Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145077.roa
File: AS145077.roa (raw, json)
Hash identifier: GDwSvxnik3fgeNT1fzdxLrZWHSdFGqApD2Mb2cP1zgI=
Subject key identifier: FE:8F:2B:3C:4B:40:86:96:0B:89:B6:0A:D7:EF:76:56:38:C0:63:21
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 28AACEC3D3BB380CC2F20A6AB1F8FC8D6711175E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145077.roa
Signing time: Tue 26 May 2026 06:12:38 +0000
ROA not before: Tue 26 May 2026 06:07:38 +0000
ROA not after: Tue 25 May 2027 06:12:38 +0000
asID: 145077
IP address blocks: 240a:a97b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:aa:ce:c3:d3:bb:38:0c:c2:f2:0a:6a:b1:f8:fc:8d:67:11:17:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:07:38 2026 GMT
Not After : May 25 06:12:38 2027 GMT
Subject: CN=FE8F2B3C4B4086960B89B60AD7EF765638C06321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3e:0f:15:65:84:2d:28:7c:7c:6b:7b:bf:fc:
0e:a4:a1:91:b6:8e:01:96:c6:55:2b:1e:14:81:c8:
29:fd:08:29:58:7c:f4:75:70:de:2e:a7:db:43:ab:
d5:61:c3:1a:f4:12:6c:34:46:68:62:26:fd:c4:aa:
f3:e5:00:51:3a:5b:40:e1:92:3e:64:8b:80:50:fe:
63:1d:8a:74:60:eb:aa:a9:3a:a8:bb:81:e9:95:03:
5e:8d:07:fa:2b:e3:5a:9a:c6:3d:74:a9:2d:b5:f0:
72:d2:14:31:eb:aa:90:6d:12:0f:87:af:b4:d1:a1:
87:26:b8:ce:8f:fd:07:c2:c1:2c:19:a6:38:61:15:
92:83:3a:47:0d:e4:e4:5d:39:72:38:c6:9d:e5:14:
65:34:0e:87:14:9d:5e:18:e2:c5:df:62:f0:b7:ee:
44:38:be:dd:99:aa:e1:07:e6:50:80:c7:a3:eb:76:
2f:1e:e9:23:0a:de:45:83:60:a4:88:12:4c:4a:23:
33:e8:f7:1b:f6:aa:b4:0e:1e:d8:c3:e8:99:d7:b6:
9d:28:63:82:30:33:e9:67:d9:98:b7:b4:1b:d8:f3:
48:8e:ed:bf:ab:a7:c5:6f:70:3a:32:e0:43:75:6f:
3b:f5:90:9b:ef:e5:8a:92:09:03:5f:f1:e8:15:cb:
ea:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:8F:2B:3C:4B:40:86:96:0B:89:B6:0A:D7:EF:76:56:38:C0:63:21
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145077.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a97b::/32
Signature Algorithm: sha256WithRSAEncryption
93:a4:51:63:54:03:21:91:fc:06:89:64:14:cc:e4:6c:af:1f:
91:cf:1f:1e:f7:b3:14:8c:95:68:85:ef:69:10:4b:d2:a8:b1:
50:0b:a3:4f:e5:db:61:19:45:89:be:f6:f7:20:50:80:ab:53:
30:01:9a:d5:03:86:00:26:b5:6b:96:18:90:c1:a6:71:70:26:
bd:ef:61:2e:fe:f1:fc:32:bf:f2:d8:c5:a3:c0:a9:b2:6a:5c:
3a:a4:2b:3f:63:58:b0:5b:54:1c:51:f5:ff:96:55:97:35:32:
fb:18:53:4b:ef:e4:d3:4f:ed:d8:fa:15:63:cf:d0:68:e6:c8:
98:80:c5:d0:01:82:81:55:31:c4:aa:35:f1:2f:c9:bd:2b:3d:
8a:92:16:b5:95:38:0e:cf:22:6d:97:29:1c:e5:53:c4:65:a7:
9a:06:cf:e2:bc:e9:fe:e1:90:ab:b8:c9:3e:ab:c1:cd:f0:17:
7d:65:a7:52:7d:e7:c7:ac:ac:11:26:17:f8:2f:4b:1d:e9:53:
67:63:3b:18:b4:79:30:e5:ef:03:34:fa:85:d2:8c:85:9a:99:
3b:87:65:b7:f3:57:fa:0a:60:ce:d6:f2:b6:4d:de:eb:fc:ce:
c0:c0:32:bb:25:05:95:60:9c:b1:9a:cc:1a:ad:f8:64:ce:7c:
20:4d:5b:28
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUKKrOw9O7OAzC8gpqsfj8jWcRF14wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwNjA3MzhaFw0yNzA1MjUwNjEyMzhaMDMxMTAvBgNV
BAMTKEZFOEYyQjNDNEI0MDg2OTYwQjg5QjYwQUQ3RUY3NjU2MzhDMDYzMjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfPg8VZYQtKHx8a3u//A6koZG2
jgGWxlUrHhSByCn9CClYfPR1cN4up9tDq9Vhwxr0Emw0RmhiJv3EqvPlAFE6W0Dh
kj5ki4BQ/mMdinRg66qpOqi7gemVA16NB/or41qaxj10qS218HLSFDHrqpBtEg+H
r7TRoYcmuM6P/QfCwSwZpjhhFZKDOkcN5ORdOXI4xp3lFGU0DocUnV4Y4sXfYvC3
7kQ4vt2ZquEH5lCAx6Prdi8e6SMK3kWDYKSIEkxKIzPo9xv2qrQOHtjD6JnXtp0o
Y4IwM+ln2Zi3tBvY80iO7b+rp8VvcDoy4EN1bzv1kJvv5YqSCQNf8egVy+rPAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU/o8rPEtAhpYLibYK1+92VjjAYyEwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1MDc3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqpezANBgkqhkiG9w0BAQsFAAOCAQEAk6RR
Y1QDIZH8BolkFMzkbK8fkc8fHvezFIyVaIXvaRBL0qixUAujT+XbYRlFib729yBQ
gKtTMAGa1QOGACa1a5YYkMGmcXAmve9hLv7x/DK/8tjFo8CpsmpcOqQrP2NYsFtU
HFH1/5ZVlzUy+xhTS+/k00/t2PoVY8/QaObImIDF0AGCgVUxxKo18S/JvSs9ipIW
tZU4Ds8ibZcpHOVTxGWnmgbP4rzp/uGQq7jJPqvBzfAXfWWnUn3nx6ysESYX+C9L
HelTZ2M7GLR5MOXvAzT6hdKMhZqZO4dlt/NX+gpgztbytk3e6/zOwMAyuyUFlWCc
sZrMGq34ZM58IE1bKA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:52 2026 by rpki-client