Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145787.roa
File: AS145787.roa (raw, json)
Hash identifier: PzLxU38iqsLAtl9PEEzH+o8Og+yhpWpqIkFqBStLZ/k=
Subject key identifier: 38:99:98:BA:45:7F:B7:42:86:A7:FF:45:64:62:F0:E1:34:5D:C9:2D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3EA47C1B0DB2D3AE1A677895B01EBA57FEFED6A9
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145787.roa
Signing time: Mon 25 May 2026 06:48:43 +0000
ROA not before: Mon 25 May 2026 06:43:43 +0000
ROA not after: Mon 24 May 2027 06:48:43 +0000
asID: 145787
IP address blocks: 240a:ac41::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:a4:7c:1b:0d:b2:d3:ae:1a:67:78:95:b0:1e:ba:57:fe:fe:d6:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:43:43 2026 GMT
Not After : May 24 06:48:43 2027 GMT
Subject: CN=389998BA457FB74286A7FF456462F0E1345DC92D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:95:83:ff:d7:0a:4c:a3:e5:74:69:b8:e6:20:
33:ad:0a:44:2b:40:c2:c1:c6:21:1d:e3:cf:08:b6:
c5:03:bb:de:94:a7:34:ea:37:0c:fd:e9:ff:d5:bb:
53:f0:ee:e7:e5:ce:0c:ec:c6:e3:af:b0:d5:cc:8e:
df:9a:77:46:d5:b6:8c:78:78:f2:3d:4b:8f:b4:06:
8b:03:53:b9:45:c2:09:9f:b1:55:f7:b8:06:29:a7:
66:97:59:16:c7:5a:a0:7f:8b:67:4d:6a:8e:38:a2:
0c:8d:18:d9:b8:bd:67:ec:cc:b6:45:70:5a:65:bc:
b7:8f:53:2a:b5:92:53:cd:3d:c4:8e:bf:6e:9b:66:
ae:77:0a:0d:8f:cc:6e:45:f7:67:68:9f:4e:48:66:
5a:8d:87:88:19:aa:bb:5e:7a:1e:be:82:d9:78:8f:
41:7b:de:4f:63:a0:d7:4f:f5:1b:79:a8:58:27:5b:
cf:33:ba:66:3b:35:ec:93:be:c2:c3:e9:2e:f3:56:
b8:58:27:27:b6:7e:65:b0:be:59:eb:8e:30:f9:e9:
26:72:00:25:62:bf:3e:53:6b:49:43:96:58:e2:57:
a4:b8:9a:ff:8a:19:10:c6:22:bd:da:5e:76:20:b4:
40:a9:eb:1e:d1:05:3c:5a:29:00:12:24:d9:2a:85:
5b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:99:98:BA:45:7F:B7:42:86:A7:FF:45:64:62:F0:E1:34:5D:C9:2D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145787.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ac41::/32
Signature Algorithm: sha256WithRSAEncryption
40:78:71:fc:cd:cb:db:1e:f3:56:1f:7f:91:76:fd:0c:ae:88:
79:7a:75:4d:6c:55:80:2a:f6:aa:5c:70:ac:54:58:f5:8d:6d:
23:66:b8:0d:5a:d1:00:61:95:e3:f9:1e:d4:2f:13:87:08:e1:
37:3e:7d:57:b3:ad:0b:0a:e8:af:ae:18:c0:30:d5:21:12:31:
d3:5d:43:78:0e:6d:b0:fc:8a:ed:e0:7c:0b:d8:b3:33:2a:60:
18:55:39:f7:6d:70:47:2c:0e:0b:04:a7:b1:b6:12:80:66:73:
fb:b0:07:4b:4b:02:3c:1a:56:6d:b7:f6:8a:c7:68:de:40:e3:
c7:30:7b:dc:c6:35:32:dd:a6:cd:36:ed:22:9e:ca:b1:68:0f:
16:52:78:e8:6b:4f:d4:82:8b:ec:b1:2c:49:ab:12:b1:b1:97:
ab:3f:a5:d9:9e:92:c5:a9:f7:d3:76:dd:54:49:b2:9a:84:24:
e4:56:a5:45:95:e7:93:88:1f:53:40:6b:ba:cb:1f:d5:53:8e:
4f:83:f6:93:24:6c:4e:4a:63:92:41:b7:5e:69:7e:94:ac:e6:
29:ed:9a:25:b7:58:3f:c6:08:30:9e:41:62:18:30:47:fe:13:
70:64:d3:2d:52:fc:c1:b9:a8:39:37:f7:33:77:7a:ba:e9:d9:
5c:7a:38:6a
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUPqR8Gw2y064aZ3iVsB66V/7+1qkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwNjQzNDNaFw0yNzA1MjQwNjQ4NDNaMDMxMTAvBgNV
BAMTKDM4OTk5OEJBNDU3RkI3NDI4NkE3RkY0NTY0NjJGMEUxMzQ1REM5MkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzlYP/1wpMo+V0abjmIDOtCkQr
QMLBxiEd488ItsUDu96UpzTqNwz96f/Vu1Pw7uflzgzsxuOvsNXMjt+ad0bVtox4
ePI9S4+0BosDU7lFwgmfsVX3uAYpp2aXWRbHWqB/i2dNao44ogyNGNm4vWfszLZF
cFplvLePUyq1klPNPcSOv26bZq53Cg2PzG5F92don05IZlqNh4gZqrteeh6+gtl4
j0F73k9joNdP9Rt5qFgnW88zumY7NeyTvsLD6S7zVrhYJye2fmWwvlnrjjD56SZy
ACVivz5Ta0lDlljiV6S4mv+KGRDGIr3aXnYgtECp6x7RBTxaKQASJNkqhVtFAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUOJmYukV/t0KGp/9FZGLw4TRdyS0wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1Nzg3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqsQTANBgkqhkiG9w0BAQsFAAOCAQEAQHhx
/M3L2x7zVh9/kXb9DK6IeXp1TWxVgCr2qlxwrFRY9Y1tI2a4DVrRAGGV4/ke1C8T
hwjhNz59V7OtCwror64YwDDVIRIx011DeA5tsPyK7eB8C9izMypgGFU5921wRywO
CwSnsbYSgGZz+7AHS0sCPBpWbbf2isdo3kDjxzB73MY1Mt2mzTbtIp7KsWgPFlJ4
6GtP1IKL7LEsSasSsbGXqz+l2Z6Sxan303bdVEmymoQk5FalRZXnk4gfU0Brussf
1VOOT4P2kyRsTkpjkkG3Xml+lKzmKe2aJbdYP8YIMJ5BYhgwR/4TcGTTLVL8wbmo
OTf3M3d6uunZXHo4ag==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:10 2026 by rpki-client