Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145948.roa
File: AS145948.roa (raw, json)
Hash identifier: 77neSAvAzVI09Ha+ydTRxZZGXWbGhFv2S/RpE+YYL+E=
Subject key identifier: 78:AE:6B:48:73:1D:16:8D:F8:3C:2C:5C:2A:2E:E7:C5:FE:74:7C:A0
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4ACB25DFD1290E1D11366B3ECDB48A976390AEB7
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145948.roa
Signing time: Fri 22 May 2026 04:08:13 +0000
ROA not before: Fri 22 May 2026 04:03:13 +0000
ROA not after: Fri 21 May 2027 04:08:13 +0000
asID: 145948
IP address blocks: 240a:ace2::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:cb:25:df:d1:29:0e:1d:11:36:6b:3e:cd:b4:8a:97:63:90:ae:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:03:13 2026 GMT
Not After : May 21 04:08:13 2027 GMT
Subject: CN=78AE6B48731D168DF83C2C5C2A2EE7C5FE747CA0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ef:34:3c:bb:1c:ad:bf:0d:76:e6:52:46:a9:
66:4a:20:3d:fa:1a:2b:1f:34:79:09:02:4f:35:45:
8d:4a:15:48:87:9e:13:67:12:a2:43:01:eb:a0:b1:
26:81:2d:f3:a5:0e:8f:b7:47:ef:f8:63:e4:4b:25:
10:b4:63:08:ee:59:f4:08:62:38:88:8f:00:24:ba:
07:c4:38:59:d9:67:a7:b5:80:af:07:d7:41:c4:88:
c9:2f:a8:1f:fa:8d:fc:d8:f0:b0:3b:11:27:72:62:
7b:89:83:68:1a:34:79:e3:fd:de:d4:7d:22:46:a5:
cf:c6:c0:91:e1:ca:93:e8:91:26:45:39:d4:03:13:
63:aa:4a:fc:10:ad:5c:cd:30:60:76:f0:89:26:22:
c5:8b:47:4b:0d:18:3a:2d:60:14:87:2e:28:81:29:
51:1d:19:d8:a1:47:71:e7:18:99:5d:e5:0e:1c:e4:
58:ab:bd:e6:cd:ef:0f:af:d8:45:dd:4a:26:03:b6:
83:63:c9:ee:38:fb:66:b4:21:56:97:f3:40:6d:28:
58:69:08:e6:5a:01:a9:a8:8c:a4:74:a3:dc:e6:8a:
7f:5f:e9:bc:61:86:ac:7f:24:12:76:5b:9f:79:d7:
8f:fb:de:e7:53:aa:ed:64:9f:f8:e9:c9:2d:93:07:
94:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:AE:6B:48:73:1D:16:8D:F8:3C:2C:5C:2A:2E:E7:C5:FE:74:7C:A0
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145948.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ace2::/32
Signature Algorithm: sha256WithRSAEncryption
47:05:62:17:e3:92:b9:e7:1d:e8:2a:2e:2e:2c:b7:b6:4c:ba:
bf:a1:24:ea:3e:ee:91:11:a6:b8:70:8a:1f:80:ff:27:ee:a4:
f2:6c:89:ad:fc:a7:9b:79:07:84:40:f3:7e:90:a0:03:a7:4c:
23:a6:9e:84:bf:eb:e1:0f:8e:dd:e3:a5:18:9d:63:5d:be:20:
f6:30:28:d5:d4:ce:11:55:b3:ec:7e:d7:bb:83:44:b8:c5:86:
b5:61:4a:ea:21:dc:0a:ba:9c:07:07:77:87:33:60:80:23:ab:
c6:05:1c:19:cb:ca:2b:3d:2d:07:09:dc:17:f7:bd:20:dc:cb:
05:df:de:89:93:28:0a:9b:fa:cb:59:64:b3:c5:42:90:b9:9c:
d4:24:79:c1:d9:19:28:e4:df:f9:fc:17:36:d2:c8:1b:40:b2:
20:e3:c5:e8:18:66:52:2e:f3:4f:f1:03:7d:0a:64:5b:60:c3:
49:6a:3f:f2:44:d4:53:8e:0f:31:46:d3:8d:13:70:a6:ec:2d:
d2:5d:5d:6a:b2:8d:86:a3:18:a5:d2:8b:ac:97:2f:4a:64:71:
c6:de:eb:ba:71:31:3c:7f:ef:79:d7:42:2e:5b:33:e6:da:89:
be:00:89:02:c9:7c:98:af:37:70:d7:09:c0:6a:91:47:c4:c3:
d0:b4:e0:19
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUSssl39EpDh0RNms+zbSKl2OQrrcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNDAzMTNaFw0yNzA1MjEwNDA4MTNaMDMxMTAvBgNV
BAMTKDc4QUU2QjQ4NzMxRDE2OERGODNDMkM1QzJBMkVFN0M1RkU3NDdDQTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk7zQ8uxytvw125lJGqWZKID36
GisfNHkJAk81RY1KFUiHnhNnEqJDAeugsSaBLfOlDo+3R+/4Y+RLJRC0YwjuWfQI
YjiIjwAkugfEOFnZZ6e1gK8H10HEiMkvqB/6jfzY8LA7ESdyYnuJg2gaNHnj/d7U
fSJGpc/GwJHhypPokSZFOdQDE2OqSvwQrVzNMGB28IkmIsWLR0sNGDotYBSHLiiB
KVEdGdihR3HnGJld5Q4c5FirvebN7w+v2EXdSiYDtoNjye44+2a0IVaX80BtKFhp
COZaAamojKR0o9zmin9f6bxhhqx/JBJ2W59514/73udTqu1kn/jpyS2TB5RFAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUeK5rSHMdFo34PCxcKi7nxf50fKAwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1OTQ4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqs4jANBgkqhkiG9w0BAQsFAAOCAQEARwVi
F+OSuecd6CouLiy3tky6v6Ek6j7ukRGmuHCKH4D/J+6k8myJrfynm3kHhEDzfpCg
A6dMI6aehL/r4Q+O3eOlGJ1jXb4g9jAo1dTOEVWz7H7Xu4NEuMWGtWFK6iHcCrqc
Bwd3hzNggCOrxgUcGcvKKz0tBwncF/e9INzLBd/eiZMoCpv6y1lks8VCkLmc1CR5
wdkZKOTf+fwXNtLIG0CyIOPF6BhmUi7zT/EDfQpkW2DDSWo/8kTUU44PMUbTjRNw
puwt0l1darKNhqMYpdKLrJcvSmRxxt7runExPH/veddCLlsz5tqJvgCJAsl8mK83
cNcJwGqRR8TD0LTgGQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:20 2026 by rpki-client