Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145844.roa
File: AS145844.roa (raw, json)
Hash identifier: r++O6n6/7vRp/o3calmwvkZb2/QmP0rC65LmcWQWDSk=
Subject key identifier: 25:30:2D:A9:1C:5A:FC:F8:47:00:E1:24:10:C8:12:84:13:88:62:44
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5DE7BE1E6B252745D217DBD8C8F17634EC3C80B3
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145844.roa
Signing time: Mon 25 May 2026 02:22:29 +0000
ROA not before: Mon 25 May 2026 02:17:29 +0000
ROA not after: Mon 24 May 2027 02:22:29 +0000
asID: 145844
IP address blocks: 240a:ac7a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:e7:be:1e:6b:25:27:45:d2:17:db:d8:c8:f1:76:34:ec:3c:80:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:29 2026 GMT
Not After : May 24 02:22:29 2027 GMT
Subject: CN=25302DA91C5AFCF84700E12410C8128413886244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:4d:fe:5e:1d:80:b3:ab:e2:c3:1f:12:a8:c7:
98:db:17:3c:5f:42:b7:e8:02:89:e2:12:fe:75:f5:
8c:90:e1:d8:3e:f9:9c:65:ff:eb:7c:e3:8c:7b:55:
e1:cc:48:7f:2b:b2:e6:45:23:5c:6f:23:0d:e7:54:
3e:4e:8d:07:1e:e0:f3:63:e5:a1:8f:fb:3e:0a:dd:
69:01:90:7e:eb:41:84:fe:ef:dc:7b:36:2b:02:55:
d2:0d:81:9b:3e:9a:9f:24:a6:a3:2f:14:57:3e:44:
4e:7d:32:73:a9:d6:08:68:b6:bb:7a:f1:d8:0a:30:
95:9a:1d:6f:57:24:87:13:4d:0a:ce:f8:18:1a:21:
77:cc:19:95:2e:d4:87:87:c8:29:25:6f:1c:9f:a8:
24:5d:94:0a:d3:d0:66:f4:15:a2:a6:fa:46:e4:e1:
a9:7f:19:80:a9:30:e5:4b:1b:ff:e3:a4:4b:70:1a:
85:7e:59:78:4b:27:7d:01:25:53:be:54:66:94:ed:
1c:0e:02:a5:46:95:a6:c1:5d:28:e4:35:6a:31:b4:
a1:dd:b6:ad:84:e6:cf:fc:90:9a:e4:14:5c:40:8e:
8c:2c:5c:03:e7:b1:04:30:0f:4b:5c:ba:9b:75:1c:
0b:89:f0:7c:af:63:0a:4f:92:f1:08:e7:78:4d:2f:
59:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:30:2D:A9:1C:5A:FC:F8:47:00:E1:24:10:C8:12:84:13:88:62:44
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145844.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ac7a::/32
Signature Algorithm: sha256WithRSAEncryption
95:82:f8:47:87:69:35:9b:74:4a:97:1c:9b:a3:85:ba:21:20:
8e:c4:d9:c5:7f:82:a2:ea:1e:9e:97:d7:c0:41:d8:61:d7:51:
a1:56:43:a1:7f:69:03:21:9d:a1:bd:1c:99:4e:a2:5c:10:c4:
80:20:ec:b1:55:08:2a:0c:29:4b:58:c5:12:b8:65:ad:fa:b9:
63:b3:bc:59:80:a3:49:7f:7a:10:23:7c:fd:ac:06:96:79:d4:
90:dd:0c:5f:ab:90:92:b1:62:39:22:c6:6c:e0:f4:5f:de:ca:
46:b4:26:52:b4:d0:9f:2d:6b:05:01:f7:b2:f7:56:f2:93:e9:
2d:e9:14:d5:8c:22:17:f6:e2:7b:6b:69:e8:76:ce:fa:9f:59:
c9:79:1e:53:e9:f1:e5:a2:01:e4:28:23:6e:48:00:81:5e:cb:
40:8b:2c:de:d4:90:6d:97:86:b0:81:28:81:97:75:37:a7:e6:
7a:17:94:a9:98:b0:8d:9a:22:c4:f0:f8:f2:cf:6e:f0:17:3b:
41:65:f6:f5:78:5c:d7:ec:ed:e5:a2:67:13:e2:a4:8b:80:0f:
32:b9:29:69:88:fa:99:e6:bc:be:91:ac:72:3e:41:d2:90:c2:
13:88:1b:0c:93:ad:94:7f:39:7b:07:c3:9d:84:2e:52:18:7f:
4f:b4:52:c2
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUXee+HmslJ0XSF9vYyPF2NOw8gLMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMjE3MjlaFw0yNzA1MjQwMjIyMjlaMDMxMTAvBgNV
BAMTKDI1MzAyREE5MUM1QUZDRjg0NzAwRTEyNDEwQzgxMjg0MTM4ODYyNDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWTf5eHYCzq+LDHxKox5jbFzxf
QrfoAoniEv519YyQ4dg++Zxl/+t844x7VeHMSH8rsuZFI1xvIw3nVD5OjQce4PNj
5aGP+z4K3WkBkH7rQYT+79x7NisCVdINgZs+mp8kpqMvFFc+RE59MnOp1ghotrt6
8dgKMJWaHW9XJIcTTQrO+BgaIXfMGZUu1IeHyCklbxyfqCRdlArT0Gb0FaKm+kbk
4al/GYCpMOVLG//jpEtwGoV+WXhLJ30BJVO+VGaU7RwOAqVGlabBXSjkNWoxtKHd
tq2E5s/8kJrkFFxAjowsXAPnsQQwD0tcupt1HAuJ8HyvYwpPkvEI53hNL1nhAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUJTAtqRxa/PhHAOEkEMgShBOIYkQwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1ODQ0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqsejANBgkqhkiG9w0BAQsFAAOCAQEAlYL4
R4dpNZt0Spccm6OFuiEgjsTZxX+CouoenpfXwEHYYddRoVZDoX9pAyGdob0cmU6i
XBDEgCDssVUIKgwpS1jFErhlrfq5Y7O8WYCjSX96ECN8/awGlnnUkN0MX6uQkrFi
OSLGbOD0X97KRrQmUrTQny1rBQH3svdW8pPpLekU1YwiF/bie2tp6HbO+p9ZyXke
U+nx5aIB5CgjbkgAgV7LQIss3tSQbZeGsIEogZd1N6fmeheUqZiwjZoixPD48s9u
8Bc7QWX29Xhc1+zt5aJnE+Kki4APMrkpaYj6mea8vpGscj5B0pDCE4gbDJOtlH85
ewfDnYQuUhh/T7RSwg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:11 2026 by rpki-client