Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145950.roa
File: AS145950.roa (raw, json)
Hash identifier: GQ1RANxCjPuKVdPgQFCoFXa1PVrHRvDGpwx2ohw/xa8=
Subject key identifier: E1:27:45:5D:AF:0D:55:A2:DE:09:BF:27:15:B8:85:A0:56:3F:BD:08
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6F50E696590CF967ACEC67559B983021E80400B4
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145950.roa
Signing time: Tue 26 May 2026 08:52:55 +0000
ROA not before: Tue 26 May 2026 08:47:55 +0000
ROA not after: Tue 25 May 2027 08:52:55 +0000
asID: 145950
IP address blocks: 240a:ace4::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:50:e6:96:59:0c:f9:67:ac:ec:67:55:9b:98:30:21:e8:04:00:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 08:47:55 2026 GMT
Not After : May 25 08:52:55 2027 GMT
Subject: CN=E127455DAF0D55A2DE09BF2715B885A0563FBD08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:72:f7:e4:5a:b0:c8:03:f8:d6:ff:ee:75:94:
d8:5e:d7:d7:1d:ba:0d:1a:35:a3:23:3a:77:d6:83:
57:fa:8d:e8:06:91:b7:a8:3f:92:0c:0d:bd:b6:be:
7b:f1:19:77:6b:e2:fa:ee:9b:50:04:a1:53:c4:06:
23:08:a2:2d:a0:6e:67:19:38:c6:0a:65:d4:9b:94:
8d:2d:61:28:44:fd:8b:91:ed:2e:7a:6d:8e:13:26:
39:9c:aa:b9:6e:c7:e6:40:42:a5:71:55:4b:e9:79:
b7:62:f6:be:a7:44:6e:76:cf:18:92:f3:a7:4e:c7:
7b:3e:85:82:9f:4d:6a:86:59:fb:ed:c9:94:32:f1:
2b:5c:fa:00:8d:45:fe:cf:2a:86:2a:38:41:55:5a:
11:88:40:d6:da:f6:ed:08:b7:1d:73:7b:f7:37:25:
8d:e4:1a:f5:96:a3:b0:b1:4b:02:c2:1a:aa:01:61:
f0:a1:47:26:de:a2:34:7e:11:87:f6:d0:04:86:25:
60:5d:94:f9:47:ca:15:85:17:4d:4b:08:4f:e1:59:
10:7f:30:0c:23:f4:0d:66:54:20:45:4b:47:c9:1a:
09:00:90:31:f9:00:ba:36:ef:5e:e7:9b:ad:90:08:
21:a5:5c:82:70:1e:21:a9:5b:59:f9:99:06:9f:c1:
3d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:27:45:5D:AF:0D:55:A2:DE:09:BF:27:15:B8:85:A0:56:3F:BD:08
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145950.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ace4::/32
Signature Algorithm: sha256WithRSAEncryption
7e:12:62:a1:24:c9:8f:e6:91:c1:b1:62:3f:5c:32:d3:ca:ca:
c1:8c:70:b4:89:7c:fa:85:90:6c:29:e2:46:2c:61:c7:e5:5e:
1a:a1:00:50:e4:21:a6:5b:c0:bc:af:e1:38:cc:13:b9:12:8c:
aa:44:c7:5f:b0:bf:b3:0c:cf:2d:1c:08:a5:52:aa:3e:7b:f9:
69:49:62:ea:86:8f:be:1d:30:7f:3b:2f:e4:a5:71:f4:34:44:
7e:0d:7d:ae:ee:dc:13:34:2d:4e:35:09:c5:87:09:54:13:58:
ae:dc:5f:b1:b0:17:ee:6c:33:d9:c9:c1:86:b5:4d:ab:5f:a7:
0b:e3:d2:fc:53:d4:7f:9b:bc:e8:d7:68:9e:ea:4a:e8:c5:49:
8f:e1:37:0c:bd:7b:0f:d1:a1:02:49:41:b3:59:ae:0f:72:73:
4e:a5:c1:7a:83:d9:1e:fe:06:c8:7a:ac:41:2e:80:5d:8b:a5:
1f:66:d2:3a:b7:3f:3d:84:a8:ee:31:0c:b7:5f:7d:9b:8d:e8:
45:4a:96:5a:b0:e2:a6:49:38:91:3b:c1:ca:21:fe:74:83:6e:
d4:a4:08:b9:60:d6:ba:41:09:e4:7b:f9:92:b3:6e:31:2b:2c:
9e:13:e0:6e:9e:87:8a:dc:43:c7:d6:fe:25:ce:37:91:10:7f:
3f:49:37:f5
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUb1DmllkM+Wes7GdVm5gwIegEALQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwODQ3NTVaFw0yNzA1MjUwODUyNTVaMDMxMTAvBgNV
BAMTKEUxMjc0NTVEQUYwRDU1QTJERTA5QkYyNzE1Qjg4NUEwNTYzRkJEMDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCIcvfkWrDIA/jW/+51lNhe19cd
ug0aNaMjOnfWg1f6jegGkbeoP5IMDb22vnvxGXdr4vrum1AEoVPEBiMIoi2gbmcZ
OMYKZdSblI0tYShE/YuR7S56bY4TJjmcqrlux+ZAQqVxVUvpebdi9r6nRG52zxiS
86dOx3s+hYKfTWqGWfvtyZQy8Stc+gCNRf7PKoYqOEFVWhGIQNba9u0Itx1ze/c3
JY3kGvWWo7CxSwLCGqoBYfChRybeojR+EYf20ASGJWBdlPlHyhWFF01LCE/hWRB/
MAwj9A1mVCBFS0fJGgkAkDH5ALo2717nm62QCCGlXIJwHiGpW1n5mQafwT1/AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU4SdFXa8NVaLeCb8nFbiFoFY/vQgwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1OTUwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqs5DANBgkqhkiG9w0BAQsFAAOCAQEAfhJi
oSTJj+aRwbFiP1wy08rKwYxwtIl8+oWQbCniRixhx+VeGqEAUOQhplvAvK/hOMwT
uRKMqkTHX7C/swzPLRwIpVKqPnv5aUli6oaPvh0wfzsv5KVx9DREfg19ru7cEzQt
TjUJxYcJVBNYrtxfsbAX7mwz2cnBhrVNq1+nC+PS/FPUf5u86NdonupK6MVJj+E3
DL17D9GhAklBs1muD3JzTqXBeoPZHv4GyHqsQS6AXYulH2bSOrc/PYSo7jEMt199
m43oRUqWWrDipkk4kTvByiH+dINu1KQIuWDWukEJ5Hv5krNuMSssnhPgbp6HitxD
x9b+Jc43kRB/P0k39Q==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:23 2026 by rpki-client