Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145678.roa
File: AS145678.roa (raw, json)
Hash identifier: cE5P7Hflr9UkUKJlRKfAEgCmsy6rT5EyKLqaxLeNjXs=
Subject key identifier: 8F:D4:0F:78:B5:7D:4E:88:CB:18:ED:F9:C4:A0:BE:E8:75:00:62:04
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4CD425F6A8FF6E90FA29E450A77DA2A3E590B953
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145678.roa
Signing time: Fri 22 May 2026 06:58:47 +0000
ROA not before: Fri 22 May 2026 06:53:47 +0000
ROA not after: Fri 21 May 2027 06:58:47 +0000
asID: 145678
IP address blocks: 240a:abd4::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:d4:25:f6:a8:ff:6e:90:fa:29:e4:50:a7:7d:a2:a3:e5:90:b9:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:47 2026 GMT
Not After : May 21 06:58:47 2027 GMT
Subject: CN=8FD40F78B57D4E88CB18EDF9C4A0BEE875006204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:65:76:d5:be:7d:06:8c:08:aa:7a:67:e3:52:
75:99:5b:14:48:6b:de:a8:47:1a:64:5c:c5:26:52:
80:68:bb:ea:6c:9b:98:29:e2:75:5d:f3:8f:a7:54:
46:31:27:12:29:44:7c:6d:ac:91:17:5c:a2:82:fd:
56:5d:0e:1d:83:3c:67:7c:50:b0:2f:13:8f:d6:2d:
54:f0:df:96:86:6c:87:fe:97:e0:ac:78:08:03:d8:
cf:f8:19:25:6f:b9:7b:97:bc:0d:64:da:df:00:3d:
10:d3:5b:d8:09:2c:0f:76:d5:1c:f1:c8:a7:a6:01:
b4:ba:cf:ae:f9:f6:97:af:74:90:78:42:90:ca:04:
0c:d4:00:13:88:ec:a6:be:c0:d8:ad:b4:4b:c4:40:
04:e4:f7:4a:6f:98:0f:4b:42:bb:39:06:c1:57:34:
d7:03:e1:c6:19:c1:26:cf:d1:cb:82:58:a4:c9:15:
d3:c3:22:f4:f8:e9:42:97:da:47:f5:00:ef:93:45:
5a:fd:8b:a4:0b:96:b0:9a:f5:ca:8c:26:3b:f7:6f:
c4:2c:a9:b0:a6:c2:66:0b:dd:72:32:b0:2e:43:c6:
20:fc:7e:32:76:14:6c:d9:f5:53:ed:27:48:85:b7:
48:64:4a:87:08:a3:4a:6a:e7:d5:25:51:bd:d0:86:
68:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D4:0F:78:B5:7D:4E:88:CB:18:ED:F9:C4:A0:BE:E8:75:00:62:04
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145678.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:abd4::/32
Signature Algorithm: sha256WithRSAEncryption
47:b4:22:69:41:63:d8:1e:92:67:8a:73:63:85:01:3f:a8:75:
a9:65:38:87:fd:8a:91:03:16:b9:fa:a6:d8:b9:b2:b1:9f:59:
6e:d5:35:c7:39:a1:bb:6c:38:a9:fc:e6:28:57:e7:6d:6e:32:
34:d7:1e:d9:d5:be:52:5c:4e:f2:32:78:ae:54:82:99:a5:96:
cd:43:25:75:95:74:38:de:a8:d9:f9:6f:bf:83:a3:81:6b:85:
fb:2b:9f:76:f8:fe:2b:71:fa:25:a2:a0:60:d2:83:7e:e1:4d:
fa:46:40:52:9c:5b:95:ac:29:19:5a:1c:66:c8:59:17:00:01:
67:7d:80:1b:00:18:22:98:3e:20:a6:c6:0f:d1:bd:79:5c:6e:
7b:f2:04:48:af:c3:97:bd:5f:54:07:a9:ca:59:9a:6d:96:08:
6e:24:5a:8d:5d:e1:b8:e6:cf:d6:83:ac:a3:d2:43:6e:19:59:
a3:00:05:af:9b:5c:80:4f:75:b3:e8:e7:ac:30:82:67:58:a9:
b0:ed:0a:48:82:2e:c2:41:62:66:ee:08:3d:52:f4:a0:aa:22:
c3:c9:a8:56:ee:e3:34:81:ff:ff:5e:ea:71:c1:38:88:84:b1:
33:cc:1f:1c:e2:98:78:00:25:38:c4:42:26:ca:ed:29:d2:0a:
9d:ef:6e:b9
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUTNQl9qj/bpD6KeRQp32io+WQuVMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjUzNDdaFw0yNzA1MjEwNjU4NDdaMDMxMTAvBgNV
BAMTKDhGRDQwRjc4QjU3RDRFODhDQjE4RURGOUM0QTBCRUU4NzUwMDYyMDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEZXbVvn0GjAiqemfjUnWZWxRI
a96oRxpkXMUmUoBou+psm5gp4nVd84+nVEYxJxIpRHxtrJEXXKKC/VZdDh2DPGd8
ULAvE4/WLVTw35aGbIf+l+CseAgD2M/4GSVvuXuXvA1k2t8APRDTW9gJLA921Rzx
yKemAbS6z6759pevdJB4QpDKBAzUABOI7Ka+wNittEvEQATk90pvmA9LQrs5BsFX
NNcD4cYZwSbP0cuCWKTJFdPDIvT46UKX2kf1AO+TRVr9i6QLlrCa9cqMJjv3b8Qs
qbCmwmYL3XIysC5DxiD8fjJ2FGzZ9VPtJ0iFt0hkSocIo0pq59UlUb3QhmhRAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUj9QPeLV9TojLGO35xKC+6HUAYgQwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1Njc4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqr1DANBgkqhkiG9w0BAQsFAAOCAQEAR7Qi
aUFj2B6SZ4pzY4UBP6h1qWU4h/2KkQMWufqm2LmysZ9ZbtU1xzmhu2w4qfzmKFfn
bW4yNNce2dW+UlxO8jJ4rlSCmaWWzUMldZV0ON6o2flvv4OjgWuF+yufdvj+K3H6
JaKgYNKDfuFN+kZAUpxblawpGVocZshZFwABZ32AGwAYIpg+IKbGD9G9eVxue/IE
SK/Dl71fVAepylmabZYIbiRajV3huObP1oOso9JDbhlZowAFr5tcgE91s+jnrDCC
Z1ipsO0KSIIuwkFiZu4IPVL0oKoiw8moVu7jNIH//17qccE4iISxM8wfHOKYeAAl
OMRCJsrtKdIKne9uuQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:44 2026 by rpki-client