Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145885.roa
File: AS145885.roa (raw, json)
Hash identifier: rWH4sKA2DP/CibWnKc/0Ow52v/nRimU7DNP6dXdN6aA=
Subject key identifier: AD:1E:50:AF:1E:7F:F4:AB:5F:63:B2:22:F0:CA:85:0E:65:84:47:B0
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 02E5F9E60AED90D819183F4250FBD3E8D92353DA
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145885.roa
Signing time: Fri 22 May 2026 06:05:24 +0000
ROA not before: Fri 22 May 2026 06:00:24 +0000
ROA not after: Fri 21 May 2027 06:05:24 +0000
asID: 145885
IP address blocks: 240a:aca3::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:e5:f9:e6:0a:ed:90:d8:19:18:3f:42:50:fb:d3:e8:d9:23:53:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:24 2026 GMT
Not After : May 21 06:05:24 2027 GMT
Subject: CN=AD1E50AF1E7FF4AB5F63B222F0CA850E658447B0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:77:63:24:0a:78:59:64:41:52:35:c2:cf:e2:
e5:36:d0:7a:4a:5e:14:5e:ec:7f:e4:b9:1f:93:2e:
6a:e5:16:69:61:6a:70:57:d5:d8:bc:9b:a5:94:82:
ed:fa:39:d3:43:f6:b9:16:5d:f3:7e:b8:5b:5a:4c:
3a:49:2b:a8:18:03:b6:e5:49:6a:60:87:28:82:1e:
a6:68:6b:55:dc:94:93:87:ef:c0:f2:43:0b:c6:19:
67:09:a7:48:9b:8a:c9:a6:76:63:d2:f1:85:ad:34:
51:d7:23:74:60:59:ad:c3:11:78:c7:ef:69:3b:47:
09:f9:35:9b:61:90:69:f7:77:39:df:bf:02:85:ff:
f9:ca:7b:5f:a7:b9:66:09:53:34:98:0a:21:a1:86:
37:28:1a:fd:bd:9c:70:11:0e:f7:79:26:a8:83:d7:
1d:7f:13:25:bd:f0:b0:76:b0:20:8d:45:bd:c1:78:
54:45:80:5c:08:9e:97:ff:ca:da:a3:0f:ed:d9:e2:
1a:fa:d3:8e:46:b5:8d:31:2f:0c:e4:03:ea:a5:fe:
67:80:10:4f:eb:89:5c:95:4c:20:07:83:73:76:b6:
82:92:18:f5:0f:8b:0d:a1:cd:f2:6d:cd:73:a9:3d:
da:34:b2:7c:d4:08:a9:5b:c1:18:24:91:2a:e6:a6:
3a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:1E:50:AF:1E:7F:F4:AB:5F:63:B2:22:F0:CA:85:0E:65:84:47:B0
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145885.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aca3::/32
Signature Algorithm: sha256WithRSAEncryption
93:8f:2e:58:ed:b9:bd:13:9c:71:4a:08:7f:a2:fe:82:9a:dc:
8c:6b:47:8a:10:86:49:9f:96:af:08:6b:8a:ea:92:2e:4b:dc:
9b:d2:bd:51:c3:17:99:b0:2e:14:f9:91:f7:bc:a5:b8:6f:fa:
0d:d3:d7:60:1e:e0:38:a3:2d:67:d8:59:88:c7:8d:e3:19:51:
fa:a0:fd:af:df:3d:22:88:a4:33:5b:79:1d:06:20:d4:ff:51:
b2:41:a7:24:d7:af:06:04:ac:a7:11:41:d2:69:9f:4c:85:e7:
72:0d:59:57:8d:3c:a5:61:0a:6d:5a:74:85:ca:2c:94:ca:95:
5a:3c:7c:75:b4:8a:81:ab:f1:dd:c1:71:d1:b2:9a:11:48:69:
8c:30:0b:69:a0:6a:7a:1a:a7:c9:88:1d:2b:4e:12:8b:58:7a:
02:a9:24:9e:e9:84:57:08:ab:de:36:59:41:8d:45:81:7f:2b:
73:ca:46:06:15:fd:31:65:94:d7:6f:f8:73:0f:fa:18:26:72:
f7:5e:10:c5:ff:ef:7b:c1:87:35:dc:82:cc:67:29:b5:94:53:
63:f4:07:ae:10:67:89:e1:56:1c:9c:10:e6:12:41:af:e1:f1:
13:cc:6c:7d:19:7e:bf:77:c9:08:38:fd:6a:e8:3f:c2:88:a0:
a7:95:bd:4d
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUAuX55grtkNgZGD9CUPvT6NkjU9owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjAwMjRaFw0yNzA1MjEwNjA1MjRaMDMxMTAvBgNV
BAMTKEFEMUU1MEFGMUU3RkY0QUI1RjYzQjIyMkYwQ0E4NTBFNjU4NDQ3QjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGd2MkCnhZZEFSNcLP4uU20HpK
XhRe7H/kuR+TLmrlFmlhanBX1di8m6WUgu36OdND9rkWXfN+uFtaTDpJK6gYA7bl
SWpghyiCHqZoa1XclJOH78DyQwvGGWcJp0ibismmdmPS8YWtNFHXI3RgWa3DEXjH
72k7Rwn5NZthkGn3dznfvwKF//nKe1+nuWYJUzSYCiGhhjcoGv29nHARDvd5JqiD
1x1/EyW98LB2sCCNRb3BeFRFgFwInpf/ytqjD+3Z4hr6045GtY0xLwzkA+ql/meA
EE/riVyVTCAHg3N2toKSGPUPiw2hzfJtzXOpPdo0snzUCKlbwRgkkSrmpjpHAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUrR5Qrx5/9KtfY7Ii8MqFDmWER7AwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1ODg1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqsozANBgkqhkiG9w0BAQsFAAOCAQEAk48u
WO25vROccUoIf6L+gprcjGtHihCGSZ+WrwhriuqSLkvcm9K9UcMXmbAuFPmR97yl
uG/6DdPXYB7gOKMtZ9hZiMeN4xlR+qD9r989IoikM1t5HQYg1P9RskGnJNevBgSs
pxFB0mmfTIXncg1ZV408pWEKbVp0hcoslMqVWjx8dbSKgavx3cFx0bKaEUhpjDAL
aaBqehqnyYgdK04Si1h6AqkknumEVwir3jZZQY1FgX8rc8pGBhX9MWWU12/4cw/6
GCZy914Qxf/ve8GHNdyCzGcptZRTY/QHrhBnieFWHJwQ5hJBr+HxE8xsfRl+v3fJ
CDj9aug/woigp5W9TQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:37 2026 by rpki-client