Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145723.roa
File: AS145723.roa (raw, json)
Hash identifier: M9L9awAYKa0LLOZLue3yefJt2QuAv/gXDG2bpgsaZqg=
Subject key identifier: 71:DC:B9:2C:59:18:62:A4:F1:FF:B0:5D:30:7B:93:C4:F6:33:9F:6E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 59C18E06B47C2178A98F153AAF46421FB5E3FE03
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145723.roa
Signing time: Mon 25 May 2026 01:20:02 +0000
ROA not before: Mon 25 May 2026 01:15:02 +0000
ROA not after: Mon 24 May 2027 01:20:02 +0000
asID: 145723
IP address blocks: 240a:ac01::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:c1:8e:06:b4:7c:21:78:a9:8f:15:3a:af:46:42:1f:b5:e3:fe:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:15:02 2026 GMT
Not After : May 24 01:20:02 2027 GMT
Subject: CN=71DCB92C591862A4F1FFB05D307B93C4F6339F6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d9:e6:39:c4:2a:08:5a:bc:bb:b8:01:4f:52:
c5:0d:85:65:48:bf:c5:d6:97:63:96:7a:78:c7:05:
86:13:9f:fc:61:f5:1e:bb:40:d8:29:d6:8f:53:26:
9b:3e:94:e6:6e:18:c4:35:49:d9:7d:31:cf:af:ed:
d1:bf:3e:2e:6e:4c:ae:9e:02:1c:ad:74:ce:58:f6:
6a:ec:4b:b6:31:60:44:4e:00:c3:9e:51:b4:20:28:
3f:49:49:59:1a:78:7c:17:aa:03:61:2f:d4:54:23:
5e:ae:ed:d4:76:62:90:ab:bc:ce:15:8f:78:5b:3c:
87:ff:39:8b:15:51:14:e9:b6:c2:6f:5b:45:e0:04:
f5:0d:ee:ac:df:ef:05:3d:17:0e:8f:ba:c3:6e:73:
6b:73:fa:58:ad:3c:f8:8a:93:51:04:6a:25:af:ab:
3d:9d:20:78:48:2c:94:30:31:43:df:b2:d5:fa:21:
a0:74:ee:ac:ca:8b:fb:12:1c:9d:a7:a5:94:cf:ed:
f7:2f:a1:e8:a2:c1:a7:e4:e8:ed:d8:ad:56:bb:84:
0b:b9:c0:ea:68:c6:62:e3:ed:44:1d:5e:3c:37:c1:
b9:c6:24:5d:46:90:31:d3:e8:8c:b7:24:80:cd:eb:
49:a9:c9:d8:86:7d:58:dc:17:b1:43:1c:cf:50:5f:
90:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:DC:B9:2C:59:18:62:A4:F1:FF:B0:5D:30:7B:93:C4:F6:33:9F:6E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145723.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ac01::/32
Signature Algorithm: sha256WithRSAEncryption
67:bb:21:af:e9:d5:87:9e:f0:96:2e:8d:70:08:fd:d4:0e:0e:
f7:60:10:09:2d:de:43:23:8e:e4:11:04:f4:e6:75:a8:a0:fd:
82:dc:cf:f4:85:c9:71:13:b3:b5:54:b8:83:09:ec:79:8d:9f:
f7:5b:cf:fe:0f:5b:1e:12:05:c8:ac:b4:c2:9d:cb:3b:4a:73:
0b:30:59:2f:73:75:38:ff:17:5d:9a:73:62:c7:df:03:da:a8:
82:30:fb:a3:b4:cc:b3:0e:eb:4d:9c:ea:1d:2f:48:e8:88:7b:
73:38:2a:1c:a4:fe:2c:12:83:96:56:11:14:ac:c0:62:8e:56:
13:9a:91:b8:27:16:01:6f:3b:4c:2b:da:8a:b8:2e:c3:ef:c5:
c4:8e:7c:7b:cb:d1:25:c6:25:35:b9:0a:12:ee:27:ea:85:e4:
09:06:75:c3:65:a8:87:2c:f6:58:f5:02:63:b9:72:5b:ed:90:
a3:7c:a7:9c:28:1e:03:c7:98:11:1b:04:2e:9b:3d:47:39:ba:
07:c5:33:8d:6f:39:a8:46:1e:a5:c5:5a:41:7b:8f:1f:99:6c:
c5:f2:81:bf:35:da:b8:5c:a7:93:d2:82:97:83:64:6f:04:66:
15:c2:35:c7:ca:e0:4b:43:06:00:e5:fd:f9:46:41:3b:01:b1:
66:84:a9:e3
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUWcGOBrR8IXipjxU6r0ZCH7Xj/gMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMTE1MDJaFw0yNzA1MjQwMTIwMDJaMDMxMTAvBgNV
BAMTKDcxRENCOTJDNTkxODYyQTRGMUZGQjA1RDMwN0I5M0M0RjYzMzlGNkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC22eY5xCoIWry7uAFPUsUNhWVI
v8XWl2OWenjHBYYTn/xh9R67QNgp1o9TJps+lOZuGMQ1Sdl9Mc+v7dG/Pi5uTK6e
AhytdM5Y9mrsS7YxYEROAMOeUbQgKD9JSVkaeHwXqgNhL9RUI16u7dR2YpCrvM4V
j3hbPIf/OYsVURTptsJvW0XgBPUN7qzf7wU9Fw6PusNuc2tz+litPPiKk1EEaiWv
qz2dIHhILJQwMUPfstX6IaB07qzKi/sSHJ2npZTP7fcvoeiiwafk6O3YrVa7hAu5
wOpoxmLj7UQdXjw3wbnGJF1GkDHT6Iy3JIDN60mpydiGfVjcF7FDHM9QX5C9AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUcdy5LFkYYqTx/7BdMHuTxPYzn24wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1NzIzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqsATANBgkqhkiG9w0BAQsFAAOCAQEAZ7sh
r+nVh57wli6NcAj91A4O92AQCS3eQyOO5BEE9OZ1qKD9gtzP9IXJcROztVS4gwns
eY2f91vP/g9bHhIFyKy0wp3LO0pzCzBZL3N1OP8XXZpzYsffA9qogjD7o7TMsw7r
TZzqHS9I6Ih7czgqHKT+LBKDllYRFKzAYo5WE5qRuCcWAW87TCvairguw+/FxI58
e8vRJcYlNbkKEu4n6oXkCQZ1w2Wohyz2WPUCY7lyW+2Qo3ynnCgeA8eYERsELps9
Rzm6B8UzjW85qEYepcVaQXuPH5lsxfKBvzXauFynk9KCl4NkbwRmFcI1x8rgS0MG
AOX9+UZBOwGxZoSp4w==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:09 2026 by rpki-client