Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145764.roa
File: AS145764.roa (raw, json)
Hash identifier: XOB259m9FJlpcfFTsHWEMlrZHf+72cv193KFj/rW/c8=
Subject key identifier: 33:80:FB:9A:AE:96:DF:A6:EE:EF:97:05:E0:C9:EE:8C:DA:9C:BE:C4
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4149E29B7E7DE5D5211FBFF861E65015AF994C8F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145764.roa
Signing time: Fri 22 May 2026 06:27:32 +0000
ROA not before: Fri 22 May 2026 06:22:32 +0000
ROA not after: Fri 21 May 2027 06:27:32 +0000
asID: 145764
IP address blocks: 240a:ac2a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:49:e2:9b:7e:7d:e5:d5:21:1f:bf:f8:61:e6:50:15:af:99:4c:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:22:32 2026 GMT
Not After : May 21 06:27:32 2027 GMT
Subject: CN=3380FB9AAE96DFA6EEEF9705E0C9EE8CDA9CBEC4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:b2:21:fc:16:58:3d:fe:b0:6d:f8:db:05:99:
34:63:f8:bc:3d:e3:82:a6:5a:c5:12:97:ed:8d:f9:
aa:6d:a2:31:d4:64:a0:a6:ca:4b:1c:2a:40:6b:1b:
59:d9:12:08:3e:4d:09:8d:5f:b4:84:ab:82:3c:ca:
2e:36:3e:b7:63:5c:e1:46:31:8a:f3:74:d6:2e:b8:
d4:0e:86:36:8c:dc:25:dc:10:4a:69:b3:a6:c6:a4:
7b:45:13:83:9d:6d:ac:ae:dd:8d:d6:85:09:b4:7f:
bc:38:d6:92:16:f6:5e:84:fb:0e:19:7b:4b:82:63:
0c:24:58:6e:4e:b3:c6:dd:b0:bd:4e:d9:c4:d2:11:
55:25:60:da:9d:a5:f5:96:ab:77:52:95:18:f0:a9:
c5:21:7f:f4:51:73:4b:d8:36:4e:5f:82:27:37:27:
70:32:02:2e:bd:8f:50:be:19:0d:be:b8:be:db:39:
be:00:77:7c:d0:91:29:2c:b7:88:b6:8e:dd:f8:3c:
29:5f:b9:5d:0b:7f:e1:45:30:08:05:cd:00:f9:83:
09:3f:03:b4:d4:5a:aa:24:6f:d8:ad:d1:a5:23:21:
4d:11:a9:5b:bb:23:12:f5:e1:16:46:5e:7f:4d:e4:
b8:ba:46:92:1a:18:f5:d9:48:bd:ee:2d:25:a5:8f:
64:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:80:FB:9A:AE:96:DF:A6:EE:EF:97:05:E0:C9:EE:8C:DA:9C:BE:C4
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145764.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ac2a::/32
Signature Algorithm: sha256WithRSAEncryption
68:65:3a:fc:85:c9:54:e0:eb:cf:7c:a0:ed:cb:2b:fe:4e:9e:
67:aa:c3:4a:8b:58:9e:3f:46:56:b6:6f:c0:b7:90:b6:58:e0:
f7:94:f8:e1:32:a4:ad:a3:da:de:76:2e:fa:e7:a8:22:e9:46:
01:90:3a:d1:77:5e:2c:7b:49:a7:3f:df:0f:bf:13:8f:27:3b:
b6:8b:f0:26:81:a4:3d:f5:a6:25:a8:ac:ec:8f:b4:f8:04:2a:
b2:36:f0:27:7b:04:d8:c6:41:67:a5:54:62:4e:a9:57:8d:c3:
db:3f:cf:5d:dc:06:53:05:1a:97:ec:31:1d:56:b2:3d:c5:3c:
3e:5f:a0:90:63:56:2d:1e:2e:17:44:94:dc:01:7a:98:8a:f4:
bb:2b:f9:e4:be:06:24:a3:cc:89:d2:01:2f:de:a1:bd:19:f5:
75:80:d7:d9:89:06:a1:72:97:77:4a:72:95:cd:37:a9:c4:ac:
35:29:76:21:f6:37:3a:bf:e2:bf:c7:22:2b:ef:08:d3:7e:10:
3f:14:b0:48:08:68:ff:ef:f0:98:46:a7:59:26:87:cd:91:99:
0e:d4:b3:d9:99:59:32:a3:12:f6:91:09:0a:bc:50:6d:78:a5:
41:3e:cc:95:6c:da:07:34:98:bf:5c:38:f9:5a:7c:d4:be:a6:
61:f2:13:56
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUQUnim3595dUhH7/4YeZQFa+ZTI8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjIyMzJaFw0yNzA1MjEwNjI3MzJaMDMxMTAvBgNV
BAMTKDMzODBGQjlBQUU5NkRGQTZFRUVGOTcwNUUwQzlFRThDREE5Q0JFQzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmsiH8Flg9/rBt+NsFmTRj+Lw9
44KmWsUSl+2N+aptojHUZKCmykscKkBrG1nZEgg+TQmNX7SEq4I8yi42PrdjXOFG
MYrzdNYuuNQOhjaM3CXcEEpps6bGpHtFE4Odbayu3Y3WhQm0f7w41pIW9l6E+w4Z
e0uCYwwkWG5Os8bdsL1O2cTSEVUlYNqdpfWWq3dSlRjwqcUhf/RRc0vYNk5fgic3
J3AyAi69j1C+GQ2+uL7bOb4Ad3zQkSkst4i2jt34PClfuV0Lf+FFMAgFzQD5gwk/
A7TUWqokb9it0aUjIU0RqVu7IxL14RZGXn9N5Li6RpIaGPXZSL3uLSWlj2SLAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUM4D7mq6W36bu75cF4MnujNqcvsQwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1NzY0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqsKjANBgkqhkiG9w0BAQsFAAOCAQEAaGU6
/IXJVODrz3yg7csr/k6eZ6rDSotYnj9GVrZvwLeQtljg95T44TKkraPa3nYu+ueo
IulGAZA60XdeLHtJpz/fD78Tjyc7tovwJoGkPfWmJais7I+0+AQqsjbwJ3sE2MZB
Z6VUYk6pV43D2z/PXdwGUwUal+wxHVayPcU8Pl+gkGNWLR4uF0SU3AF6mIr0uyv5
5L4GJKPMidIBL96hvRn1dYDX2YkGoXKXd0pylc03qcSsNSl2IfY3Or/iv8ciK+8I
034QPxSwSAho/+/wmEanWSaHzZGZDtSz2ZlZMqMS9pEJCrxQbXilQT7MlWzaBzSY
v1w4+Vp81L6mYfITVg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:55 2026 by rpki-client