:7e:07:73:7d:ae:40:ce:bb:
a4:a8:e7:dd:5b:37:cb:d5:1d:15:fa:4b:32:fa:b7:be:36:48:
8e:72:5a:4e:08:34:7a:46:94:48:9b:0e:e6:0e:b3:c7:3d:34:
0a:47:2f:d9
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUAbF5zEOSGhtBH+wxphK3NEIjuSUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMTMzMzBaFw0yNzA1MjQwMTM4MzBaMDMxMTAvBgNV
BAMTKENDNDUyNUZBNjQyMDM4NzY1N0M0NTUxOTMwQ0VFQ0M3QTlGMUVGOUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHYVL5wixykIuMWeglk6xjLuQo
jRrySPRobWoZAaBV8a6vw0pxz7tQwaAvbdppAsgZIdSHi+KGV1YlNHUsfYJcsOvD
rLJb2OFSUS587FIu5uHkwxBVJCt+eBXSqs/MkLBbZGpjBhZXzVvCs4ram+SX2j6D
Tr3TCvUp7nAJsHSQKoL3Cl843g8sMMmWDxwhrohSf2cy71xp6DNz+y+s9jkATJUl
FwHY52MgxCv/YxmC3k6hChZ8n6yxdkK2LudCvPEKrzoaHqQiqoE+LvOVl1+ezokN
Y5lkSZkU8ql1LvlCJf3fJqrNuQdylad0Miefn32TUdP+ssKgK5mKncxdMYcLAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUzEUl+mQgOHZXxFUZMM7sx6nx75wwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1NzA1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqr7zANBgkqhkiG9w0BAQsFAAOCAQEAcGsK
Y/yBiVW20kiGMGYFnkC+bptW7zjUvTZe38eHzjNv035Ic/N3M0nn0n+D+HNZ6hDm
aZROg68kJjJsU/5ec3j5/ezbCaCDjamdumsi6JaEPd0fH5iKnQGDCX8MQYC9Wqi3
+PPfreY5jpuQxOwT2HRMu6RNJM3dWu2OB2pj3OpHsZuLXTxLVJ9VAqeJZt1cExZP
G6BPvPz2AIgZXl7ApJ0VbOBuN9O3QiqD0Bbkf1MUBg3GBBN/nPginHLpsvx2CTCh
h0oF8BJekOm59xCBIX4Hc32uQM67pKjn3Vs3y9UdFfpLMvq3vjZIjnJaTgg0ekaU
SJsO5g6zxz00Ckcv2Q==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:55 2026 by rpki-client