Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145852.roa
File: AS145852.roa (raw, json)
Hash identifier: mafms1Nf9m3TNpg/C+d6AjN+UGglT1XGChEhmXOVxd0=
Subject key identifier: 70:52:AF:65:CA:15:88:2A:B2:B4:4B:5D:5E:A1:00:A6:D2:25:00:6E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7B57B4B312C5BDFB295D88D930404379D08A0D2B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145852.roa
Signing time: Tue 26 May 2026 03:16:42 +0000
ROA not before: Tue 26 May 2026 03:11:42 +0000
ROA not after: Tue 25 May 2027 03:16:42 +0000
asID: 145852
IP address blocks: 240a:ac82::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:57:b4:b3:12:c5:bd:fb:29:5d:88:d9:30:40:43:79:d0:8a:0d:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:11:42 2026 GMT
Not After : May 25 03:16:42 2027 GMT
Subject: CN=7052AF65CA15882AB2B44B5D5EA100A6D225006E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:32:e2:47:10:e5:da:d0:79:b8:4a:01:67:17:
05:e7:dd:78:0a:19:93:72:fa:0f:75:0e:be:1e:49:
a1:17:05:ba:82:74:44:96:41:f9:b2:8b:d8:27:bf:
b8:b0:d7:2c:0c:19:1c:87:22:ee:ac:55:2e:b7:96:
8d:61:41:ea:2b:80:1f:33:18:50:aa:f2:2f:8c:5f:
01:62:ce:6a:00:9b:85:ff:d6:ed:68:50:fe:d5:53:
d7:61:89:98:d6:95:5d:91:d9:7b:e9:7e:9b:61:19:
8d:0d:7a:1e:39:66:64:1b:57:d1:c8:4a:73:5c:4c:
3f:eb:38:c4:2f:82:ba:4c:76:30:52:4d:a5:29:24:
8f:89:72:db:20:e5:0a:10:6c:8e:a6:b9:4f:7d:c7:
58:d5:d8:7f:e5:63:a7:05:33:f1:18:31:10:12:08:
b6:9e:1f:1d:2c:7d:9f:ff:7e:e6:ff:5d:5f:c4:f4:
5b:fb:2b:59:d1:ce:34:20:64:84:f1:0d:54:c9:9f:
84:4b:8c:ce:bb:96:79:8e:a4:b4:d0:41:c7:f8:d0:
7c:63:73:e9:0a:e8:2c:20:d6:57:8d:52:7c:70:0c:
f1:39:08:80:2e:23:5b:3e:61:6c:8e:76:0d:94:b1:
91:24:8d:81:93:fb:0c:ed:e2:21:6e:01:9e:d5:3f:
d0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:52:AF:65:CA:15:88:2A:B2:B4:4B:5D:5E:A1:00:A6:D2:25:00:6E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145852.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ac82::/32
Signature Algorithm: sha256WithRSAEncryption
13:6f:7b:2b:7e:98:3b:67:90:33:82:fe:8a:04:ec:83:92:48:
10:76:b2:76:74:b2:f8:e3:92:5c:a7:43:b0:d3:a4:ff:db:8e:
3f:a8:0a:1d:a6:56:b8:1b:de:03:f2:88:6a:c9:f4:c6:84:07:
a6:6d:f6:64:94:ef:8b:ac:c7:8b:16:64:66:a8:f0:7f:a0:82:
32:6e:e7:29:70:e3:89:b7:c0:7c:03:c9:81:e0:3e:c3:c7:4b:
92:fb:03:ef:2c:1b:41:9f:01:80:56:9e:5d:7f:b2:5f:db:e3:
c0:27:e1:4a:83:9c:5b:22:71:88:bd:3a:78:16:cb:34:ce:58:
84:74:d0:e8:3f:4d:26:dd:b3:bf:be:78:e4:87:61:bd:2e:5a:
cf:05:cc:44:ce:ff:b4:82:57:fa:ea:8f:21:29:7e:65:50:35:
b2:f4:13:d6:ba:fe:cf:7c:56:f4:6e:f2:42:a4:f8:d4:07:5e:
2b:78:4b:5d:a7:c4:c2:f2:a3:20:2a:ac:9b:f7:30:c9:ed:0d:
c6:41:e6:4e:e8:9b:8a:5b:be:fb:e3:1d:e3:05:2f:a0:71:a9:
01:4f:bd:bd:e9:12:5e:83:1d:88:db:e9:8e:83:d6:09:28:f3:
3c:45:73:d4:92:d9:dc:a6:18:e4:65:d9:48:c0:16:d7:ed:42:
a5:5f:1f:68
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUe1e0sxLFvfspXYjZMEBDedCKDSswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMzExNDJaFw0yNzA1MjUwMzE2NDJaMDMxMTAvBgNV
BAMTKDcwNTJBRjY1Q0ExNTg4MkFCMkI0NEI1RDVFQTEwMEE2RDIyNTAwNkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDMuJHEOXa0Hm4SgFnFwXn3XgK
GZNy+g91Dr4eSaEXBbqCdESWQfmyi9gnv7iw1ywMGRyHIu6sVS63lo1hQeorgB8z
GFCq8i+MXwFizmoAm4X/1u1oUP7VU9dhiZjWlV2R2XvpfpthGY0Neh45ZmQbV9HI
SnNcTD/rOMQvgrpMdjBSTaUpJI+Jctsg5QoQbI6muU99x1jV2H/lY6cFM/EYMRAS
CLaeHx0sfZ//fub/XV/E9Fv7K1nRzjQgZITxDVTJn4RLjM67lnmOpLTQQcf40Hxj
c+kK6Cwg1leNUnxwDPE5CIAuI1s+YWyOdg2UsZEkjYGT+wzt4iFuAZ7VP9DHAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUcFKvZcoViCqytEtdXqEAptIlAG4wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1ODUyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqsgjANBgkqhkiG9w0BAQsFAAOCAQEAE297
K36YO2eQM4L+igTsg5JIEHaydnSy+OOSXKdDsNOk/9uOP6gKHaZWuBveA/KIasn0
xoQHpm32ZJTvi6zHixZkZqjwf6CCMm7nKXDjibfAfAPJgeA+w8dLkvsD7ywbQZ8B
gFaeXX+yX9vjwCfhSoOcWyJxiL06eBbLNM5YhHTQ6D9NJt2zv7545IdhvS5azwXM
RM7/tIJX+uqPISl+ZVA1svQT1rr+z3xW9G7yQqT41AdeK3hLXafEwvKjICqsm/cw
ye0NxkHmTuibilu+++Md4wUvoHGpAU+9vekSXoMdiNvpjoPWCSjzPEVz1JLZ3KYY
5GXZSMAW1+1CpV8faA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:23 2026 by rpki-client