Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145845.roa
File: AS145845.roa (raw, json)
Hash identifier: Bl9t9WBbHMbsxh53jYAWgP62QxS04NdrbRB5atvwVC8=
Subject key identifier: 8D:25:ED:F0:19:14:92:A5:0B:67:3A:31:78:DD:44:F5:B1:38:87:4A
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0507AD89B70DC29E3D6BD6D49880BFFE21AF38B2
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145845.roa
Signing time: Fri 22 May 2026 06:58:32 +0000
ROA not before: Fri 22 May 2026 06:53:32 +0000
ROA not after: Fri 21 May 2027 06:58:32 +0000
asID: 145845
IP address blocks: 240a:ac7b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:07:ad:89:b7:0d:c2:9e:3d:6b:d6:d4:98:80:bf:fe:21:af:38:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:32 2026 GMT
Not After : May 21 06:58:32 2027 GMT
Subject: CN=8D25EDF0191492A50B673A3178DD44F5B138874A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:11:78:96:13:8d:28:30:4f:f8:51:b1:8d:76:
84:e0:84:ba:3f:f0:9d:bb:62:7c:9a:af:c4:30:64:
a0:b5:2e:07:2c:5f:0a:75:4e:08:f4:af:9a:17:fc:
a2:c3:dc:5e:49:da:7e:00:3d:68:ba:9a:72:a1:40:
dd:2b:a7:1d:dd:72:28:f0:67:ea:83:ce:1a:0f:4f:
b2:1c:fe:6a:f4:09:4a:e4:39:34:14:e6:16:ed:a7:
78:87:e1:dd:98:c9:a9:40:04:e8:ca:3e:ab:11:8e:
89:2c:86:a9:b8:d6:c8:25:0b:01:c8:e1:92:27:9a:
f4:ea:70:9f:70:32:dc:e9:07:0a:52:8e:f8:50:83:
ba:24:8f:49:92:49:94:b4:ca:11:a0:d0:9b:9e:c2:
e1:a7:1c:c9:0e:30:3a:77:c9:02:6e:21:5f:91:6d:
2a:9b:98:87:ad:b5:61:e3:4e:38:1a:92:d9:bb:5b:
ab:fe:10:53:d1:8d:3f:66:09:69:84:90:2b:d3:66:
1d:bd:d0:6d:fa:6d:ed:4e:5e:1c:57:86:ab:ba:6b:
c0:8b:7c:44:e3:ff:ae:75:64:e6:a3:e1:cb:6b:05:
fc:3c:a8:b2:9c:99:2d:b6:a7:02:d8:8a:f0:bb:be:
69:35:b6:90:5f:89:7c:8c:8f:8f:ee:25:06:19:08:
a5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:25:ED:F0:19:14:92:A5:0B:67:3A:31:78:DD:44:F5:B1:38:87:4A
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145845.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ac7b::/32
Signature Algorithm: sha256WithRSAEncryption
2f:bd:b9:4a:aa:ea:77:9a:1b:e7:1b:9c:48:07:f7:69:91:57:
21:cc:ff:b0:5d:50:a1:c9:58:46:77:9b:59:34:eb:54:e0:61:
ca:3d:5e:7c:bc:c1:ca:a0:05:93:20:5f:0d:d9:af:be:69:48:
29:49:9d:98:12:4a:c0:0a:07:c8:b8:42:33:55:70:7e:ac:e6:
fe:99:b9:d5:a5:c4:2a:c4:35:1a:d8:6e:7a:46:e5:8f:f0:7d:
e7:9a:fd:20:ec:58:94:62:f2:48:6b:11:c6:99:85:fa:ce:56:
8f:68:c1:bc:e2:4d:ec:d7:29:f9:53:91:e1:67:a6:cb:04:af:
55:1a:76:d9:a3:98:bb:99:99:3d:15:c3:a1:e1:30:0f:26:b9:
50:40:fb:f5:03:cf:8d:3e:0b:a3:e5:ff:2e:00:f7:ba:1e:a7:
84:45:4b:35:56:76:8d:3f:9d:1c:01:6d:fe:ea:e9:73:2f:6c:
20:99:fd:bd:17:3c:f9:f7:40:74:77:39:8b:97:e2:6a:75:ac:
79:5e:d5:f9:ad:20:af:8f:e2:e0:9b:a1:53:7a:c3:b8:20:b8:
68:da:6c:1d:46:da:e0:94:1b:07:3a:9b:75:28:17:66:d1:18:
88:51:54:a3:b3:71:e7:6a:42:47:0c:04:47:85:5b:79:c9:17:
66:8e:05:0a
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUBQetibcNwp49a9bUmIC//iGvOLIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjUzMzJaFw0yNzA1MjEwNjU4MzJaMDMxMTAvBgNV
BAMTKDhEMjVFREYwMTkxNDkyQTUwQjY3M0EzMTc4REQ0NEY1QjEzODg3NEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVEXiWE40oME/4UbGNdoTghLo/
8J27Ynyar8QwZKC1LgcsXwp1Tgj0r5oX/KLD3F5J2n4APWi6mnKhQN0rpx3dcijw
Z+qDzhoPT7Ic/mr0CUrkOTQU5hbtp3iH4d2YyalABOjKPqsRjokshqm41sglCwHI
4ZInmvTqcJ9wMtzpBwpSjvhQg7okj0mSSZS0yhGg0JuewuGnHMkOMDp3yQJuIV+R
bSqbmIettWHjTjgaktm7W6v+EFPRjT9mCWmEkCvTZh290G36be1OXhxXhqu6a8CL
fETj/651ZOaj4ctrBfw8qLKcmS22pwLYivC7vmk1tpBfiXyMj4/uJQYZCKUvAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUjSXt8BkUkqULZzoxeN1E9bE4h0owHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1ODQ1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqsezANBgkqhkiG9w0BAQsFAAOCAQEAL725
Sqrqd5ob5xucSAf3aZFXIcz/sF1QoclYRnebWTTrVOBhyj1efLzByqAFkyBfDdmv
vmlIKUmdmBJKwAoHyLhCM1Vwfqzm/pm51aXEKsQ1Gthuekblj/B955r9IOxYlGLy
SGsRxpmF+s5Wj2jBvOJN7Ncp+VOR4WemywSvVRp22aOYu5mZPRXDoeEwDya5UED7
9QPPjT4Lo+X/LgD3uh6nhEVLNVZ2jT+dHAFt/urpcy9sIJn9vRc8+fdAdHc5i5fi
anWseV7V+a0gr4/i4JuhU3rDuCC4aNpsHUba4JQbBzqbdSgXZtEYiFFUo7Nx52pC
RwwER4VbeckXZo4FCg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:31 2026 by rpki-client