Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145027.roa
File: AS145027.roa (raw, json)
Hash identifier: BASfYCF8JibW6c3EmYOTu6p7qEbAHmFWk1e4ZI1BCuI=
Subject key identifier: 8C:4E:ED:90:C0:D0:6E:A6:06:83:C1:3D:C3:21:2C:3B:F6:1F:D8:0A
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 500306222EF8A76E017A258B39FBF06E0FB23795
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145027.roa
Signing time: Fri 22 May 2026 06:58:43 +0000
ROA not before: Fri 22 May 2026 06:53:43 +0000
ROA not after: Fri 21 May 2027 06:58:43 +0000
asID: 145027
IP address blocks: 240a:a949::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:03:06:22:2e:f8:a7:6e:01:7a:25:8b:39:fb:f0:6e:0f:b2:37:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:43 2026 GMT
Not After : May 21 06:58:43 2027 GMT
Subject: CN=8C4EED90C0D06EA60683C13DC3212C3BF61FD80A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:17:9c:13:10:2f:27:0c:52:8a:47:20:09:8a:
32:e9:b0:13:66:3e:4a:61:21:73:97:37:4c:38:c4:
a5:83:7b:51:56:1e:ed:69:f6:85:50:9e:83:18:96:
fe:4c:b4:70:a4:c9:6e:e5:24:42:1d:3c:c2:41:48:
c7:26:6b:34:09:a3:88:f6:01:ca:4a:81:9d:e3:0b:
04:ad:b5:86:05:d7:62:4e:e8:75:12:c7:7f:1d:42:
b4:10:aa:99:69:a1:6c:14:07:d0:21:db:3e:00:59:
72:5a:91:5f:76:9a:13:55:2b:56:ed:e5:30:fd:74:
4f:5b:c9:31:db:51:92:fb:1a:9f:26:80:dd:b6:3d:
c5:9d:e6:16:be:b9:92:a3:53:9a:d9:78:6b:66:65:
89:df:05:7d:02:2c:f5:53:7b:16:ff:b6:40:fc:d0:
ca:34:98:6e:18:5e:56:a3:09:f9:c4:06:4f:06:11:
5e:a3:b8:a0:18:f6:bf:bf:e5:eb:0b:57:49:44:e7:
30:41:af:ff:8c:e3:57:33:9e:f5:05:85:9e:c3:db:
ff:0f:37:1c:d5:1d:18:da:62:9b:63:c6:4e:2c:d9:
86:84:8c:5e:bb:bd:01:c2:2d:7e:4d:f1:25:64:a1:
f5:bd:07:af:18:6c:c7:f0:de:97:da:08:16:3c:31:
6c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:4E:ED:90:C0:D0:6E:A6:06:83:C1:3D:C3:21:2C:3B:F6:1F:D8:0A
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145027.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a949::/32
Signature Algorithm: sha256WithRSAEncryption
af:2e:ce:0b:c6:7e:56:94:b1:09:46:43:b4:74:5c:fa:db:a7:
ea:53:be:e2:5a:fe:ef:8e:4b:25:0e:09:c0:4c:2a:1d:9c:e1:
77:79:d5:07:08:8f:9b:91:91:2b:63:aa:d8:9a:ed:f9:5a:d8:
b4:18:42:57:23:3b:ef:a5:2c:8f:45:63:42:9a:89:95:46:09:
bf:3c:81:8f:e6:97:6e:ab:4e:34:3b:4f:18:c4:93:97:ff:19:
d5:ac:a4:21:9d:8f:0f:97:1f:06:72:ba:68:18:c5:8c:28:5c:
e2:6b:f0:85:0c:6c:fb:5d:77:e7:5c:b2:2c:76:fa:43:53:41:
14:b6:c5:28:e7:5b:c5:b7:c3:b7:96:b3:9f:3d:54:e3:74:e8:
fb:b1:d7:4f:74:97:38:b7:ed:10:8f:2f:5b:41:1e:4d:77:0e:
31:c9:71:33:c5:3b:2b:30:52:f7:65:29:d7:20:64:9f:9f:21:
ee:31:81:3b:6e:8b:a6:dc:75:bd:95:a2:37:c0:0e:46:6e:19:
7a:31:0c:f0:45:b6:4f:57:bc:fa:c9:aa:eb:41:80:a0:51:01:
5e:7c:f1:9a:93:69:c2:5f:fd:7c:50:36:b9:a2:42:18:dc:a6:
58:90:af:6e:db:c0:54:10:03:8c:ee:5f:af:42:4c:95:a0:02:
36:01:c7:30
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUUAMGIi74p24BeiWLOfvwbg+yN5UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjUzNDNaFw0yNzA1MjEwNjU4NDNaMDMxMTAvBgNV
BAMTKDhDNEVFRDkwQzBEMDZFQTYwNjgzQzEzREMzMjEyQzNCRjYxRkQ4MEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpF5wTEC8nDFKKRyAJijLpsBNm
PkphIXOXN0w4xKWDe1FWHu1p9oVQnoMYlv5MtHCkyW7lJEIdPMJBSMcmazQJo4j2
AcpKgZ3jCwSttYYF12JO6HUSx38dQrQQqplpoWwUB9Ah2z4AWXJakV92mhNVK1bt
5TD9dE9byTHbUZL7Gp8mgN22PcWd5ha+uZKjU5rZeGtmZYnfBX0CLPVTexb/tkD8
0Mo0mG4YXlajCfnEBk8GEV6juKAY9r+/5esLV0lE5zBBr/+M41cznvUFhZ7D2/8P
NxzVHRjaYptjxk4s2YaEjF67vQHCLX5N8SVkofW9B68YbMfw3pfaCBY8MWz/AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUjE7tkMDQbqYGg8E9wyEsO/Yf2AowHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1MDI3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqpSTANBgkqhkiG9w0BAQsFAAOCAQEAry7O
C8Z+VpSxCUZDtHRc+tun6lO+4lr+745LJQ4JwEwqHZzhd3nVBwiPm5GRK2Oq2Jrt
+VrYtBhCVyM776Usj0VjQpqJlUYJvzyBj+aXbqtONDtPGMSTl/8Z1aykIZ2PD5cf
BnK6aBjFjChc4mvwhQxs+11351yyLHb6Q1NBFLbFKOdbxbfDt5aznz1U43To+7HX
T3SXOLftEI8vW0EeTXcOMclxM8U7KzBS92Up1yBkn58h7jGBO26Lptx1vZWiN8AO
Rm4ZejEM8EW2T1e8+smq60GAoFEBXnzxmpNpwl/9fFA2uaJCGNymWJCvbtvAVBAD
jO5fr0JMlaACNgHHMA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:21 2026 by rpki-client