Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145906.roa
File: AS145906.roa (raw, json)
Hash identifier: rm6HkPB/bdWUGqzQXB93WSIPgytw7QakSxyIfxZBpKw=
Subject key identifier: DC:76:61:F6:FA:EC:46:B8:7C:98:23:B1:53:0C:DC:F4:FF:A2:06:03
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 16E77D8E1BFCAC7B246D51874F5D637F81A3D1E5
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145906.roa
Signing time: Tue 26 May 2026 02:35:14 +0000
ROA not before: Tue 26 May 2026 02:30:14 +0000
ROA not after: Tue 25 May 2027 02:35:14 +0000
asID: 145906
IP address blocks: 240a:acb8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:e7:7d:8e:1b:fc:ac:7b:24:6d:51:87:4f:5d:63:7f:81:a3:d1:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:30:14 2026 GMT
Not After : May 25 02:35:14 2027 GMT
Subject: CN=DC7661F6FAEC46B87C9823B1530CDCF4FFA20603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f3:db:de:65:56:97:6b:3e:92:15:8c:4c:c3:
7f:20:d3:66:43:9e:90:a7:0b:b1:68:1d:78:b8:1c:
20:1b:4a:98:03:24:7c:3c:67:0a:0a:a4:5c:98:c2:
cb:15:76:b8:91:1b:38:c8:81:5b:cc:28:ea:4e:94:
2f:50:71:9c:74:23:dd:e9:95:d4:c5:f1:7e:8f:2e:
d3:99:67:90:d8:04:79:8a:5c:7f:34:ed:fe:fe:19:
cf:15:dc:4c:b7:aa:fe:8f:b3:81:b7:e4:d5:1d:1e:
6e:84:5a:74:97:c5:83:1c:5e:22:67:3c:10:ae:92:
6a:52:0c:93:a9:ab:a6:97:2f:36:44:cb:bc:3a:2b:
eb:0c:e8:99:6a:db:e6:3c:25:1c:d4:30:d1:70:ea:
6c:d2:3d:e9:59:23:e9:52:50:4d:14:fd:02:77:76:
b1:e7:f3:99:80:5c:eb:95:52:bd:94:79:ef:d7:fc:
0d:b9:58:dd:9f:cf:5b:5f:a3:89:2a:fd:50:a7:05:
a6:5f:fa:88:b9:53:0c:55:cc:37:46:e0:01:27:44:
df:3c:e2:4e:f8:ab:e0:c8:7a:21:1c:02:0a:91:0f:
c6:ba:bb:df:f6:36:e5:69:9f:73:29:be:08:06:f1:
a0:46:84:ce:5e:49:25:62:89:42:d1:03:62:37:8e:
4a:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:76:61:F6:FA:EC:46:B8:7C:98:23:B1:53:0C:DC:F4:FF:A2:06:03
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145906.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:acb8::/32
Signature Algorithm: sha256WithRSAEncryption
5a:87:9b:9e:13:58:0c:b2:fc:b0:e2:85:88:e0:b5:53:ee:6b:
12:5d:17:02:8b:33:1f:40:b3:8b:88:37:44:1c:5c:cf:5f:76:
0f:96:85:0a:74:34:7f:e6:fa:bd:bf:4f:bb:71:27:79:9e:43:
fe:9a:51:8f:69:d0:de:24:7e:b1:22:6e:fd:6f:8d:25:28:40:
a3:c5:fa:d9:97:7c:62:76:fc:e4:3a:5e:06:d0:a7:70:73:61:
9f:36:8c:62:72:c5:7e:d5:2e:f5:9c:af:5f:0f:40:2f:86:ff:
36:0e:d7:91:47:27:37:f5:c6:b7:04:cc:4d:3f:58:3a:c3:9c:
d1:7d:d3:03:c8:09:c6:e0:81:0b:d4:76:36:92:32:61:62:59:
b2:59:04:0d:a5:0f:43:a9:97:53:2a:58:fb:02:46:d0:99:b7:
cf:fb:67:ec:57:0e:99:5c:ee:ae:2a:b3:79:ab:b8:2d:38:42:
71:48:45:d9:96:a3:4a:77:49:9c:40:11:d7:ff:d8:d0:45:47:
28:b2:a0:0d:15:28:64:cc:4c:25:69:71:d6:ce:52:78:1a:75:
6f:dd:1f:b4:85:1e:62:9c:72:a7:17:24:6b:be:44:e3:da:d2:
73:45:7a:4b:81:19:d6:a6:95:aa:d7:38:b0:ea:f4:d6:15:f0:
c4:fb:26:fe
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUFud9jhv8rHskbVGHT11jf4Gj0eUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMjMwMTRaFw0yNzA1MjUwMjM1MTRaMDMxMTAvBgNV
BAMTKERDNzY2MUY2RkFFQzQ2Qjg3Qzk4MjNCMTUzMENEQ0Y0RkZBMjA2MDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC389veZVaXaz6SFYxMw38g02ZD
npCnC7FoHXi4HCAbSpgDJHw8ZwoKpFyYwssVdriRGzjIgVvMKOpOlC9QcZx0I93p
ldTF8X6PLtOZZ5DYBHmKXH807f7+Gc8V3Ey3qv6Ps4G35NUdHm6EWnSXxYMcXiJn
PBCukmpSDJOpq6aXLzZEy7w6K+sM6Jlq2+Y8JRzUMNFw6mzSPelZI+lSUE0U/QJ3
drHn85mAXOuVUr2Uee/X/A25WN2fz1tfo4kq/VCnBaZf+oi5UwxVzDdG4AEnRN88
4k74q+DIeiEcAgqRD8a6u9/2NuVpn3MpvggG8aBGhM5eSSViiULRA2I3jkrDAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU3HZh9vrsRrh8mCOxUwzc9P+iBgMwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1OTA2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqsuDANBgkqhkiG9w0BAQsFAAOCAQEAWoeb
nhNYDLL8sOKFiOC1U+5rEl0XAoszH0Czi4g3RBxcz192D5aFCnQ0f+b6vb9Pu3En
eZ5D/ppRj2nQ3iR+sSJu/W+NJShAo8X62Zd8Ynb85DpeBtCncHNhnzaMYnLFftUu
9ZyvXw9AL4b/Ng7XkUcnN/XGtwTMTT9YOsOc0X3TA8gJxuCBC9R2NpIyYWJZslkE
DaUPQ6mXUypY+wJG0Jm3z/tn7FcOmVzuriqzeau4LThCcUhF2ZajSndJnEAR1//Y
0EVHKLKgDRUoZMxMJWlx1s5SeBp1b90ftIUeYpxypxcka75E49rSc0V6S4EZ1qaV
qtc4sOr01hXwxPsm/g==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:54 2026 by rpki-client