Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145958.roa
File: AS145958.roa (raw, json)
Hash identifier: 8bveLGMH4FAEfeeC+57/xt1PCoiweB9yVWX1kle5CXs=
Subject key identifier: 6F:B5:FA:76:B4:4A:DC:B1:75:D6:51:40:78:EB:5D:3D:23:41:09:96
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4071CB09E05E6751E89DD2C52BEB5D4E0E1B7332
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145958.roa
Signing time: Tue 26 May 2026 01:13:27 +0000
ROA not before: Tue 26 May 2026 01:08:27 +0000
ROA not after: Tue 25 May 2027 01:13:27 +0000
asID: 145958
IP address blocks: 240a:acec::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:71:cb:09:e0:5e:67:51:e8:9d:d2:c5:2b:eb:5d:4e:0e:1b:73:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:08:27 2026 GMT
Not After : May 25 01:13:27 2027 GMT
Subject: CN=6FB5FA76B44ADCB175D6514078EB5D3D23410996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b9:f7:8b:4f:b7:58:20:e0:6b:73:34:9f:c4:
bd:6b:02:9d:15:89:72:aa:29:38:c8:10:c6:9f:1c:
29:ba:af:9f:71:32:2a:50:cc:6d:ef:a7:99:ac:c3:
14:88:0d:de:92:72:7f:62:99:2a:3c:67:2b:ee:aa:
5c:67:20:7c:ee:40:e4:f1:dc:46:09:3f:6b:bf:4b:
3e:67:73:33:91:23:4c:de:2e:44:5f:9e:bd:9a:71:
a3:b9:8e:d6:e5:16:45:18:f2:17:c7:e7:e2:dd:87:
56:ce:4c:1f:84:24:7e:e7:6a:fb:77:f0:c5:82:37:
ab:28:75:03:73:be:4d:96:4c:64:21:dd:6b:2e:77:
86:3a:9d:75:f1:8a:b6:94:c1:8a:1d:f5:fe:53:7e:
26:34:c1:57:3f:b5:bb:35:ce:ce:af:b2:41:8c:a1:
72:5e:32:13:c2:51:8b:c1:d7:f7:f3:b4:b1:bc:c4:
f0:72:77:45:ac:4e:a8:8b:b3:94:5e:3c:5d:ab:85:
7f:87:18:27:09:3e:f8:7b:d2:89:a5:dc:5e:c0:a8:
dd:2e:49:7f:62:70:41:7b:9c:c4:02:da:fd:c6:3d:
e0:90:ed:83:e6:20:d5:9d:d3:03:e8:af:bb:3c:12:
67:93:0f:f8:ed:4a:aa:b2:2e:79:1d:44:7c:23:75:
0b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:B5:FA:76:B4:4A:DC:B1:75:D6:51:40:78:EB:5D:3D:23:41:09:96
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145958.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:acec::/32
Signature Algorithm: sha256WithRSAEncryption
4c:45:5a:43:85:94:1d:ea:21:8d:93:11:70:c7:bb:3f:18:6a:
32:b4:c4:74:90:02:db:68:92:eb:65:ca:52:ac:f9:fb:89:eb:
77:94:6f:b2:3f:f6:01:66:72:e1:c1:6d:39:b4:13:ad:a6:3f:
f4:db:30:f6:58:9c:fa:2a:84:92:db:4b:07:5c:2c:97:4f:e5:
d7:94:76:58:33:59:3e:b4:7e:62:e1:70:bf:d2:6b:9c:de:ca:
1c:be:e4:8c:c3:75:37:13:e6:d2:8d:02:ee:a1:f0:0a:6c:89:
16:b0:6b:4e:5e:9e:5c:e5:6c:98:f8:a8:11:5b:e6:7b:65:4e:
c8:52:c5:19:43:24:8d:00:ff:c6:d3:3d:85:c7:f4:c7:19:56:
c2:cf:32:66:1b:f5:55:e0:05:05:ff:60:d2:67:eb:bd:d0:9d:
1f:81:22:27:ca:ab:1b:17:20:0e:eb:43:11:9e:45:09:15:9d:
90:36:c1:b5:34:c1:ea:a9:41:0f:f7:07:8f:2a:53:d0:79:8a:
a0:17:c9:c0:c2:83:ad:9b:c3:c8:5b:71:55:84:77:bb:46:19:
ba:6d:a6:5f:45:37:fe:6c:74:cc:ec:6f:75:43:00:c7:b5:3f:
c4:c8:13:31:1e:4d:71:bf:4e:a7:47:ed:cc:4e:ba:70:d2:cf:
ad:3d:f6:c3
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUQHHLCeBeZ1HondLFK+tdTg4bczIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMTA4MjdaFw0yNzA1MjUwMTEzMjdaMDMxMTAvBgNV
BAMTKDZGQjVGQTc2QjQ0QURDQjE3NUQ2NTE0MDc4RUI1RDNEMjM0MTA5OTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiufeLT7dYIOBrczSfxL1rAp0V
iXKqKTjIEMafHCm6r59xMipQzG3vp5mswxSIDd6Scn9imSo8ZyvuqlxnIHzuQOTx
3EYJP2u/Sz5nczORI0zeLkRfnr2acaO5jtblFkUY8hfH5+Ldh1bOTB+EJH7navt3
8MWCN6sodQNzvk2WTGQh3Wsud4Y6nXXxiraUwYod9f5TfiY0wVc/tbs1zs6vskGM
oXJeMhPCUYvB1/fztLG8xPByd0WsTqiLs5RePF2rhX+HGCcJPvh70oml3F7AqN0u
SX9icEF7nMQC2v3GPeCQ7YPmINWd0wPor7s8EmeTD/jtSqqyLnkdRHwjdQvzAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUb7X6drRK3LF11lFAeOtdPSNBCZYwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1OTU4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqs7DANBgkqhkiG9w0BAQsFAAOCAQEATEVa
Q4WUHeohjZMRcMe7PxhqMrTEdJAC22iS62XKUqz5+4nrd5Rvsj/2AWZy4cFtObQT
raY/9Nsw9lic+iqEkttLB1wsl0/l15R2WDNZPrR+YuFwv9JrnN7KHL7kjMN1NxPm
0o0C7qHwCmyJFrBrTl6eXOVsmPioEVvme2VOyFLFGUMkjQD/xtM9hcf0xxlWws8y
Zhv1VeAFBf9g0mfrvdCdH4EiJ8qrGxcgDutDEZ5FCRWdkDbBtTTB6qlBD/cHjypT
0HmKoBfJwMKDrZvDyFtxVYR3u0YZum2mX0U3/mx0zOxvdUMAx7U/xMgTMR5Ncb9O
p0ftzE66cNLPrT32ww==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:32 2026 by rpki-client