Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145304.roa
File: AS145304.roa (raw, json)
Hash identifier: Vq4h/66ihr+UsTWxwagq+x8WqScoOdxNRVRThlG6gfA=
Subject key identifier: AC:C8:B8:9F:AF:DE:C5:9B:05:17:15:03:82:1B:E9:0E:59:1B:06:3A
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0C924828729178B45A0FFE833CEAC002CABF79C1
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145304.roa
Signing time: Fri 22 May 2026 06:27:59 +0000
ROA not before: Fri 22 May 2026 06:22:59 +0000
ROA not after: Fri 21 May 2027 06:27:59 +0000
asID: 145304
IP address blocks: 240a:aa5e::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:92:48:28:72:91:78:b4:5a:0f:fe:83:3c:ea:c0:02:ca:bf:79:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:22:59 2026 GMT
Not After : May 21 06:27:59 2027 GMT
Subject: CN=ACC8B89FAFDEC59B05171503821BE90E591B063A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:2c:8d:2b:21:f2:1a:85:27:3c:0c:3d:dd:77:
24:2e:8c:8c:6c:8f:fd:16:dd:43:c8:37:5a:de:4d:
fb:61:24:6a:de:00:72:df:3a:62:c3:c8:92:02:cb:
ec:bc:52:16:98:8b:d6:50:2b:c6:46:84:b1:e1:5e:
9a:7e:80:3a:7c:d2:59:f2:cf:67:36:f8:2f:a2:25:
5c:4b:93:fe:6b:46:b1:fe:43:9b:fb:54:2d:19:73:
9d:eb:3a:ca:bc:59:19:67:2c:c0:3c:31:2f:88:fd:
80:28:3a:1b:18:41:d9:57:db:89:c9:a1:0e:ae:2b:
63:ad:83:d0:6d:9c:d0:0b:52:95:7c:9c:03:48:d2:
1e:84:e6:e1:09:27:7a:9c:f7:d4:56:db:34:2a:00:
ab:23:68:1c:d7:59:fc:cc:e8:28:ef:d7:ff:4b:d8:
08:61:1a:27:e1:5a:65:8e:90:0c:3b:33:ba:80:8f:
b5:be:74:c6:24:19:26:10:1d:a1:ba:b8:02:7d:15:
13:3c:b6:8f:89:3a:5c:77:b8:8d:4e:c0:e9:46:2b:
5d:95:e9:8e:3d:0e:16:98:c1:44:3d:d5:20:87:ad:
6f:e5:bc:51:d4:2e:2d:de:fa:b3:2b:5f:39:b7:86:
9c:59:c2:29:ef:3e:7d:0f:2e:9d:45:4a:9c:61:d9:
64:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:C8:B8:9F:AF:DE:C5:9B:05:17:15:03:82:1B:E9:0E:59:1B:06:3A
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145304.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa5e::/32
Signature Algorithm: sha256WithRSAEncryption
2e:07:c9:df:66:16:e9:ac:98:6c:b4:c4:75:0b:d0:52:40:65:
fa:69:37:f0:ac:25:ce:0a:66:13:7a:d5:a3:7c:78:0d:46:bd:
5b:2c:a7:83:a9:6d:a8:7c:42:a9:1d:0a:f5:bb:5f:7b:6b:43:
89:99:8b:d4:ba:dc:72:f8:1a:cd:9e:2c:93:fb:9f:5f:bc:44:
3e:ea:2e:f6:ba:cd:db:35:71:c8:9d:c9:a8:3d:2d:a6:27:a7:
a4:25:92:42:f2:b5:e3:28:9a:a5:82:f6:45:23:13:43:89:98:
b6:a7:69:f8:bc:f2:a1:0f:03:a0:e1:ac:89:dd:2c:e4:cd:27:
3b:4d:37:00:7f:8c:68:89:46:40:69:6e:1d:d2:33:fb:ea:94:
d7:88:93:be:1b:b7:7b:ac:23:a7:e4:52:14:88:94:64:6e:f7:
83:f8:c6:00:09:ee:7a:61:19:ac:20:93:62:26:dd:b3:38:8b:
d4:02:d2:07:6a:9c:b0:c4:72:8d:92:45:82:21:aa:11:bd:13:
ec:43:b0:76:74:b7:d4:3e:6e:f8:fb:b7:d6:ac:62:88:b5:91:
42:91:83:84:16:96:50:74:82:8c:70:49:09:f4:2d:57:0a:fe:
a6:8d:49:e8:ff:bc:fd:a1:1a:ca:64:85:81:79:d6:61:0f:1b:
66:e6:db:db
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUDJJIKHKReLRaD/6DPOrAAsq/ecEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjIyNTlaFw0yNzA1MjEwNjI3NTlaMDMxMTAvBgNV
BAMTKEFDQzhCODlGQUZERUM1OUIwNTE3MTUwMzgyMUJFOTBFNTkxQjA2M0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeLI0rIfIahSc8DD3ddyQujIxs
j/0W3UPIN1reTfthJGreAHLfOmLDyJICy+y8UhaYi9ZQK8ZGhLHhXpp+gDp80lny
z2c2+C+iJVxLk/5rRrH+Q5v7VC0Zc53rOsq8WRlnLMA8MS+I/YAoOhsYQdlX24nJ
oQ6uK2Otg9BtnNALUpV8nANI0h6E5uEJJ3qc99RW2zQqAKsjaBzXWfzM6Cjv1/9L
2AhhGifhWmWOkAw7M7qAj7W+dMYkGSYQHaG6uAJ9FRM8to+JOlx3uI1OwOlGK12V
6Y49DhaYwUQ91SCHrW/lvFHULi3e+rMrXzm3hpxZwinvPn0PLp1FSpxh2WQRAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUrMi4n6/exZsFFxUDghvpDlkbBjowHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1MzA0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqqXjANBgkqhkiG9w0BAQsFAAOCAQEALgfJ
32YW6ayYbLTEdQvQUkBl+mk38KwlzgpmE3rVo3x4DUa9Wyyng6ltqHxCqR0K9btf
e2tDiZmL1LrccvgazZ4sk/ufX7xEPuou9rrN2zVxyJ3JqD0tpienpCWSQvK14yia
pYL2RSMTQ4mYtqdp+LzyoQ8DoOGsid0s5M0nO003AH+MaIlGQGluHdIz++qU14iT
vhu3e6wjp+RSFIiUZG73g/jGAAnuemEZrCCTYibdsziL1ALSB2qcsMRyjZJFgiGq
Eb0T7EOwdnS31D5u+Pu31qxiiLWRQpGDhBaWUHSCjHBJCfQtVwr+po1J6P+8/aEa
ymSFgXnWYQ8bZubb2w==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:40 2026 by rpki-client