Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145046.roa
File: AS145046.roa (raw, json)
Hash identifier: exII0fWu008Af7I8xIfrXQ4SdJ/LICbjeLe47ZhZl1g=
Subject key identifier: FD:77:47:DA:58:3F:3A:61:AB:E4:D0:A1:CE:E5:62:72:9C:A1:B5:24
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 30DE0E98C80A9C03F3780068C6C42D87CC887AC2
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145046.roa
Signing time: Fri 22 May 2026 07:41:10 +0000
ROA not before: Fri 22 May 2026 07:36:10 +0000
ROA not after: Fri 21 May 2027 07:41:10 +0000
asID: 145046
IP address blocks: 240a:a95c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:de:0e:98:c8:0a:9c:03:f3:78:00:68:c6:c4:2d:87:cc:88:7a:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:36:10 2026 GMT
Not After : May 21 07:41:10 2027 GMT
Subject: CN=FD7747DA583F3A61ABE4D0A1CEE562729CA1B524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:18:d0:9e:69:59:91:bc:ca:7a:9b:46:3b:d9:
cd:6a:5a:2d:03:b2:bb:fa:75:08:6a:64:69:cf:77:
f8:5d:04:4e:b4:91:eb:92:2e:7a:24:3b:50:f4:37:
41:0b:c5:7b:8c:1b:03:16:44:b1:eb:4e:57:98:c2:
33:cf:9e:2c:a3:d1:a7:e4:2e:8e:e3:e4:6f:b7:96:
7b:e3:bd:fa:df:8a:c8:f6:6a:3f:d5:bd:22:32:b4:
e2:ae:84:04:1d:87:45:61:1f:19:54:06:71:a1:27:
4f:99:6d:4f:46:19:be:f9:05:b3:80:c9:69:24:57:
19:f6:15:29:94:8e:ae:d2:40:27:9e:b2:2c:fc:0c:
56:bd:72:ca:f6:30:d3:84:77:76:28:72:97:9c:d9:
ab:46:ce:a7:f7:2c:ea:f0:32:9e:91:33:f2:06:7b:
3c:3b:f6:01:53:67:cb:57:f4:bd:49:c9:48:0d:ac:
a6:bc:0e:91:64:c5:b8:64:0c:44:92:a3:fd:01:2c:
d7:6b:0b:32:2e:ba:97:ba:b0:52:58:77:3e:33:b4:
32:e5:6d:02:b2:33:0f:b3:67:c2:34:83:d2:09:88:
fa:57:b9:18:f8:0f:9d:3f:61:a4:7d:43:3a:e9:8b:
0e:00:ca:56:65:74:7f:87:48:04:c9:fd:79:6d:58:
83:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:77:47:DA:58:3F:3A:61:AB:E4:D0:A1:CE:E5:62:72:9C:A1:B5:24
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145046.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a95c::/32
Signature Algorithm: sha256WithRSAEncryption
09:f2:1e:67:6b:76:6e:11:fe:f7:4e:31:7d:01:bd:92:fa:97:
c6:12:4e:6e:ae:8b:b6:e3:95:d6:98:2a:bb:16:6e:b8:16:72:
0e:c3:a6:a3:bb:ca:d8:57:81:a7:ea:8a:58:4e:ea:7b:f9:39:
c8:e3:26:4f:6d:f2:cd:81:08:8d:b5:cf:15:c4:e1:00:ad:a1:
e7:ed:bf:77:e8:6b:8f:69:21:d5:53:c2:a4:8e:c8:83:60:67:
ad:d9:f3:ee:40:1a:c8:91:52:9b:17:6c:d8:c9:e9:0d:35:4a:
14:0b:30:ea:e2:95:21:95:08:1e:fc:84:93:7a:ca:64:57:20:
85:53:fa:6b:c2:51:8c:ba:9e:da:b6:42:67:fb:1e:20:f4:e7:
81:eb:81:d5:15:80:54:23:ba:64:0c:5d:07:fd:75:96:07:9a:
64:62:cd:20:d3:a0:b2:45:a3:42:c4:9c:42:fb:9b:b2:9f:2c:
5a:a2:67:e0:d1:52:ff:21:20:7e:b4:fe:d1:88:11:b8:11:1b:
a3:65:93:4a:73:a2:16:76:ec:27:68:66:99:58:a5:06:1b:03:
5a:7e:59:4f:72:fc:11:b5:d0:fd:12:d4:45:2e:c1:97:e8:94:
18:53:96:3d:22:c2:7c:95:1e:fa:ad:c0:54:04:3d:e7:04:7f:
dc:50:44:ea
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUMN4OmMgKnAPzeABoxsQth8yIesIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzM2MTBaFw0yNzA1MjEwNzQxMTBaMDMxMTAvBgNV
BAMTKEZENzc0N0RBNTgzRjNBNjFBQkU0RDBBMUNFRTU2MjcyOUNBMUI1MjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdGNCeaVmRvMp6m0Y72c1qWi0D
srv6dQhqZGnPd/hdBE60keuSLnokO1D0N0ELxXuMGwMWRLHrTleYwjPPniyj0afk
Lo7j5G+3lnvjvfrfisj2aj/VvSIytOKuhAQdh0VhHxlUBnGhJ0+ZbU9GGb75BbOA
yWkkVxn2FSmUjq7SQCeesiz8DFa9csr2MNOEd3Yocpec2atGzqf3LOrwMp6RM/IG
ezw79gFTZ8tX9L1JyUgNrKa8DpFkxbhkDESSo/0BLNdrCzIuupe6sFJYdz4ztDLl
bQKyMw+zZ8I0g9IJiPpXuRj4D50/YaR9Qzrpiw4AylZldH+HSATJ/XltWIMFAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU/XdH2lg/OmGr5NChzuVicpyhtSQwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1MDQ2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqpXDANBgkqhkiG9w0BAQsFAAOCAQEACfIe
Z2t2bhH+904xfQG9kvqXxhJObq6LtuOV1pgquxZuuBZyDsOmo7vK2FeBp+qKWE7q
e/k5yOMmT23yzYEIjbXPFcThAK2h5+2/d+hrj2kh1VPCpI7Ig2Bnrdnz7kAayJFS
mxds2MnpDTVKFAsw6uKVIZUIHvyEk3rKZFcghVP6a8JRjLqe2rZCZ/seIPTngeuB
1RWAVCO6ZAxdB/11lgeaZGLNINOgskWjQsScQvubsp8sWqJn4NFS/yEgfrT+0YgR
uBEbo2WTSnOiFnbsJ2hmmVilBhsDWn5ZT3L8EbXQ/RLURS7Bl+iUGFOWPSLCfJUe
+q3AVAQ95wR/3FBE6g==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:20 2026 by rpki-client