Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145889.roa
File: AS145889.roa (raw, json)
Hash identifier: nqecxyx0OwVGvAI/9779ZdGDUoJqW7ESKd3bklk6cCY=
Subject key identifier: 7C:32:9D:D5:0A:78:53:F2:42:00:95:1A:D8:96:E4:92:84:4C:B5:10
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2887B4ABCE48B588C1B0B7D32D8DB5C4594D576D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145889.roa
Signing time: Fri 22 May 2026 06:46:15 +0000
ROA not before: Fri 22 May 2026 06:41:15 +0000
ROA not after: Fri 21 May 2027 06:46:15 +0000
asID: 145889
IP address blocks: 240a:aca7::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:87:b4:ab:ce:48:b5:88:c1:b0:b7:d3:2d:8d:b5:c4:59:4d:57:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:41:15 2026 GMT
Not After : May 21 06:46:15 2027 GMT
Subject: CN=7C329DD50A7853F24200951AD896E492844CB510
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:ca:85:bc:08:90:10:d9:5a:fc:64:f4:d1:44:
61:43:1e:2e:88:eb:09:51:e0:31:20:3a:00:d2:a1:
7c:99:ea:6d:39:82:2d:a6:e0:19:ed:ec:56:fd:1e:
2c:43:69:68:be:d3:00:4f:f9:89:39:ac:6b:21:36:
76:bf:57:23:e8:f5:3c:e3:a6:81:cf:03:49:74:e3:
2e:51:fc:c1:76:1a:61:d4:94:08:90:c9:97:ed:d9:
e2:c8:01:9f:54:93:24:ea:a0:1e:3a:15:6a:fd:3c:
25:36:3f:5a:a1:21:d5:39:bd:94:ea:5a:4b:dc:2d:
b5:5e:9f:cc:93:91:64:3b:6c:fa:b3:ff:d7:a9:7e:
54:a4:1c:2d:c0:00:dd:d2:ba:54:08:0c:3e:21:3a:
b4:ce:46:9d:97:b5:11:58:f7:79:9d:ee:5b:66:c9:
97:b1:89:29:bc:4e:a2:af:84:f1:da:5b:94:f3:28:
17:61:f8:53:28:8a:da:1c:20:c2:e8:e8:0b:cb:dd:
37:4a:1c:5b:4c:59:fe:d2:c8:69:58:b4:68:e4:a9:
c2:ac:53:40:67:34:ff:c1:27:6e:a1:b8:e8:44:d4:
67:10:d0:41:cf:16:4c:ca:65:35:7e:42:5e:bc:c7:
c8:2f:f3:29:51:10:32:2d:bd:f0:91:ba:a8:b9:c3:
6e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:32:9D:D5:0A:78:53:F2:42:00:95:1A:D8:96:E4:92:84:4C:B5:10
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145889.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aca7::/32
Signature Algorithm: sha256WithRSAEncryption
b2:92:9f:25:3a:df:66:3f:07:b3:5d:83:b4:22:a6:0f:97:66:
c5:23:47:f2:4a:ec:c2:a8:b5:5d:86:7f:26:da:ac:0f:c0:77:
34:da:39:e7:fc:6a:eb:be:52:63:a7:05:2a:af:86:ce:74:23:
0d:90:41:9c:48:37:5f:5b:fd:36:a4:af:90:5c:2a:8a:15:eb:
ab:aa:97:33:38:40:ec:4f:0f:a5:f8:52:8b:22:a1:aa:00:c1:
10:c3:79:15:02:8d:95:7d:19:7a:7f:8c:97:16:f8:7f:11:8f:
1b:82:e4:80:7d:64:38:6a:72:92:50:a8:05:61:ee:cc:a1:d7:
da:47:e4:23:19:24:4b:d0:bd:b0:8f:04:8e:74:b2:aa:5a:05:
37:06:17:50:38:54:ac:56:28:87:05:8d:26:c7:b2:d5:ca:36:
23:b8:55:4f:e6:af:56:1c:dc:ee:3e:44:52:d8:9a:38:e5:e7:
b3:b5:eb:55:7f:87:ef:5c:fc:86:ef:43:33:9a:07:d3:76:ac:
41:f7:9a:06:39:f6:27:43:6c:d3:e7:49:61:39:ca:d0:72:4e:
b1:b2:ad:5f:4d:84:d4:4e:53:b7:49:77:00:90:c8:f2:62:e9:
ff:47:87:e7:05:2c:e3:8d:d8:9b:01:d5:27:90:5e:fd:ee:27:
4d:ef:da:91
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUKIe0q85ItYjBsLfTLY21xFlNV20wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjQxMTVaFw0yNzA1MjEwNjQ2MTVaMDMxMTAvBgNV
BAMTKDdDMzI5REQ1MEE3ODUzRjI0MjAwOTUxQUQ4OTZFNDkyODQ0Q0I1MTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNyoW8CJAQ2Vr8ZPTRRGFDHi6I
6wlR4DEgOgDSoXyZ6m05gi2m4Bnt7Fb9HixDaWi+0wBP+Yk5rGshNna/VyPo9Tzj
poHPA0l04y5R/MF2GmHUlAiQyZft2eLIAZ9UkyTqoB46FWr9PCU2P1qhIdU5vZTq
WkvcLbVen8yTkWQ7bPqz/9epflSkHC3AAN3SulQIDD4hOrTORp2XtRFY93md7ltm
yZexiSm8TqKvhPHaW5TzKBdh+FMoitocIMLo6AvL3TdKHFtMWf7SyGlYtGjkqcKs
U0BnNP/BJ26huOhE1GcQ0EHPFkzKZTV+Ql68x8gv8ylREDItvfCRuqi5w25RAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUfDKd1Qp4U/JCAJUa2JbkkoRMtRAwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1ODg5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqspzANBgkqhkiG9w0BAQsFAAOCAQEAspKf
JTrfZj8Hs12DtCKmD5dmxSNH8krswqi1XYZ/JtqsD8B3NNo55/xq675SY6cFKq+G
znQjDZBBnEg3X1v9NqSvkFwqihXrq6qXMzhA7E8PpfhSiyKhqgDBEMN5FQKNlX0Z
en+Mlxb4fxGPG4LkgH1kOGpyklCoBWHuzKHX2kfkIxkkS9C9sI8EjnSyqloFNwYX
UDhUrFYohwWNJsey1co2I7hVT+avVhzc7j5EUtiaOOXns7XrVX+H71z8hu9DM5oH
03asQfeaBjn2J0Ns0+dJYTnK0HJOsbKtX02E1E5Tt0l3AJDI8mLp/0eH5wUs443Y
mwHVJ5Be/e4nTe/akQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:41 2026 by rpki-client