Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145849.roa
File: AS145849.roa (raw, json)
Hash identifier: AUJWQW1U7rQ9uIFeXkW8IZ4VFWAHAgREm5rVnjI8+D0=
Subject key identifier: E7:4A:8E:2B:8C:E7:1C:25:7B:51:7F:6D:6E:47:B7:7E:D0:4E:AE:57
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1483477F2D168BE08341E806A2C69C255908E15F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145849.roa
Signing time: Tue 26 May 2026 02:35:25 +0000
ROA not before: Tue 26 May 2026 02:30:25 +0000
ROA not after: Tue 25 May 2027 02:35:25 +0000
asID: 145849
IP address blocks: 240a:ac7f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:83:47:7f:2d:16:8b:e0:83:41:e8:06:a2:c6:9c:25:59:08:e1:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:30:25 2026 GMT
Not After : May 25 02:35:25 2027 GMT
Subject: CN=E74A8E2B8CE71C257B517F6D6E47B77ED04EAE57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1d:69:bd:d4:eb:d4:95:09:5c:80:6a:59:cc:
07:ac:b6:5c:ee:dc:7d:d0:62:24:42:94:fd:37:32:
a6:d8:e7:02:0d:4d:88:00:21:22:82:a3:68:d6:1b:
29:41:a7:1c:3c:19:fc:33:61:2d:7c:64:f5:7d:00:
12:81:bf:81:5a:88:19:06:03:85:08:3a:37:b0:00:
05:1e:ca:d0:f7:1f:b4:8d:f4:55:32:ff:1a:85:02:
af:3c:c8:89:86:b4:ba:de:d3:47:06:61:42:7d:0c:
e3:d4:80:f8:57:2a:b9:99:30:9e:d1:24:44:32:04:
88:57:84:37:77:da:0d:8a:a0:b0:01:f3:5b:d8:52:
e5:1f:60:8e:91:69:d4:61:c7:da:0f:0e:d7:c3:21:
5d:26:9a:b2:d9:50:f7:6e:16:ca:9d:8f:26:50:ec:
48:47:32:3f:e4:a8:57:05:d4:9a:ff:35:b2:81:97:
d0:3a:3a:9e:fc:b8:23:74:a1:31:35:5c:54:27:80:
8f:5a:0e:d3:64:78:8b:27:14:dd:ce:35:d3:62:4a:
7f:f0:11:c7:1e:59:9c:3a:df:58:98:84:1c:dc:a5:
8b:1e:15:34:5f:48:3a:cd:63:29:8f:ab:2e:b8:ee:
08:f8:9d:59:d7:0a:f3:dc:08:e8:04:a8:f5:bf:66:
0c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:4A:8E:2B:8C:E7:1C:25:7B:51:7F:6D:6E:47:B7:7E:D0:4E:AE:57
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145849.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ac7f::/32
Signature Algorithm: sha256WithRSAEncryption
58:95:25:a2:ab:57:fe:91:d7:27:5f:9c:b2:33:b8:8c:8b:3d:
fb:61:6e:2c:31:7e:f5:30:f0:91:83:aa:bb:ac:1b:00:24:84:
37:b3:e1:54:d0:6a:14:ae:8d:57:de:23:76:4c:c2:35:b1:5e:
8c:0e:8e:65:42:8c:34:e7:80:ba:67:f8:92:2d:55:b4:b8:c8:
2d:09:1c:15:1f:34:f5:6d:04:91:3d:04:f2:66:02:56:f6:2a:
fb:ef:95:7e:6d:f1:7d:f4:28:9c:dc:f0:c5:5c:95:ba:f7:65:
84:89:8f:cf:c7:36:54:42:1f:6f:3f:88:d5:9c:d8:1c:7d:1b:
13:e3:8f:d1:e8:89:97:be:9d:8b:20:7f:5c:76:ae:13:5c:4f:
fb:f2:eb:96:42:d1:3e:66:91:b5:ac:8d:ff:5f:60:d6:20:84:
c1:de:3d:15:60:17:45:c0:14:b9:33:fd:af:14:ef:c0:4b:42:
fc:95:eb:65:b3:d8:3c:9b:c7:a1:d0:ce:01:ff:54:84:9f:e5:
be:43:61:56:47:c4:1e:60:b6:99:bc:ea:19:df:bb:b0:26:ed:
50:27:40:07:2b:a3:25:e8:38:40:53:ea:83:22:6e:8f:02:5a:
7c:51:58:87:f3:85:91:78:de:b1:e2:d7:47:7b:d9:e8:6d:c1:
8b:57:1c:ca
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUFINHfy0Wi+CDQegGosacJVkI4V8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMjMwMjVaFw0yNzA1MjUwMjM1MjVaMDMxMTAvBgNV
BAMTKEU3NEE4RTJCOENFNzFDMjU3QjUxN0Y2RDZFNDdCNzdFRDA0RUFFNTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyHWm91OvUlQlcgGpZzAestlzu
3H3QYiRClP03MqbY5wINTYgAISKCo2jWGylBpxw8GfwzYS18ZPV9ABKBv4FaiBkG
A4UIOjewAAUeytD3H7SN9FUy/xqFAq88yImGtLre00cGYUJ9DOPUgPhXKrmZMJ7R
JEQyBIhXhDd32g2KoLAB81vYUuUfYI6RadRhx9oPDtfDIV0mmrLZUPduFsqdjyZQ
7EhHMj/kqFcF1Jr/NbKBl9A6Op78uCN0oTE1XFQngI9aDtNkeIsnFN3ONdNiSn/w
EcceWZw631iYhBzcpYseFTRfSDrNYymPqy647gj4nVnXCvPcCOgEqPW/ZgzpAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU50qOK4znHCV7UX9tbke3ftBOrlcwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1ODQ5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqsfzANBgkqhkiG9w0BAQsFAAOCAQEAWJUl
oqtX/pHXJ1+csjO4jIs9+2FuLDF+9TDwkYOqu6wbACSEN7PhVNBqFK6NV94jdkzC
NbFejA6OZUKMNOeAumf4ki1VtLjILQkcFR809W0EkT0E8mYCVvYq+++Vfm3xffQo
nNzwxVyVuvdlhImPz8c2VEIfbz+I1ZzYHH0bE+OP0eiJl76diyB/XHauE1xP+/Lr
lkLRPmaRtayN/19g1iCEwd49FWAXRcAUuTP9rxTvwEtC/JXrZbPYPJvHodDOAf9U
hJ/lvkNhVkfEHmC2mbzqGd+7sCbtUCdAByujJeg4QFPqgyJujwJafFFYh/OFkXje
seLXR3vZ6G3Bi1ccyg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:17 2026 by rpki-client