Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145891.roa
File: AS145891.roa (raw, json)
Hash identifier: kU9oQ4ht4mScafNvl7Z9bwO1M23vLU5IMI0IB3QnGtg=
Subject key identifier: 09:BF:2B:21:3A:AD:00:8E:E2:31:7A:B5:53:75:3B:D7:1E:7C:50:E0
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 035F46BBD35B8EC9B7F627007DBA7F8BC92C68C2
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145891.roa
Signing time: Mon 25 May 2026 03:19:51 +0000
ROA not before: Mon 25 May 2026 03:14:51 +0000
ROA not after: Mon 24 May 2027 03:19:51 +0000
asID: 145891
IP address blocks: 240a:aca9::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:5f:46:bb:d3:5b:8e:c9:b7:f6:27:00:7d:ba:7f:8b:c9:2c:68:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:51 2026 GMT
Not After : May 24 03:19:51 2027 GMT
Subject: CN=09BF2B213AAD008EE2317AB553753BD71E7C50E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:9d:76:7b:6e:53:f7:30:86:b4:ab:c9:c6:8e:
8f:5c:d0:57:33:9c:df:f4:e9:36:fd:96:64:1c:04:
a1:50:33:36:ca:bc:f0:53:04:b9:5e:a2:69:f7:a6:
ff:16:ab:1c:e6:57:c0:ab:93:8a:6b:46:75:c7:b1:
59:18:24:71:e6:be:01:dc:d8:f0:98:b9:8b:f2:f3:
22:ef:95:0a:4d:f4:bc:51:55:3c:c5:68:8f:7d:8d:
72:15:86:f1:48:1e:f3:33:b5:06:3b:e4:e5:04:7b:
f4:a2:35:0a:42:30:82:51:36:82:8d:0a:83:20:83:
30:cf:a7:ba:d7:80:16:ad:c5:76:4a:df:c8:e8:29:
f3:6f:28:29:48:9c:cc:79:1b:2c:f9:62:d4:93:28:
5d:4a:43:5e:54:8a:7e:79:7a:ca:a1:ed:33:76:85:
6e:7b:e1:e1:cd:4e:30:47:f8:ee:5d:f5:0c:3c:88:
e5:27:2a:af:bc:d6:25:14:35:f9:a2:30:bd:1f:d6:
08:8f:b9:9e:cf:4f:a3:ae:1a:29:c6:e4:49:c4:59:
eb:4b:2e:60:b0:64:fc:2f:19:e4:d6:14:d3:f1:29:
72:30:df:b1:26:51:38:10:c3:af:c1:5e:e8:6b:d4:
c6:8f:4d:66:31:c9:91:5a:cd:ab:ae:64:24:f8:67:
c3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:BF:2B:21:3A:AD:00:8E:E2:31:7A:B5:53:75:3B:D7:1E:7C:50:E0
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145891.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aca9::/32
Signature Algorithm: sha256WithRSAEncryption
6c:47:51:1e:a4:64:03:32:4d:15:4f:a7:82:7c:1a:6b:99:b5:
ec:99:af:7f:b4:a5:9b:9c:b8:24:f6:04:27:d9:9d:70:94:fc:
54:3b:eb:f4:9d:ab:04:0d:db:e4:56:56:53:e9:34:4b:f8:82:
ea:f4:50:84:97:24:86:96:ae:30:81:46:7b:5a:23:a4:51:10:
6c:13:d4:25:6b:a2:71:c1:3e:f1:8d:61:77:b4:f2:36:a0:d7:
86:91:27:72:6c:82:b7:af:91:3a:6e:7d:f5:bb:6b:ee:26:b1:
0b:79:9d:9b:ef:d2:62:a2:17:8d:99:2c:b7:1e:bf:a9:15:a2:
05:87:eb:11:ab:70:de:5a:cb:a0:4e:02:40:c6:1c:4c:b7:c1:
e3:8f:1d:35:05:b5:7e:cd:e6:c8:50:e2:a2:70:2b:85:2f:10:
67:49:e6:ee:ed:33:a8:a4:71:9a:ab:57:98:67:98:3e:8b:24:
b9:c8:e7:26:cc:e5:81:30:07:72:f9:c5:80:8c:98:0b:b3:b4:
6c:f0:e2:da:b7:a1:a9:14:f1:42:f5:69:49:74:f4:af:cf:1f:
f8:00:8f:d8:74:11:dc:bc:a8:06:19:b5:e3:9b:2e:8c:b5:6d:
2b:b8:3a:8a:c3:52:a7:af:21:84:db:bb:a1:3a:87:42:40:58:
6a:8c:d4:66
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUA19Gu9Nbjsm39icAfbp/i8ksaMIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMzE0NTFaFw0yNzA1MjQwMzE5NTFaMDMxMTAvBgNV
BAMTKDA5QkYyQjIxM0FBRDAwOEVFMjMxN0FCNTUzNzUzQkQ3MUU3QzUwRTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDunXZ7blP3MIa0q8nGjo9c0Fcz
nN/06Tb9lmQcBKFQMzbKvPBTBLleomn3pv8WqxzmV8Crk4prRnXHsVkYJHHmvgHc
2PCYuYvy8yLvlQpN9LxRVTzFaI99jXIVhvFIHvMztQY75OUEe/SiNQpCMIJRNoKN
CoMggzDPp7rXgBatxXZK38joKfNvKClInMx5Gyz5YtSTKF1KQ15Uin55esqh7TN2
hW574eHNTjBH+O5d9Qw8iOUnKq+81iUUNfmiML0f1giPuZ7PT6OuGinG5EnEWetL
LmCwZPwvGeTWFNPxKXIw37EmUTgQw6/BXuhr1MaPTWYxyZFazauuZCT4Z8PTAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUCb8rITqtAI7iMXq1U3U71x58UOAwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1ODkxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqsqTANBgkqhkiG9w0BAQsFAAOCAQEAbEdR
HqRkAzJNFU+ngnwaa5m17Jmvf7Slm5y4JPYEJ9mdcJT8VDvr9J2rBA3b5FZWU+k0
S/iC6vRQhJckhpauMIFGe1ojpFEQbBPUJWuiccE+8Y1hd7TyNqDXhpEncmyCt6+R
Om599btr7iaxC3mdm+/SYqIXjZkstx6/qRWiBYfrEatw3lrLoE4CQMYcTLfB448d
NQW1fs3myFDionArhS8QZ0nm7u0zqKRxmqtXmGeYPoskucjnJszlgTAHcvnFgIyY
C7O0bPDi2rehqRTxQvVpSXT0r88f+ACP2HQR3LyoBhm145sujLVtK7g6isNSp68h
hNu7oTqHQkBYaozUZg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:27 2026 by rpki-client