Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145745.roa
File: AS145745.roa (raw, json)
Hash identifier: RC5cwJAKC+eZUH1sbyC0z8pVevGEI7tv+PgCK9+OALc=
Subject key identifier: 81:FD:DE:F9:85:29:62:67:A1:3B:49:19:BD:D8:30:AB:58:08:56:FE
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 28DB7FB5817721CBB813E6AD9E23C7E3F252542B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145745.roa
Signing time: Tue 26 May 2026 08:53:04 +0000
ROA not before: Tue 26 May 2026 08:48:04 +0000
ROA not after: Tue 25 May 2027 08:53:04 +0000
asID: 145745
IP address blocks: 240a:ac17::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:db:7f:b5:81:77:21:cb:b8:13:e6:ad:9e:23:c7:e3:f2:52:54:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 08:48:04 2026 GMT
Not After : May 25 08:53:04 2027 GMT
Subject: CN=81FDDEF985296267A13B4919BDD830AB580856FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6d:b5:a9:c3:f8:fe:34:25:e1:60:aa:22:5d:
4a:85:da:80:57:b8:36:c4:7e:ea:b2:28:7f:de:a0:
bf:9b:66:46:df:0a:ab:f3:07:55:55:93:bf:24:96:
cd:22:1e:9c:06:20:a3:62:41:b8:b1:f8:58:df:c8:
e6:ac:c3:73:f0:a4:d3:77:eb:bd:73:e9:a5:f2:7b:
32:06:b6:c4:27:7e:14:72:5b:61:8c:7a:60:ec:6d:
5c:70:c4:c5:42:c8:12:3c:d3:48:87:9d:54:2b:7e:
7b:03:66:e7:50:03:39:7b:db:47:2e:62:c9:84:ca:
ec:62:b8:4d:56:84:b1:21:12:2e:6f:a3:24:17:ff:
57:85:77:1e:73:d0:f8:52:50:97:bd:42:38:5e:b7:
05:8f:e4:a3:1b:64:87:64:d0:34:5a:34:46:e4:b1:
a5:4a:d3:87:6a:19:97:f7:a1:a5:33:89:6f:1f:ea:
83:a0:63:3e:de:ee:00:82:56:65:72:c8:fe:b1:bb:
81:0d:48:71:46:87:c9:83:ba:00:40:e3:bd:f2:57:
9f:fd:ae:d5:2d:d2:e0:e4:d7:db:08:18:a8:83:af:
2d:ca:86:26:a8:d9:31:80:69:bb:63:17:a6:a6:4f:
70:41:2b:1b:3b:c8:24:ce:26:55:4a:55:02:60:7c:
59:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:FD:DE:F9:85:29:62:67:A1:3B:49:19:BD:D8:30:AB:58:08:56:FE
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145745.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ac17::/32
Signature Algorithm: sha256WithRSAEncryption
77:50:76:f4:cd:c0:f6:18:52:8e:4f:39:c2:52:50:1b:db:fd:
09:50:d0:69:e1:a7:24:65:c3:1c:bf:b4:ee:08:1e:f9:ed:e5:
63:58:53:02:a9:34:68:c6:e4:ea:b8:0b:41:60:f0:8c:94:1e:
c4:eb:b3:19:9e:61:e3:89:c6:59:70:ce:75:ee:21:1b:c8:25:
0b:88:a6:e9:25:91:7c:62:2f:82:f7:31:9d:3e:8b:60:fd:e5:
aa:f5:b8:40:04:ba:50:30:83:f9:81:da:eb:7d:82:69:a2:25:
1f:6b:51:e3:77:7c:8d:40:fc:86:de:85:a0:1b:11:2f:0f:63:
0c:ad:ff:e0:25:b5:3a:95:53:07:90:f7:ed:ae:8d:22:2b:e7:
5b:c9:c0:b9:f4:87:68:be:05:0c:6d:78:f3:f2:be:58:82:a2:
09:b8:3a:2c:99:0a:83:d9:e6:b6:83:e8:88:1a:ab:81:d3:e2:
1b:9d:5d:94:de:f6:20:6d:50:13:b0:82:bc:19:58:64:90:c0:
fa:b1:b1:b4:0b:be:a0:b7:50:b0:3c:84:83:5f:6d:b4:22:ea:
d3:e7:ea:d2:70:2c:98:0f:65:4d:66:c7:2a:8f:89:01:42:f7:
58:af:b3:dc:6b:69:7b:23:97:2b:74:f5:06:01:7e:a8:1d:64:
92:ce:80:3d
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUKNt/tYF3Icu4E+atniPH4/JSVCswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwODQ4MDRaFw0yNzA1MjUwODUzMDRaMDMxMTAvBgNV
BAMTKDgxRkRERUY5ODUyOTYyNjdBMTNCNDkxOUJERDgzMEFCNTgwODU2RkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/bbWpw/j+NCXhYKoiXUqF2oBX
uDbEfuqyKH/eoL+bZkbfCqvzB1VVk78kls0iHpwGIKNiQbix+FjfyOasw3PwpNN3
671z6aXyezIGtsQnfhRyW2GMemDsbVxwxMVCyBI800iHnVQrfnsDZudQAzl720cu
YsmEyuxiuE1WhLEhEi5voyQX/1eFdx5z0PhSUJe9QjhetwWP5KMbZIdk0DRaNEbk
saVK04dqGZf3oaUziW8f6oOgYz7e7gCCVmVyyP6xu4ENSHFGh8mDugBA473yV5/9
rtUt0uDk19sIGKiDry3Khiao2TGAabtjF6amT3BBKxs7yCTOJlVKVQJgfFlJAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUgf3e+YUpYmehO0kZvdgwq1gIVv4wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1NzQ1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqsFzANBgkqhkiG9w0BAQsFAAOCAQEAd1B2
9M3A9hhSjk85wlJQG9v9CVDQaeGnJGXDHL+07gge+e3lY1hTAqk0aMbk6rgLQWDw
jJQexOuzGZ5h44nGWXDOde4hG8glC4im6SWRfGIvgvcxnT6LYP3lqvW4QAS6UDCD
+YHa632CaaIlH2tR43d8jUD8ht6FoBsRLw9jDK3/4CW1OpVTB5D37a6NIivnW8nA
ufSHaL4FDG148/K+WIKiCbg6LJkKg9nmtoPoiBqrgdPiG51dlN72IG1QE7CCvBlY
ZJDA+rGxtAu+oLdQsDyEg19ttCLq0+fq0nAsmA9lTWbHKo+JAUL3WK+z3GtpeyOX
K3T1BgF+qB1kks6APQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:27 2026 by rpki-client