Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145291.roa
File: AS145291.roa (raw, json)
Hash identifier: ruFbCKI0njogg94bKs1li/dHGX3nZNRTWc0EEBfp+oY=
Subject key identifier: CE:CF:03:AB:B7:4F:09:FD:6E:A0:D8:C3:84:6C:42:B3:C6:28:D2:5D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 11168C67F0A980A1A502EC7A84EC70DDCD9937AC
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145291.roa
Signing time: Fri 22 May 2026 04:27:18 +0000
ROA not before: Fri 22 May 2026 04:22:18 +0000
ROA not after: Fri 21 May 2027 04:27:18 +0000
asID: 145291
IP address blocks: 240a:aa51::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:16:8c:67:f0:a9:80:a1:a5:02:ec:7a:84:ec:70:dd:cd:99:37:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:22:18 2026 GMT
Not After : May 21 04:27:18 2027 GMT
Subject: CN=CECF03ABB74F09FD6EA0D8C3846C42B3C628D25D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:db:c2:8b:7e:8d:43:e8:56:19:7b:e7:e9:59:
cd:77:95:48:28:9a:ff:1e:4b:8b:45:93:a2:66:b3:
13:4d:0c:63:ad:a7:db:41:87:d1:20:d2:b1:19:04:
ea:27:20:15:ae:e9:7a:3a:5d:af:31:b4:65:dd:e0:
91:54:ce:6f:5c:7f:af:2e:84:37:f9:02:38:36:42:
5e:c9:bf:60:e1:0f:88:2d:e1:03:a7:db:92:9a:9c:
49:34:cd:e7:a4:3d:73:38:f3:42:2f:39:21:86:19:
0c:67:a0:92:b7:1a:6d:9f:2b:a2:18:07:68:f1:8d:
08:b4:af:b7:2d:bd:c6:a6:b7:73:3e:bd:27:e9:b2:
ad:66:17:7b:6c:e0:cf:95:a1:77:c5:d1:0f:29:df:
94:f4:a5:c9:bb:42:ab:8b:52:e1:4c:f6:ef:2d:cc:
75:6a:57:6a:33:ca:7e:28:ac:40:82:8d:fe:13:bc:
5d:bc:fa:c2:1e:d6:66:7d:c7:02:21:48:8f:09:e0:
71:a3:60:b3:87:b1:c9:6f:37:2e:a0:ae:bc:a6:dd:
06:55:f0:bf:f8:6a:ff:40:97:a2:15:42:0b:93:b5:
dd:00:d9:80:ac:92:a4:b8:62:37:0f:33:d3:c3:12:
d6:14:37:37:78:7f:78:f4:b4:f4:cd:43:18:48:9f:
ce:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:CF:03:AB:B7:4F:09:FD:6E:A0:D8:C3:84:6C:42:B3:C6:28:D2:5D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145291.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa51::/32
Signature Algorithm: sha256WithRSAEncryption
4b:b6:2d:51:49:23:93:46:33:38:20:04:29:f6:19:ad:0e:55:
27:cd:ca:77:fb:10:cd:92:cc:72:71:38:25:b1:48:37:26:6d:
e9:b0:fb:5c:33:d1:48:65:b9:37:23:44:28:b6:e4:db:98:35:
1a:f7:c3:93:33:f0:73:31:d7:d1:30:71:43:77:09:3e:65:cc:
7c:75:fe:41:d9:20:65:72:d6:c9:6c:0a:b0:7d:4b:34:01:16:
77:04:96:59:4f:28:8e:a3:48:aa:fa:de:ac:8f:7b:4d:da:6d:
48:13:ac:ba:46:0e:25:63:5e:39:d0:e3:0f:1f:7d:22:49:bc:
dc:98:79:16:41:a0:9c:f0:89:55:1f:65:75:42:f7:7d:4c:be:
00:80:0e:78:bf:29:72:8a:46:e5:73:28:1c:c7:12:0c:d6:22:
47:d6:15:cc:e7:26:ba:0b:f0:36:d5:b6:c8:82:20:98:6a:21:
ee:ae:17:7c:23:76:3a:37:a8:3b:1c:c8:b6:a0:7c:f2:af:bd:
72:ae:4d:a8:29:59:d5:00:11:06:c2:e5:69:55:e7:3f:be:50:
cf:66:cc:5b:a1:59:23:0d:4d:07:29:fa:7f:6d:f4:84:00:b0:
c0:ff:3b:72:74:87:dd:a0:ff:91:e6:aa:33:e1:d9:01:17:10:
98:62:03:16
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUERaMZ/CpgKGlAux6hOxw3c2ZN6wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNDIyMThaFw0yNzA1MjEwNDI3MThaMDMxMTAvBgNV
BAMTKENFQ0YwM0FCQjc0RjA5RkQ2RUEwRDhDMzg0NkM0MkIzQzYyOEQyNUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC828KLfo1D6FYZe+fpWc13lUgo
mv8eS4tFk6JmsxNNDGOtp9tBh9Eg0rEZBOonIBWu6Xo6Xa8xtGXd4JFUzm9cf68u
hDf5Ajg2Ql7Jv2DhD4gt4QOn25KanEk0zeekPXM480IvOSGGGQxnoJK3Gm2fK6IY
B2jxjQi0r7ctvcamt3M+vSfpsq1mF3ts4M+VoXfF0Q8p35T0pcm7QquLUuFM9u8t
zHVqV2ozyn4orECCjf4TvF28+sIe1mZ9xwIhSI8J4HGjYLOHsclvNy6grrym3QZV
8L/4av9Al6IVQguTtd0A2YCskqS4YjcPM9PDEtYUNzd4f3j0tPTNQxhIn87ZAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUzs8Dq7dPCf1uoNjDhGxCs8Yo0l0wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1MjkxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqqUTANBgkqhkiG9w0BAQsFAAOCAQEAS7Yt
UUkjk0YzOCAEKfYZrQ5VJ83Kd/sQzZLMcnE4JbFINyZt6bD7XDPRSGW5NyNEKLbk
25g1GvfDkzPwczHX0TBxQ3cJPmXMfHX+QdkgZXLWyWwKsH1LNAEWdwSWWU8ojqNI
qvrerI97TdptSBOsukYOJWNeOdDjDx99Ikm83Jh5FkGgnPCJVR9ldUL3fUy+AIAO
eL8pcopG5XMoHMcSDNYiR9YVzOcmugvwNtW2yIIgmGoh7q4XfCN2OjeoOxzItqB8
8q+9cq5NqClZ1QARBsLlaVXnP75Qz2bMW6FZIw1NByn6f230hACwwP87cnSH3aD/
keaqM+HZARcQmGIDFg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:29 2026 by rpki-client