Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145871.roa
File: AS145871.roa (raw, json)
Hash identifier: 47XXgJf0GwGhlT6WpW9+OA3DDOg8cNRbsizlNETuWEA=
Subject key identifier: FC:E7:C1:49:36:55:0A:B6:E3:D8:B0:BE:2D:4A:E2:54:E4:F7:0B:6B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 781802866F6DB8A50C0D1CCC5F4358387010DE6F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145871.roa
Signing time: Fri 22 May 2026 07:09:17 +0000
ROA not before: Fri 22 May 2026 07:04:17 +0000
ROA not after: Fri 21 May 2027 07:09:17 +0000
asID: 145871
IP address blocks: 240a:ac95::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:18:02:86:6f:6d:b8:a5:0c:0d:1c:cc:5f:43:58:38:70:10:de:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:04:17 2026 GMT
Not After : May 21 07:09:17 2027 GMT
Subject: CN=FCE7C14936550AB6E3D8B0BE2D4AE254E4F70B6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:46:00:02:a5:13:9b:cd:9e:4a:2f:45:3b:8d:
90:c5:10:c6:d1:01:15:9e:16:16:82:40:18:83:52:
82:19:67:da:90:1d:26:35:aa:25:3d:47:3d:04:5a:
6a:3f:87:2a:9e:ea:9e:aa:70:be:98:c4:68:66:60:
e7:ef:cb:19:58:f4:ba:b3:1a:2d:95:25:22:77:a3:
ed:1f:13:9f:07:93:53:2b:eb:82:6e:29:aa:cf:18:
5f:40:91:39:43:43:2c:0d:d5:de:ed:eb:c7:4a:2b:
24:27:78:aa:52:37:d8:f8:df:f1:5c:37:46:54:d7:
96:9b:91:41:bf:75:e1:0c:14:dc:61:3e:e1:96:7f:
86:19:f3:41:f0:84:58:67:cc:64:80:61:58:7b:cb:
33:33:7c:69:ab:cd:f9:e0:97:ed:8d:29:67:e6:29:
9a:e5:9d:ad:cb:5b:6d:4f:fc:a5:f1:3a:70:ca:08:
74:46:da:db:cb:20:17:ee:d4:86:c8:c5:38:63:c1:
88:25:cf:c2:bf:81:49:5c:94:58:1a:68:24:3d:81:
eb:50:8b:ac:26:a9:84:a2:3a:9d:7e:a1:87:a8:f9:
98:4b:3a:e4:48:97:24:a7:e7:36:a8:62:9d:30:fa:
40:ac:61:42:a4:bf:02:45:1d:37:e0:8a:68:86:a7:
31:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:E7:C1:49:36:55:0A:B6:E3:D8:B0:BE:2D:4A:E2:54:E4:F7:0B:6B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145871.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ac95::/32
Signature Algorithm: sha256WithRSAEncryption
43:5f:78:95:22:47:01:b6:34:8e:41:16:02:03:87:46:3c:8a:
a9:69:b4:28:5a:41:21:52:30:ab:dc:54:cf:c1:66:b9:42:f2:
d9:77:d3:a5:03:2f:b9:e8:cc:82:d6:2b:b3:33:74:01:fb:44:
94:3a:0c:c5:36:47:73:b5:4e:52:9e:cd:89:e9:7d:43:e8:0d:
57:6f:bd:36:e7:86:b8:41:fb:39:f2:cb:22:91:94:f4:00:d7:
85:fd:e5:40:7f:d1:7c:6d:39:05:80:ce:16:63:04:2b:0a:e3:
a0:50:50:31:c9:40:a6:00:71:89:ac:f1:51:cb:78:6e:02:29:
5b:ef:53:a5:61:af:53:dd:83:42:82:01:2d:cf:0a:fa:9f:3d:
1b:45:34:bb:90:b1:51:6a:15:d8:13:27:ea:b5:4b:5a:30:4c:
97:c7:4a:c6:50:c7:36:f7:39:c5:b7:03:47:9a:6f:25:ac:a2:
8b:81:e1:e5:87:59:40:fb:96:7c:63:39:f0:42:2c:f1:3d:b6:
17:23:2f:bf:af:d3:b2:18:0e:35:a0:83:67:b4:c4:47:60:f1:
2b:44:ce:b3:87:7e:53:44:a3:fd:07:c0:d0:1d:bc:5a:5d:eb:
20:81:fd:42:3c:cc:74:57:93:82:f0:6e:17:4c:c3:ed:7c:3e:
b8:6e:a9:c7
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUeBgChm9tuKUMDRzMX0NYOHAQ3m8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzA0MTdaFw0yNzA1MjEwNzA5MTdaMDMxMTAvBgNV
BAMTKEZDRTdDMTQ5MzY1NTBBQjZFM0Q4QjBCRTJENEFFMjU0RTRGNzBCNkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrRgACpRObzZ5KL0U7jZDFEMbR
ARWeFhaCQBiDUoIZZ9qQHSY1qiU9Rz0EWmo/hyqe6p6qcL6YxGhmYOfvyxlY9Lqz
Gi2VJSJ3o+0fE58Hk1Mr64JuKarPGF9AkTlDQywN1d7t68dKKyQneKpSN9j43/Fc
N0ZU15abkUG/deEMFNxhPuGWf4YZ80HwhFhnzGSAYVh7yzMzfGmrzfngl+2NKWfm
KZrlna3LW21P/KXxOnDKCHRG2tvLIBfu1IbIxThjwYglz8K/gUlclFgaaCQ9getQ
i6wmqYSiOp1+oYeo+ZhLOuRIlySn5zaoYp0w+kCsYUKkvwJFHTfgimiGpzGBAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU/OfBSTZVCrbj2LC+LUriVOT3C2swHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1ODcxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqslTANBgkqhkiG9w0BAQsFAAOCAQEAQ194
lSJHAbY0jkEWAgOHRjyKqWm0KFpBIVIwq9xUz8FmuULy2XfTpQMvuejMgtYrszN0
AftElDoMxTZHc7VOUp7Niel9Q+gNV2+9NueGuEH7OfLLIpGU9ADXhf3lQH/RfG05
BYDOFmMEKwrjoFBQMclApgBxiazxUct4bgIpW+9TpWGvU92DQoIBLc8K+p89G0U0
u5CxUWoV2BMn6rVLWjBMl8dKxlDHNvc5xbcDR5pvJayii4Hh5YdZQPuWfGM58EIs
8T22FyMvv6/TshgONaCDZ7TER2DxK0TOs4d+U0Sj/QfA0B28Wl3rIIH9QjzMdFeT
gvBuF0zD7Xw+uG6pxw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:30 2026 by rpki-client