Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145930.roa
File: AS145930.roa (raw, json)
Hash identifier: hVMcShmQZgj8f7TQCBDj4f/RNYUp0xsKJ7MUjR/yQqg=
Subject key identifier: 72:8B:E3:0B:10:6C:88:E8:F2:84:59:08:06:D6:33:28:45:A7:F3:E1
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 76D0FDDCB2CA0BBD13749A7EB445BA5DB62F510A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145930.roa
Signing time: Fri 22 May 2026 07:32:29 +0000
ROA not before: Fri 22 May 2026 07:27:29 +0000
ROA not after: Fri 21 May 2027 07:32:29 +0000
asID: 145930
IP address blocks: 240a:acd0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:d0:fd:dc:b2:ca:0b:bd:13:74:9a:7e:b4:45:ba:5d:b6:2f:51:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:27:29 2026 GMT
Not After : May 21 07:32:29 2027 GMT
Subject: CN=728BE30B106C88E8F284590806D6332845A7F3E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4b:42:8e:a4:95:59:ab:bb:6e:ef:d6:60:0f:
d4:4b:88:09:a8:53:4e:5b:2a:2d:9f:f2:e0:d3:6e:
17:4c:20:54:04:21:bd:e4:44:95:fb:72:fb:77:86:
9b:9e:4e:89:9c:fc:ab:c3:36:a4:db:38:b6:cb:b4:
68:65:44:05:96:e6:1c:e7:e8:32:ab:3b:76:f1:75:
91:53:63:4d:7b:1d:61:92:6f:f4:fa:8d:61:d2:03:
2d:6b:05:96:72:70:28:0c:ae:92:cb:20:e3:f8:d4:
89:2f:9b:98:fb:23:df:bb:49:15:ca:18:af:fb:f3:
a8:82:59:33:c4:aa:4c:6e:56:d5:1f:3b:b9:60:80:
0a:56:84:81:d9:c3:7a:2d:e8:a1:49:33:23:db:bf:
60:14:89:44:ec:5f:f4:a2:4f:b8:ce:32:bf:05:2e:
75:84:ae:c5:fd:85:bf:cb:9e:e4:47:cf:c6:bb:55:
74:15:85:bd:0c:01:1a:5f:fd:7a:03:8f:c5:08:0c:
c5:65:2e:f6:6b:6e:1a:9a:63:05:36:5b:56:f9:c2:
03:46:52:3f:bf:72:bc:ba:b8:5c:3f:b8:e4:2f:05:
31:39:91:30:1c:9f:fe:a0:89:23:6d:eb:54:20:d8:
c8:0d:66:84:7c:16:d5:89:76:5e:46:d8:31:e6:b0:
8d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:8B:E3:0B:10:6C:88:E8:F2:84:59:08:06:D6:33:28:45:A7:F3:E1
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:acd0::/32
Signature Algorithm: sha256WithRSAEncryption
53:bf:df:46:38:6b:b1:58:1f:31:2b:b6:37:ad:06:9b:87:55:
12:3c:ec:1b:dc:7e:75:50:31:30:7f:41:85:12:a8:e5:d0:33:
70:31:34:d7:95:0f:70:9c:1f:ee:0a:27:25:c6:4c:39:cd:ff:
05:fa:1a:21:04:37:ed:90:ae:26:de:c2:e8:5d:e8:31:33:55:
99:18:6f:46:0a:72:53:5f:15:e5:84:0c:b5:d7:34:76:74:ca:
b1:d9:72:74:b5:1c:a2:36:c0:1e:0a:26:51:1f:ba:32:d5:c6:
fc:b9:1e:e6:1d:b5:ae:58:e4:08:ac:14:ae:5e:97:d8:76:2a:
2a:c1:8b:aa:06:e7:9f:66:e0:67:ff:98:96:a9:db:5b:f4:d0:
36:a9:1f:dd:96:af:59:b7:4c:a9:d0:68:29:31:6e:ce:f6:9d:
fe:6e:dd:84:29:0b:78:fa:35:5b:36:87:04:95:c9:39:c6:7d:
d9:f5:11:81:63:f6:e6:34:ad:65:d1:31:ee:76:20:a0:6c:34:
7a:34:bd:62:8c:b4:9c:7a:b2:e2:7f:38:82:3f:f4:cf:b9:6a:
7c:92:3e:47:af:2a:86:65:82:e7:1c:e6:42:9a:62:ea:38:f9:
28:3a:aa:76:3c:81:e1:17:16:04:6e:ae:4a:a6:65:8e:a8:1a:
ee:53:23:14
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUdtD93LLKC70TdJp+tEW6XbYvUQowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzI3MjlaFw0yNzA1MjEwNzMyMjlaMDMxMTAvBgNV
BAMTKDcyOEJFMzBCMTA2Qzg4RThGMjg0NTkwODA2RDYzMzI4NDVBN0YzRTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8S0KOpJVZq7tu79ZgD9RLiAmo
U05bKi2f8uDTbhdMIFQEIb3kRJX7cvt3hpueTomc/KvDNqTbOLbLtGhlRAWW5hzn
6DKrO3bxdZFTY017HWGSb/T6jWHSAy1rBZZycCgMrpLLIOP41Ikvm5j7I9+7SRXK
GK/786iCWTPEqkxuVtUfO7lggApWhIHZw3ot6KFJMyPbv2AUiUTsX/SiT7jOMr8F
LnWErsX9hb/LnuRHz8a7VXQVhb0MARpf/XoDj8UIDMVlLvZrbhqaYwU2W1b5wgNG
Uj+/cry6uFw/uOQvBTE5kTAcn/6giSNt61Qg2MgNZoR8FtWJdl5G2DHmsI07AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUcovjCxBsiOjyhFkIBtYzKEWn8+EwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1OTMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqs0DANBgkqhkiG9w0BAQsFAAOCAQEAU7/f
RjhrsVgfMSu2N60Gm4dVEjzsG9x+dVAxMH9BhRKo5dAzcDE015UPcJwf7gonJcZM
Oc3/BfoaIQQ37ZCuJt7C6F3oMTNVmRhvRgpyU18V5YQMtdc0dnTKsdlydLUcojbA
HgomUR+6MtXG/Lke5h21rljkCKwUrl6X2HYqKsGLqgbnn2bgZ/+YlqnbW/TQNqkf
3ZavWbdMqdBoKTFuzvad/m7dhCkLePo1WzaHBJXJOcZ92fURgWP25jStZdEx7nYg
oGw0ejS9Yoy0nHqy4n84gj/0z7lqfJI+R68qhmWC5xzmQppi6jj5KDqqdjyB4RcW
BG6uSqZljqga7lMjFA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:24 2026 by rpki-client