Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145839.roa
File: AS145839.roa (raw, json)
Hash identifier: 0jybGMTBTIhGe+NRQPZfdo9WDzIa3wYbsy+evWuBCvU=
Subject key identifier: 53:7A:CA:45:24:31:89:5D:E8:FB:CA:72:BA:80:7A:D2:C1:0A:98:2B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 116D934CEB218A4E85910EA186D71E0E84C0779D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145839.roa
Signing time: Fri 22 May 2026 04:26:50 +0000
ROA not before: Fri 22 May 2026 04:21:50 +0000
ROA not after: Fri 21 May 2027 04:26:50 +0000
asID: 145839
IP address blocks: 240a:ac75::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:6d:93:4c:eb:21:8a:4e:85:91:0e:a1:86:d7:1e:0e:84:c0:77:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:21:50 2026 GMT
Not After : May 21 04:26:50 2027 GMT
Subject: CN=537ACA452431895DE8FBCA72BA807AD2C10A982B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3b:c2:1f:02:2c:d2:94:ff:25:07:c7:9a:c5:
af:b5:5f:6b:6c:b3:56:1b:2d:2e:e3:1e:a8:14:c7:
5e:3f:57:ad:8e:20:0a:62:81:f8:33:df:b8:94:b1:
87:d2:b4:a0:50:bb:2d:cb:2a:38:57:76:a8:c2:23:
38:d9:4c:d1:3d:e0:ba:50:cb:bc:00:76:46:eb:3e:
af:fc:77:a3:19:9d:84:7f:fd:5f:ac:08:94:2b:24:
86:6a:2e:e5:89:b3:54:7b:b3:d1:9f:f0:e3:6f:ea:
e0:0b:a8:95:0b:87:04:30:93:7a:5a:58:cf:c8:b3:
d8:27:c0:48:cf:cd:aa:f6:4b:76:af:58:40:8a:72:
41:fe:bb:96:8d:38:b0:6a:a4:5c:bc:95:33:e1:f1:
ec:0b:66:84:62:56:93:28:ba:e0:b6:1d:90:50:58:
ae:73:bb:89:cf:3e:dd:98:d5:d5:fb:41:ac:36:cf:
0c:f9:77:d1:f1:19:b8:ff:89:6d:48:2f:31:6b:33:
99:cb:d4:b1:15:99:cb:b7:6f:64:cc:21:13:94:83:
81:78:9e:37:39:cb:5d:36:2b:81:68:a0:4e:08:c1:
3d:a3:36:d7:87:08:d6:51:2b:f6:0f:46:32:9e:09:
da:85:89:7e:e8:7e:c9:d4:86:bc:e3:4f:70:1c:ed:
cb:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:7A:CA:45:24:31:89:5D:E8:FB:CA:72:BA:80:7A:D2:C1:0A:98:2B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ac75::/32
Signature Algorithm: sha256WithRSAEncryption
9c:b0:0b:b6:51:df:c6:b3:b1:9e:86:b1:49:31:03:aa:94:44:
72:38:d6:56:26:9b:de:42:87:95:ce:51:48:65:3c:93:46:88:
3c:17:11:ea:c9:9b:39:5b:89:13:a2:38:c7:16:e4:16:fc:79:
6c:89:f5:33:8d:34:f5:1b:39:27:d2:7b:a5:33:49:cb:1f:09:
9b:0f:9f:df:bf:33:44:8a:2e:f4:a1:ab:3f:36:99:6f:50:79:
0a:b1:7d:66:ef:a7:e6:27:26:5d:75:04:a5:d6:78:62:cb:5a:
e8:a2:a1:1c:4c:98:a2:70:b1:ed:e7:58:68:c9:9c:89:6e:ab:
5f:4b:72:a8:b2:33:55:c7:95:bb:26:7c:e4:d5:c1:e7:da:bb:
ed:aa:9b:8a:b7:58:e2:1d:b7:cc:c7:5a:30:dc:0c:34:21:f3:
21:e0:97:1e:21:76:54:2c:4e:41:49:ac:35:4a:f7:68:74:94:
0f:73:ef:26:ba:3d:6b:e7:fb:db:02:0c:63:c1:df:19:92:42:
c2:bc:14:cd:eb:06:71:2d:ce:26:ed:11:8d:ea:2a:7d:34:f6:
de:10:3c:68:11:40:bf:a6:d6:56:2a:f0:e4:4b:60:d2:7a:c6:
34:c5:a7:31:fa:1d:ad:d5:e0:2e:9e:a8:81:6b:1d:cd:d5:b5:
0c:e4:19:14
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUEW2TTOshik6FkQ6hhtceDoTAd50wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNDIxNTBaFw0yNzA1MjEwNDI2NTBaMDMxMTAvBgNV
BAMTKDUzN0FDQTQ1MjQzMTg5NURFOEZCQ0E3MkJBODA3QUQyQzEwQTk4MkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0O8IfAizSlP8lB8eaxa+1X2ts
s1YbLS7jHqgUx14/V62OIApigfgz37iUsYfStKBQuy3LKjhXdqjCIzjZTNE94LpQ
y7wAdkbrPq/8d6MZnYR//V+sCJQrJIZqLuWJs1R7s9Gf8ONv6uALqJULhwQwk3pa
WM/Is9gnwEjPzar2S3avWECKckH+u5aNOLBqpFy8lTPh8ewLZoRiVpMouuC2HZBQ
WK5zu4nPPt2Y1dX7Qaw2zwz5d9HxGbj/iW1ILzFrM5nL1LEVmcu3b2TMIROUg4F4
njc5y102K4FooE4IwT2jNteHCNZRK/YPRjKeCdqFiX7ofsnUhrzjT3Ac7cvXAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUU3rKRSQxiV3o+8pyuoB60sEKmCswHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1ODM5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqsdTANBgkqhkiG9w0BAQsFAAOCAQEAnLAL
tlHfxrOxnoaxSTEDqpREcjjWViab3kKHlc5RSGU8k0aIPBcR6smbOVuJE6I4xxbk
Fvx5bIn1M4009Rs5J9J7pTNJyx8Jmw+f378zRIou9KGrPzaZb1B5CrF9Zu+n5icm
XXUEpdZ4Ysta6KKhHEyYonCx7edYaMmciW6rX0tyqLIzVceVuyZ85NXB59q77aqb
irdY4h23zMdaMNwMNCHzIeCXHiF2VCxOQUmsNUr3aHSUD3PvJro9a+f72wIMY8Hf
GZJCwrwUzesGcS3OJu0RjeoqfTT23hA8aBFAv6bWVirw5Etg0nrGNMWnMfodrdXg
Lp6ogWsdzdW1DOQZFA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:30:13 2026 by rpki-client