Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145470.roa
File: AS145470.roa (raw, json)
Hash identifier: o/6tNkU9Tx+gaxqXsKEo17bRaOC2biGcAJ8ZvVMj2cE=
Subject key identifier: 8A:E2:A5:97:99:F1:A6:01:BF:14:C2:D9:43:F6:66:B5:44:8D:22:81
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4C41BC9D9A6F9ADD84C967DBB57FB22D16245B02
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145470.roa
Signing time: Mon 25 May 2026 06:49:15 +0000
ROA not before: Mon 25 May 2026 06:44:15 +0000
ROA not after: Mon 24 May 2027 06:49:15 +0000
asID: 145470
IP address blocks: 240a:ab04::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:41:bc:9d:9a:6f:9a:dd:84:c9:67:db:b5:7f:b2:2d:16:24:5b:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:44:15 2026 GMT
Not After : May 24 06:49:15 2027 GMT
Subject: CN=8AE2A59799F1A601BF14C2D943F666B5448D2281
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:54:31:88:13:87:b6:0a:c9:12:1a:75:50:d8:
5c:bc:d4:89:4b:5c:75:c7:32:31:31:4e:7f:b5:50:
fd:2b:eb:ae:73:d9:4a:e5:61:20:1d:5a:fc:5e:a9:
b8:d7:7f:24:9b:df:ed:53:01:f4:e6:6d:24:d1:e8:
83:32:7d:eb:da:89:b2:f0:f6:4c:02:ed:a2:fe:19:
eb:c6:5d:de:76:2a:99:ea:24:76:a8:19:a5:72:7d:
5c:68:b0:45:ea:77:5a:05:b1:9f:a8:be:d5:9e:4b:
be:e2:25:a5:b3:7b:4a:3d:60:12:79:03:9b:5c:ec:
c6:56:a1:c9:11:28:99:46:4a:a9:60:23:31:a2:b9:
9e:ed:e6:99:73:ed:1f:c3:b6:ec:cd:fc:ff:b9:c0:
f5:49:63:a9:eb:92:b6:f0:58:07:5e:55:83:7d:68:
2c:08:5a:2a:a9:bd:2b:80:13:4d:90:36:6c:f0:17:
89:fe:0d:f7:8d:13:7f:2a:f7:06:1f:0d:92:56:cc:
2e:90:ef:31:7b:d4:0f:09:13:3d:e8:36:73:78:d3:
4c:e0:50:a9:18:d1:01:18:6f:c1:c8:ad:93:0c:a9:
eb:c6:ab:fa:79:6f:2b:93:5d:48:0e:25:01:af:19:
b3:fb:ac:2e:09:cf:7d:98:1c:ee:4b:be:d3:8f:e9:
ab:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E2:A5:97:99:F1:A6:01:BF:14:C2:D9:43:F6:66:B5:44:8D:22:81
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145470.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ab04::/32
Signature Algorithm: sha256WithRSAEncryption
33:76:a6:e0:8d:30:64:aa:97:a8:76:7f:f2:50:21:73:2d:a2:
1a:6c:59:5d:47:6a:46:98:7d:ad:09:93:2c:25:c3:fc:9d:ef:
3a:85:da:f6:36:95:47:8c:43:ee:5a:ed:c6:da:05:45:a8:c1:
39:8e:03:c0:1a:cc:97:fa:ff:90:c4:21:a9:43:4a:00:f0:98:
82:68:3e:61:56:ba:a9:13:b4:69:de:03:e5:9f:cd:23:9f:73:
51:ef:9c:1a:78:93:42:b8:c4:b3:0f:81:77:ef:89:c2:42:59:
67:66:94:f9:ac:9b:75:a6:7d:97:f2:4a:88:c3:20:f1:ba:76:
c1:74:6e:a4:b6:43:4e:9d:df:09:ad:c9:23:49:3c:49:0a:2d:
8c:76:74:51:c1:86:b4:5e:b5:90:8c:7c:e1:88:20:d0:4f:79:
2d:5e:c5:19:86:c5:5a:f1:8a:1d:cb:fb:4c:b1:5d:fc:ba:fe:
cf:7c:b2:20:0f:b5:a0:7f:2a:2e:f0:b3:bd:50:0f:b1:2a:c3:
5f:f8:ab:35:db:82:56:b1:91:ef:6e:42:60:12:6f:31:18:62:
9a:69:c7:eb:5f:34:f2:5b:52:c1:8c:11:28:35:5a:e2:d8:1d:
8e:c6:e4:45:46:3f:a4:d5:8d:88:46:73:ec:4c:41:c3:01:3c:
a4:ea:34:02
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUTEG8nZpvmt2EyWfbtX+yLRYkWwIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwNjQ0MTVaFw0yNzA1MjQwNjQ5MTVaMDMxMTAvBgNV
BAMTKDhBRTJBNTk3OTlGMUE2MDFCRjE0QzJEOTQzRjY2NkI1NDQ4RDIyODEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNVDGIE4e2CskSGnVQ2Fy81IlL
XHXHMjExTn+1UP0r665z2UrlYSAdWvxeqbjXfySb3+1TAfTmbSTR6IMyfevaibLw
9kwC7aL+GevGXd52KpnqJHaoGaVyfVxosEXqd1oFsZ+ovtWeS77iJaWze0o9YBJ5
A5tc7MZWockRKJlGSqlgIzGiuZ7t5plz7R/DtuzN/P+5wPVJY6nrkrbwWAdeVYN9
aCwIWiqpvSuAE02QNmzwF4n+DfeNE38q9wYfDZJWzC6Q7zF71A8JEz3oNnN400zg
UKkY0QEYb8HIrZMMqevGq/p5byuTXUgOJQGvGbP7rC4Jz32YHO5LvtOP6auXAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUiuKll5nxpgG/FMLZQ/ZmtUSNIoEwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1NDcwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqrBDANBgkqhkiG9w0BAQsFAAOCAQEAM3am
4I0wZKqXqHZ/8lAhcy2iGmxZXUdqRph9rQmTLCXD/J3vOoXa9jaVR4xD7lrtxtoF
RajBOY4DwBrMl/r/kMQhqUNKAPCYgmg+YVa6qRO0ad4D5Z/NI59zUe+cGniTQrjE
sw+Bd++JwkJZZ2aU+aybdaZ9l/JKiMMg8bp2wXRupLZDTp3fCa3JI0k8SQotjHZ0
UcGGtF61kIx84Ygg0E95LV7FGYbFWvGKHcv7TLFd/Lr+z3yyIA+1oH8qLvCzvVAP
sSrDX/irNduCVrGR725CYBJvMRhimmnH61808ltSwYwRKDVa4tgdjsbkRUY/pNWN
iEZz7ExBwwE8pOo0Ag==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:22 2026 by rpki-client