Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145768.roa
File: AS145768.roa (raw, json)
Hash identifier: 3rT2T/EtZ+76KgMCBVrFgLKNtGQwWXvxsmdE1229Rg4=
Subject key identifier: B1:BC:1F:06:FC:7C:1D:8B:A9:1C:19:5A:16:19:F6:F8:CB:F6:BD:89
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1439DB2FA308F1599347E1930B01797EE0B0E331
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145768.roa
Signing time: Fri 22 May 2026 07:09:00 +0000
ROA not before: Fri 22 May 2026 07:04:00 +0000
ROA not after: Fri 21 May 2027 07:09:00 +0000
asID: 145768
IP address blocks: 240a:ac2e::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:39:db:2f:a3:08:f1:59:93:47:e1:93:0b:01:79:7e:e0:b0:e3:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:04:00 2026 GMT
Not After : May 21 07:09:00 2027 GMT
Subject: CN=B1BC1F06FC7C1D8BA91C195A1619F6F8CBF6BD89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:f8:b4:c0:e0:7a:16:5e:0a:cc:50:56:b3:af:
55:dc:5f:18:55:1c:52:61:be:f9:14:3a:38:81:51:
e6:9a:05:10:e3:c3:47:72:d9:18:d1:c7:51:dc:2b:
05:85:38:e7:9e:9a:79:8e:56:c1:da:0a:f7:61:8e:
8d:85:f7:74:df:9c:b3:d1:64:cc:d4:fa:e4:a6:b6:
ac:ac:e8:33:44:32:12:0a:9a:a4:53:ae:8b:90:51:
5a:98:76:3e:32:c4:47:9f:55:8a:2c:02:ac:ee:ce:
88:53:d7:ff:f3:2c:3a:41:58:0c:3b:c1:c0:40:d8:
54:43:d5:5f:a5:ed:f6:4a:64:fa:b7:5b:5b:eb:27:
ec:ea:75:ae:3a:9a:bb:b2:f7:59:f3:77:c8:37:71:
85:42:4e:27:d0:a6:1b:49:4b:14:d4:c7:9d:50:f7:
6e:55:5b:a9:33:3f:dd:6f:73:15:b6:9e:52:49:c3:
23:7b:63:42:e9:4d:24:76:3b:ff:bc:a8:e6:34:70:
29:75:96:b4:f2:11:a2:95:1b:7d:61:46:e9:f3:3a:
3d:0b:b2:46:43:0b:42:c7:cc:71:a3:05:94:c8:9c:
26:d1:27:63:2f:04:43:30:b9:06:18:ea:ea:f5:1f:
18:6b:a7:4b:44:1f:e1:58:76:b8:5e:e8:75:5c:20:
a2:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:BC:1F:06:FC:7C:1D:8B:A9:1C:19:5A:16:19:F6:F8:CB:F6:BD:89
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145768.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ac2e::/32
Signature Algorithm: sha256WithRSAEncryption
9c:4a:84:60:28:cb:3a:d5:4c:7e:81:14:8b:49:23:ac:7c:12:
8a:b5:fb:b4:b1:56:eb:0e:3c:37:3d:38:03:1b:2f:f7:b1:41:
e7:b3:0e:96:d4:0a:0f:44:8f:2e:dd:0d:60:4e:b3:9b:7a:3b:
6c:22:ad:b4:85:f8:dc:e9:36:e5:7c:7b:b5:c1:2d:bf:c7:40:
ce:fd:69:b5:32:95:1e:97:a9:e7:13:75:58:aa:73:0d:b7:9f:
75:4e:00:3a:de:55:a7:9c:5c:be:20:2f:c3:f1:7e:06:6e:9c:
05:5f:2a:cb:70:d9:6e:2d:e4:ed:e6:14:7c:45:da:a4:da:2e:
f2:c2:e4:04:46:96:f0:80:67:74:9a:cd:a7:f0:41:ae:48:64:
70:d0:8e:75:88:d5:07:2b:1b:08:2b:9a:b8:f9:12:05:48:5f:
4e:ba:32:82:f4:3b:36:4d:b9:65:4d:4d:1b:f8:74:67:21:3b:
04:14:b3:1e:b9:1c:93:e3:57:8d:86:69:d2:a5:ec:01:24:64:
11:1c:01:2c:60:5c:42:d1:b9:45:cc:01:1e:73:69:fb:8d:cd:
60:4b:33:e2:67:91:5c:dc:01:51:05:79:54:ad:ea:9b:ef:80:
2f:84:0b:d3:6c:7c:3c:ee:24:c3:43:c8:20:d3:e9:67:00:5d:
68:7b:85:3d
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUFDnbL6MI8VmTR+GTCwF5fuCw4zEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzA0MDBaFw0yNzA1MjEwNzA5MDBaMDMxMTAvBgNV
BAMTKEIxQkMxRjA2RkM3QzFEOEJBOTFDMTk1QTE2MTlGNkY4Q0JGNkJEODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk+LTA4HoWXgrMUFazr1XcXxhV
HFJhvvkUOjiBUeaaBRDjw0dy2RjRx1HcKwWFOOeemnmOVsHaCvdhjo2F93TfnLPR
ZMzU+uSmtqys6DNEMhIKmqRTrouQUVqYdj4yxEefVYosAqzuzohT1//zLDpBWAw7
wcBA2FRD1V+l7fZKZPq3W1vrJ+zqda46mruy91nzd8g3cYVCTifQphtJSxTUx51Q
925VW6kzP91vcxW2nlJJwyN7Y0LpTSR2O/+8qOY0cCl1lrTyEaKVG31hRunzOj0L
skZDC0LHzHGjBZTInCbRJ2MvBEMwuQYY6ur1Hxhrp0tEH+FYdrhe6HVcIKIlAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUsbwfBvx8HYupHBlaFhn2+Mv2vYkwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1NzY4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqsLjANBgkqhkiG9w0BAQsFAAOCAQEAnEqE
YCjLOtVMfoEUi0kjrHwSirX7tLFW6w48Nz04Axsv97FB57MOltQKD0SPLt0NYE6z
m3o7bCKttIX43Ok25Xx7tcEtv8dAzv1ptTKVHpep5xN1WKpzDbefdU4AOt5Vp5xc
viAvw/F+Bm6cBV8qy3DZbi3k7eYUfEXapNou8sLkBEaW8IBndJrNp/BBrkhkcNCO
dYjVBysbCCuauPkSBUhfTroygvQ7Nk25ZU1NG/h0ZyE7BBSzHrkck+NXjYZp0qXs
ASRkERwBLGBcQtG5RcwBHnNp+43NYEsz4meRXNwBUQV5VK3qm++AL4QL02x8PO4k
w0PIINPpZwBdaHuFPQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:33 2026 by rpki-client