Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145028.roa
File: AS145028.roa (raw, json)
Hash identifier: EDyT+ZVfvkrRxEh1wfi62frgMhWw5tE24dMqEqnFECQ=
Subject key identifier: D0:87:EF:BD:97:20:D4:2C:C5:F2:AD:46:30:94:27:48:9A:69:FD:10
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0A0CB9595F3D127B79C9660B58A34E6789BDE5F1
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145028.roa
Signing time: Fri 22 May 2026 04:08:22 +0000
ROA not before: Fri 22 May 2026 04:03:22 +0000
ROA not after: Fri 21 May 2027 04:08:22 +0000
asID: 145028
IP address blocks: 240a:a94a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:0c:b9:59:5f:3d:12:7b:79:c9:66:0b:58:a3:4e:67:89:bd:e5:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:03:22 2026 GMT
Not After : May 21 04:08:22 2027 GMT
Subject: CN=D087EFBD9720D42CC5F2AD46309427489A69FD10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a6:af:f9:87:1a:3a:86:4e:b0:96:70:4f:3b:
a8:4e:ef:0c:3c:eb:71:50:3d:d5:34:db:52:4b:be:
33:ff:ab:44:3d:0d:17:50:40:d5:ff:bf:f0:2b:04:
ea:dd:ea:e4:2a:cb:0e:06:42:d2:23:54:cb:14:01:
82:d1:74:c6:72:ac:b6:e4:38:f5:70:5e:f6:be:ab:
bc:02:f3:b7:d8:b2:68:ff:1f:1f:96:e2:7d:04:87:
46:af:e9:e7:e5:8e:e8:f9:9d:86:cd:5f:80:b9:9c:
7a:7f:92:ca:f7:47:89:03:ec:81:56:a6:e6:d3:88:
16:75:7f:fc:a8:b8:3e:5d:49:18:d2:5a:dd:35:aa:
02:a9:49:a2:ec:b3:54:49:7a:17:b4:42:e0:64:cf:
08:42:5e:fa:75:3f:88:51:6f:b6:a9:22:70:e5:ca:
dc:08:99:f2:ba:63:40:69:c6:62:41:4a:c6:35:2a:
03:45:cb:3b:2b:83:bd:21:8b:c0:1f:b8:11:ac:ea:
c5:80:c1:1a:db:46:7c:a9:af:5e:78:ce:4b:8a:c2:
dc:db:4f:06:19:86:51:d1:1f:c5:0e:4b:ac:6e:6e:
50:cc:91:17:f7:f0:08:3b:11:12:69:bb:3f:a7:25:
98:8b:0c:a6:d0:30:15:6f:fe:54:a2:62:49:ac:de:
67:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:87:EF:BD:97:20:D4:2C:C5:F2:AD:46:30:94:27:48:9A:69:FD:10
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145028.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a94a::/32
Signature Algorithm: sha256WithRSAEncryption
5c:00:b5:07:2c:2d:8b:bf:3b:02:57:b9:b4:6e:b9:d0:b3:8c:
ef:e5:c2:8a:53:d1:b9:4a:2b:fc:6b:b8:24:e6:f6:2f:30:d1:
07:97:f9:a0:77:4e:77:c9:32:b8:ea:89:c7:fb:77:fd:87:4a:
c1:da:6d:b3:9c:c9:2b:cc:72:5e:b2:62:fd:a6:af:42:64:ff:
72:04:5e:55:bb:3c:dd:4f:7b:87:52:02:7f:b5:c3:f4:ca:15:
9e:d6:31:df:37:23:6d:6c:8c:da:d2:51:65:ee:95:62:25:e2:
d6:67:53:f1:49:24:dd:d3:22:38:08:a1:8c:bd:91:d4:a6:a5:
bd:31:ee:d6:7e:93:dd:5e:25:7c:e9:51:ad:15:7a:bc:7f:ea:
fe:67:50:12:4d:b3:c7:4d:c5:69:57:97:8d:39:22:e6:06:34:
34:57:03:31:e6:85:db:4a:5f:6b:54:f6:63:e1:f7:70:31:3a:
e1:e2:a9:3b:cc:bb:00:d2:3b:b0:1c:60:62:e4:32:8f:de:84:
b4:94:b7:65:ed:b6:5a:80:26:2e:1d:c9:14:a7:f6:7e:3a:b9:
68:c9:66:f0:6d:88:ec:ba:bf:9e:64:f1:4c:df:0a:59:44:83:
51:7d:7f:71:0e:af:7b:02:a5:3e:7e:14:e8:ed:ba:45:4e:e2:
47:89:83:11
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUCgy5WV89Ent5yWYLWKNOZ4m95fEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNDAzMjJaFw0yNzA1MjEwNDA4MjJaMDMxMTAvBgNV
BAMTKEQwODdFRkJEOTcyMEQ0MkNDNUYyQUQ0NjMwOTQyNzQ4OUE2OUZEMTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgpq/5hxo6hk6wlnBPO6hO7ww8
63FQPdU021JLvjP/q0Q9DRdQQNX/v/ArBOrd6uQqyw4GQtIjVMsUAYLRdMZyrLbk
OPVwXva+q7wC87fYsmj/Hx+W4n0Eh0av6efljuj5nYbNX4C5nHp/ksr3R4kD7IFW
pubTiBZ1f/youD5dSRjSWt01qgKpSaLss1RJehe0QuBkzwhCXvp1P4hRb7apInDl
ytwImfK6Y0BpxmJBSsY1KgNFyzsrg70hi8AfuBGs6sWAwRrbRnypr154zkuKwtzb
TwYZhlHRH8UOS6xublDMkRf38Ag7ERJpuz+nJZiLDKbQMBVv/lSiYkms3meJAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU0IfvvZcg1CzF8q1GMJQnSJpp/RAwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1MDI4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqpSjANBgkqhkiG9w0BAQsFAAOCAQEAXAC1
Bywti787Ale5tG650LOM7+XCilPRuUor/Gu4JOb2LzDRB5f5oHdOd8kyuOqJx/t3
/YdKwdpts5zJK8xyXrJi/aavQmT/cgReVbs83U97h1ICf7XD9MoVntYx3zcjbWyM
2tJRZe6VYiXi1mdT8Ukk3dMiOAihjL2R1KalvTHu1n6T3V4lfOlRrRV6vH/q/mdQ
Ek2zx03FaVeXjTki5gY0NFcDMeaF20pfa1T2Y+H3cDE64eKpO8y7ANI7sBxgYuQy
j96EtJS3Ze22WoAmLh3JFKf2fjq5aMlm8G2I7Lq/nmTxTN8KWUSDUX1/cQ6vewKl
Pn4U6O26RU7iR4mDEQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:17 2026 by rpki-client