Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145278.roa
File: AS145278.roa (raw, json)
Hash identifier: bKmNJnXo2lpj7UtEe0mPftm4jTrO4EmiK9oAJwlHzug=
Subject key identifier: 89:A6:FA:1B:9D:8E:3D:FD:F8:CD:61:C6:89:CF:10:72:8A:6D:DF:47
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 47B80ABF0215E52E0AB6DC7C731053A6CDB17EC3
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145278.roa
Signing time: Fri 22 May 2026 07:09:14 +0000
ROA not before: Fri 22 May 2026 07:04:14 +0000
ROA not after: Fri 21 May 2027 07:09:14 +0000
asID: 145278
IP address blocks: 240a:aa44::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:b8:0a:bf:02:15:e5:2e:0a:b6:dc:7c:73:10:53:a6:cd:b1:7e:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:04:14 2026 GMT
Not After : May 21 07:09:14 2027 GMT
Subject: CN=89A6FA1B9D8E3DFDF8CD61C689CF10728A6DDF47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:45:6c:c7:50:f3:20:e7:e3:7a:59:ea:86:84:
0e:5a:25:90:25:53:c9:c7:bb:8c:65:c9:fa:a2:0e:
8f:61:f1:2a:ba:f6:52:97:1a:ef:5b:a9:30:0a:42:
b2:f8:3e:87:c8:f3:76:fc:cd:00:60:28:4b:1d:39:
8c:2b:99:a9:9d:a2:a9:97:82:94:ee:37:cf:a8:d1:
0b:ce:72:9d:e9:1e:4c:5f:ea:a3:ee:6d:57:05:6c:
54:e2:f7:0c:8f:c8:f5:10:08:b5:35:6f:02:ce:3c:
d6:81:82:d5:e3:23:d7:48:80:aa:7c:ba:75:a2:e7:
85:25:b0:0d:94:64:9a:90:42:17:b4:c5:82:40:22:
bb:de:b3:88:31:0b:c3:e1:32:89:2c:b6:92:54:20:
8d:7d:c6:b1:f1:db:57:3e:4e:3d:f1:7b:b2:89:b9:
7c:05:ed:5e:1d:fc:5d:ca:8d:c9:c4:0f:25:60:07:
29:cc:c5:0e:cf:5a:37:fa:f7:68:6c:52:10:95:d3:
66:d9:1e:1d:55:fc:36:87:a5:4b:62:02:32:0e:6f:
62:c1:83:a2:4a:b2:a0:ba:e8:25:ec:6e:eb:de:8f:
60:c8:65:b7:e6:b3:99:19:b7:39:4d:99:58:a1:00:
84:a9:e6:91:2e:96:3b:6b:79:67:d3:9b:c0:8e:d4:
e1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A6:FA:1B:9D:8E:3D:FD:F8:CD:61:C6:89:CF:10:72:8A:6D:DF:47
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145278.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa44::/32
Signature Algorithm: sha256WithRSAEncryption
a9:67:8c:11:c9:c3:12:38:1c:97:3f:f2:7b:58:c5:a6:ba:a1:
ec:7e:19:72:21:45:b9:78:c4:fa:f3:d2:2f:5d:3d:3c:15:91:
04:9f:11:48:38:65:e4:4e:6b:a4:1b:f5:63:ad:0b:e0:aa:69:
c2:c4:01:e7:6e:fe:1e:69:10:27:ef:e7:2a:ae:58:d5:6b:66:
ab:ed:1f:5e:c2:26:28:27:64:fc:92:b8:20:08:a4:4e:c3:da:
49:57:aa:34:ec:3f:45:e6:51:fa:0b:3f:40:4b:24:90:10:c9:
b9:0a:9e:e8:1c:46:1d:5c:5f:5b:4e:51:ee:a6:29:3f:37:0b:
da:d8:b8:a5:5e:a3:0d:88:70:d4:4d:bb:d6:44:56:aa:29:c1:
f4:19:fb:21:7a:8e:5e:00:b6:01:52:b7:a5:fe:cb:df:54:5d:
11:d4:a2:a9:ce:8e:00:a3:53:30:58:d7:e0:fc:1f:ba:53:ff:
6e:f4:43:ee:d3:ba:84:eb:f5:01:a7:46:52:75:c7:5a:53:82:
80:3f:a4:04:e6:dd:10:03:08:4d:4f:7d:13:a2:91:13:93:dd:
17:0f:16:66:d6:e8:70:c7:50:89:0d:47:5e:96:62:32:88:f1:
b6:23:ce:24:30:92:37:92:d7:26:ae:1b:2f:9e:40:86:6f:8a:
8e:c9:ea:88
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUR7gKvwIV5S4Kttx8cxBTps2xfsMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzA0MTRaFw0yNzA1MjEwNzA5MTRaMDMxMTAvBgNV
BAMTKDg5QTZGQTFCOUQ4RTNERkRGOENENjFDNjg5Q0YxMDcyOEE2RERGNDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaRWzHUPMg5+N6WeqGhA5aJZAl
U8nHu4xlyfqiDo9h8Sq69lKXGu9bqTAKQrL4PofI83b8zQBgKEsdOYwrmamdoqmX
gpTuN8+o0QvOcp3pHkxf6qPubVcFbFTi9wyPyPUQCLU1bwLOPNaBgtXjI9dIgKp8
unWi54UlsA2UZJqQQhe0xYJAIrves4gxC8PhMokstpJUII19xrHx21c+Tj3xe7KJ
uXwF7V4d/F3KjcnEDyVgBynMxQ7PWjf692hsUhCV02bZHh1V/DaHpUtiAjIOb2LB
g6JKsqC66CXsbuvej2DIZbfms5kZtzlNmVihAISp5pEuljtreWfTm8CO1OG7AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUiab6G52OPf34zWHGic8Qcopt30cwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1Mjc4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqqRDANBgkqhkiG9w0BAQsFAAOCAQEAqWeM
EcnDEjgclz/ye1jFprqh7H4ZciFFuXjE+vPSL109PBWRBJ8RSDhl5E5rpBv1Y60L
4KppwsQB527+HmkQJ+/nKq5Y1Wtmq+0fXsImKCdk/JK4IAikTsPaSVeqNOw/ReZR
+gs/QEskkBDJuQqe6BxGHVxfW05R7qYpPzcL2ti4pV6jDYhw1E271kRWqinB9Bn7
IXqOXgC2AVK3pf7L31RdEdSiqc6OAKNTMFjX4PwfulP/bvRD7tO6hOv1AadGUnXH
WlOCgD+kBObdEAMITU99E6KRE5PdFw8WZtbocMdQiQ1HXpZiMojxtiPOJDCSN5LX
Jq4bL55Ahm+KjsnqiA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:51 2026 by rpki-client