Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145781.roa
File: AS145781.roa (raw, json)
Hash identifier: Vt4yvjt9itJCWccCcoxn/0NCs/OhUPBlq//7s0vgMLU=
Subject key identifier: 47:4F:DF:B5:8B:0B:3E:FA:22:B7:AD:00:65:D4:43:8D:6C:42:A2:40
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4DCC55BDE182201B7826FC8A837438978487D188
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145781.roa
Signing time: Fri 22 May 2026 04:27:05 +0000
ROA not before: Fri 22 May 2026 04:22:05 +0000
ROA not after: Fri 21 May 2027 04:27:05 +0000
asID: 145781
IP address blocks: 240a:ac3b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:cc:55:bd:e1:82:20:1b:78:26:fc:8a:83:74:38:97:84:87:d1:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:22:05 2026 GMT
Not After : May 21 04:27:05 2027 GMT
Subject: CN=474FDFB58B0B3EFA22B7AD0065D4438D6C42A240
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:48:29:21:37:61:bb:04:30:08:da:46:5b:0a:
85:f6:36:22:bd:79:e7:e4:bf:f1:15:1b:8c:7c:37:
b0:71:fe:b0:90:7b:a6:84:0c:2d:38:f5:42:84:6e:
61:6c:e5:86:86:38:1f:5e:50:7f:61:c5:56:15:1e:
dd:0f:b2:44:b4:0f:cd:cc:71:d1:a0:7a:45:cc:14:
60:aa:20:30:b0:60:41:bb:2f:56:19:a7:bb:28:a0:
18:56:a0:72:ac:a8:25:1d:4c:a4:8f:d2:4d:1b:4b:
73:62:fb:50:c8:d3:f6:3f:9f:f0:37:31:7f:68:a6:
fe:9a:d4:18:44:c7:de:81:fe:8c:51:a6:4c:84:43:
a6:a8:ae:67:d4:eb:af:ef:74:63:57:5f:cc:3a:dc:
e6:ae:8b:ec:4c:a0:d8:5d:33:db:90:0e:52:fd:c7:
dd:8c:99:db:28:f2:9d:4d:24:22:6c:cc:07:d6:ee:
61:70:34:89:4d:9b:eb:32:be:ba:f5:d2:cf:63:ca:
fa:27:4a:48:a8:9e:6b:27:55:b1:a1:b2:a5:2f:4e:
b2:d2:08:b9:c3:1f:02:a4:c5:ee:a4:15:6c:21:90:
e7:57:d3:cf:14:5d:a3:3f:41:76:a4:0b:95:c4:b5:
cc:40:48:21:db:d9:15:82:5f:5f:5a:26:3b:be:be:
4d:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:4F:DF:B5:8B:0B:3E:FA:22:B7:AD:00:65:D4:43:8D:6C:42:A2:40
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145781.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ac3b::/32
Signature Algorithm: sha256WithRSAEncryption
ba:65:6a:3a:42:78:4f:58:6f:09:90:8a:ee:0b:28:dd:a8:68:
80:11:3d:4b:de:22:91:4b:0e:b0:77:e7:2e:1d:1c:33:96:92:
24:55:36:51:ed:87:03:f7:92:c3:8f:ae:04:a5:c2:f5:79:00:
d1:bd:ab:87:9d:db:b1:3f:29:59:bb:f3:eb:62:08:18:56:e6:
20:61:03:f3:49:16:93:c4:a2:5d:25:89:5f:8b:40:58:eb:c1:
02:55:35:03:53:65:2a:a0:4e:56:ed:20:74:fa:1f:e7:a0:4f:
e4:0f:77:f2:e3:59:21:44:45:10:f8:24:dc:2d:16:8e:fe:97:
ae:f0:b4:19:37:16:8f:89:41:bc:17:31:03:06:76:54:42:d8:
d5:aa:f6:99:d4:8a:1e:8e:0c:e5:4f:ad:b4:67:ff:67:86:16:
53:81:ed:52:00:7d:5e:4f:09:fb:89:38:ab:6f:20:69:d2:6a:
2a:da:74:c2:14:d7:d6:68:1b:b2:ba:cd:2d:6d:b1:b8:7e:de:
44:2a:f3:46:64:fb:e5:11:18:ac:13:e6:01:f9:c7:e5:73:df:
7e:7b:f1:92:a2:70:25:41:ad:d1:47:3c:e0:10:f5:4b:17:1e:
4d:03:0b:17:ef:f0:c1:5f:8f:7e:ca:e8:e3:f6:cf:f4:cb:5d:
62:8f:7f:9c
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUTcxVveGCIBt4JvyKg3Q4l4SH0YgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNDIyMDVaFw0yNzA1MjEwNDI3MDVaMDMxMTAvBgNV
BAMTKDQ3NEZERkI1OEIwQjNFRkEyMkI3QUQwMDY1RDQ0MzhENkM0MkEyNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYSCkhN2G7BDAI2kZbCoX2NiK9
eefkv/EVG4x8N7Bx/rCQe6aEDC049UKEbmFs5YaGOB9eUH9hxVYVHt0PskS0D83M
cdGgekXMFGCqIDCwYEG7L1YZp7sooBhWoHKsqCUdTKSP0k0bS3Ni+1DI0/Y/n/A3
MX9opv6a1BhEx96B/oxRpkyEQ6aormfU66/vdGNXX8w63Oaui+xMoNhdM9uQDlL9
x92Mmdso8p1NJCJszAfW7mFwNIlNm+syvrr10s9jyvonSkionmsnVbGhsqUvTrLS
CLnDHwKkxe6kFWwhkOdX088UXaM/QXakC5XEtcxASCHb2RWCX19aJju+vk3PAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUR0/ftYsLPvoit60AZdRDjWxCokAwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1NzgxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqsOzANBgkqhkiG9w0BAQsFAAOCAQEAumVq
OkJ4T1hvCZCK7gso3ahogBE9S94ikUsOsHfnLh0cM5aSJFU2Ue2HA/eSw4+uBKXC
9XkA0b2rh53bsT8pWbvz62IIGFbmIGED80kWk8SiXSWJX4tAWOvBAlU1A1NlKqBO
Vu0gdPof56BP5A938uNZIURFEPgk3C0Wjv6XrvC0GTcWj4lBvBcxAwZ2VELY1ar2
mdSKHo4M5U+ttGf/Z4YWU4HtUgB9Xk8J+4k4q28gadJqKtp0whTX1mgbsrrNLW2x
uH7eRCrzRmT75REYrBPmAfnH5XPffnvxkqJwJUGt0Uc84BD1SxceTQMLF+/wwV+P
fsro4/bP9MtdYo9/nA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 11:24:25 2026 by rpki-client