Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145756.roa
File: AS145756.roa (raw, json)
Hash identifier: BNmXSTKTio+oBgRn7bqC11EYjsBudKKlNousglk33DM=
Subject key identifier: 4B:A4:66:3A:83:6F:6C:A9:B1:2E:90:88:9E:4E:F7:67:D5:48:EC:F7
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 53AEC6D50E5369798AC7CF7A4E4C3E189E7984A7
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145756.roa
Signing time: Fri 22 May 2026 04:27:04 +0000
ROA not before: Fri 22 May 2026 04:22:04 +0000
ROA not after: Fri 21 May 2027 04:27:04 +0000
asID: 145756
IP address blocks: 240a:ac22::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:ae:c6:d5:0e:53:69:79:8a:c7:cf:7a:4e:4c:3e:18:9e:79:84:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:22:04 2026 GMT
Not After : May 21 04:27:04 2027 GMT
Subject: CN=4BA4663A836F6CA9B12E90889E4EF767D548ECF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:2a:a1:2e:85:78:db:1a:27:e7:63:67:c6:a0:
4a:4b:0f:78:c8:b3:df:60:50:94:8b:93:1a:c3:f4:
65:21:3a:e6:46:bb:ca:a9:69:2e:6a:23:6d:78:f9:
6c:9a:30:9c:60:db:c1:c5:41:97:bc:e7:5d:9d:72:
d3:83:a7:b4:4d:d1:22:38:91:60:e6:81:03:f3:76:
af:77:bb:91:88:64:6c:6d:2b:f7:fb:5d:a4:c6:6a:
de:a0:82:3d:9e:2e:6f:b1:83:7c:ff:57:04:6d:92:
bf:21:4f:2e:6a:8a:5a:97:32:7e:b4:33:02:3a:a4:
fe:c5:19:71:35:ca:ae:92:5e:33:9b:eb:bd:87:18:
71:f8:0b:dd:d3:53:d0:8b:a8:e4:9d:db:cc:bd:98:
32:e5:da:85:4a:86:65:d6:ac:20:86:da:ab:d8:a0:
b1:4b:9b:f3:e2:9b:ba:a6:35:f3:53:e9:a5:8b:5d:
dd:ca:fa:b5:40:e5:e8:14:75:c7:35:85:4a:90:a6:
64:49:5d:1d:bd:c9:99:7a:ec:f5:a5:bd:f9:b4:5c:
c0:6e:bf:64:e9:47:a9:03:42:36:16:32:06:cd:7b:
42:74:d7:e5:50:50:cd:85:74:4c:2e:b2:f5:16:a0:
1e:ad:86:87:c3:e7:15:01:bd:4a:b4:fd:34:28:f0:
93:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:A4:66:3A:83:6F:6C:A9:B1:2E:90:88:9E:4E:F7:67:D5:48:EC:F7
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145756.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ac22::/32
Signature Algorithm: sha256WithRSAEncryption
2b:ba:42:db:46:44:ab:85:6a:74:17:52:d6:17:29:01:06:3d:
23:88:df:99:da:98:38:70:0a:ea:22:64:bd:07:6a:d7:08:b1:
8c:75:3d:70:dc:8a:c7:b0:30:94:61:e1:32:84:69:a1:85:3d:
bd:b1:72:f4:8f:26:ee:44:91:fa:4e:ca:dd:a1:8a:c2:e4:84:
9b:ae:43:46:d9:80:35:bc:9b:fd:82:64:1a:9e:03:ec:d3:a6:
4f:4e:4d:e5:61:dd:cd:a7:f2:eb:3c:ab:2b:de:c0:7a:b9:67:
da:a7:f5:45:be:a1:52:f7:43:eb:67:39:6f:32:ca:be:b2:a2:
8d:b7:68:77:34:78:ec:69:12:c8:4e:7f:cb:b4:2c:21:94:28:
58:f4:22:c8:df:93:b4:59:9b:a5:79:fb:3b:fb:91:49:eb:48:
92:4a:f9:c1:c7:01:58:05:33:da:26:6c:01:45:7f:fb:ca:8e:
3d:cc:e2:31:ac:bf:1e:a7:a5:04:b9:e0:bb:0c:51:20:38:24:
55:7c:60:c3:d3:97:64:3c:d7:50:6f:1c:93:fa:04:ed:6b:d1:
dc:f2:61:c5:da:44:f2:a4:ba:79:86:25:aa:43:ad:e8:20:57:
a1:cb:fc:3d:23:fc:3a:58:21:fc:85:7a:45:ee:30:d2:ab:34:
ed:52:e9:07
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUU67G1Q5TaXmKx896Tkw+GJ55hKcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNDIyMDRaFw0yNzA1MjEwNDI3MDRaMDMxMTAvBgNV
BAMTKDRCQTQ2NjNBODM2RjZDQTlCMTJFOTA4ODlFNEVGNzY3RDU0OEVDRjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoKqEuhXjbGifnY2fGoEpLD3jI
s99gUJSLkxrD9GUhOuZGu8qpaS5qI214+WyaMJxg28HFQZe8512dctODp7RN0SI4
kWDmgQPzdq93u5GIZGxtK/f7XaTGat6ggj2eLm+xg3z/VwRtkr8hTy5qilqXMn60
MwI6pP7FGXE1yq6SXjOb672HGHH4C93TU9CLqOSd28y9mDLl2oVKhmXWrCCG2qvY
oLFLm/Pim7qmNfNT6aWLXd3K+rVA5egUdcc1hUqQpmRJXR29yZl67PWlvfm0XMBu
v2TpR6kDQjYWMgbNe0J01+VQUM2FdEwusvUWoB6thofD5xUBvUq0/TQo8JPvAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUS6RmOoNvbKmxLpCInk73Z9VI7PcwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1NzU2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqsIjANBgkqhkiG9w0BAQsFAAOCAQEAK7pC
20ZEq4VqdBdS1hcpAQY9I4jfmdqYOHAK6iJkvQdq1wixjHU9cNyKx7AwlGHhMoRp
oYU9vbFy9I8m7kSR+k7K3aGKwuSEm65DRtmANbyb/YJkGp4D7NOmT05N5WHdzafy
6zyrK97Aerln2qf1Rb6hUvdD62c5bzLKvrKijbdodzR47GkSyE5/y7QsIZQoWPQi
yN+TtFmbpXn7O/uRSetIkkr5wccBWAUz2iZsAUV/+8qOPcziMay/HqelBLnguwxR
IDgkVXxgw9OXZDzXUG8ck/oE7WvR3PJhxdpE8qS6eYYlqkOt6CBXocv8PSP8Olgh
/IV6Re4w0qs07VLpBw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:57 2026 by rpki-client