Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145033.roa
File: AS145033.roa (raw, json)
Hash identifier: SRyJuBz9oYzDHvWFMVOdxBRQck+CSdqge62rrNcp5gg=
Subject key identifier: E5:A5:C7:0D:EF:88:06:1C:07:FB:BA:32:0B:0E:67:75:0D:56:A4:71
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5CCD2A1ED7BB2ABAFE74EFFB9D4A1C942EF83539
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145033.roa
Signing time: Fri 22 May 2026 06:05:12 +0000
ROA not before: Fri 22 May 2026 06:00:12 +0000
ROA not after: Fri 21 May 2027 06:05:12 +0000
asID: 145033
IP address blocks: 240a:a94f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:cd:2a:1e:d7:bb:2a:ba:fe:74:ef:fb:9d:4a:1c:94:2e:f8:35:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:12 2026 GMT
Not After : May 21 06:05:12 2027 GMT
Subject: CN=E5A5C70DEF88061C07FBBA320B0E67750D56A471
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:2b:d9:c3:cc:bd:21:ed:07:36:ca:e4:c7:f2:
a7:9e:35:c2:ae:d9:13:ed:4e:70:e4:0b:48:11:6e:
86:2d:b5:c3:ab:e7:87:da:1e:46:bb:8f:37:9e:4d:
fe:03:d6:1c:65:68:fd:32:5f:52:d4:45:13:3b:d9:
0a:36:95:86:56:fc:2c:87:2b:c9:9d:6d:f8:4f:ed:
e2:20:2d:56:c3:ea:10:2e:da:ae:b8:60:f4:98:a9:
2e:63:a5:bc:cc:99:5b:93:2b:0b:f2:0d:9f:7f:a7:
17:1e:47:5a:59:3c:a6:71:7a:7c:d9:c6:d6:aa:07:
d8:f3:6b:b1:74:c4:d2:40:c0:85:1c:22:28:10:81:
b4:0c:e7:0b:5d:5e:18:70:51:47:ac:92:23:f1:06:
6a:8c:22:7a:5b:50:bb:42:e6:f2:fe:b6:af:67:83:
18:da:34:92:56:cf:48:be:72:c8:32:73:b0:c0:f7:
84:26:33:e8:37:8c:bd:42:bc:67:3b:39:a1:b8:cf:
a3:df:8f:6e:5b:8e:e9:89:f4:36:83:c6:ed:82:c0:
4a:a7:ca:b1:b1:7c:0d:ca:38:32:bd:7c:f6:89:42:
81:01:54:f9:ae:2a:80:b7:f6:97:5f:f8:12:5f:60:
66:67:22:20:99:eb:23:7f:9a:b0:0b:49:e6:c6:ee:
62:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:A5:C7:0D:EF:88:06:1C:07:FB:BA:32:0B:0E:67:75:0D:56:A4:71
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a94f::/32
Signature Algorithm: sha256WithRSAEncryption
49:81:36:3e:cb:6e:60:dd:f6:5e:86:29:97:7e:9d:8f:97:c6:
64:67:44:88:5d:57:0a:26:ec:d2:63:5e:ca:e5:ae:37:24:3a:
71:15:54:d4:8a:77:e4:7a:fc:be:04:57:e2:6e:e3:24:1e:16:
71:a2:ae:5f:20:07:a6:fc:75:2d:da:54:96:d7:8a:a4:21:c0:
21:72:6f:16:2c:c7:e5:a8:ca:fd:0f:c1:7c:46:10:7d:7f:0b:
cd:ab:71:cd:ce:f6:4d:07:23:4b:c6:c2:8b:6c:ad:08:23:8c:
5d:da:5e:b6:c8:95:f9:38:ea:58:2c:5b:b5:65:07:72:01:ef:
73:7b:06:70:71:82:8e:15:b6:f2:77:be:e1:65:60:8b:86:4c:
a1:3a:31:1e:d5:9d:1b:04:3b:a6:7d:69:9d:33:c8:4b:58:14:
e6:56:60:d2:fd:3f:ea:c7:08:28:a6:6b:d3:a0:e3:c4:cc:1c:
15:ad:fd:e1:09:5c:57:0e:dd:7a:97:29:3e:8f:96:d5:2b:1a:
50:e7:14:0d:57:ad:32:c6:aa:52:c5:41:81:39:5f:15:2a:24:
be:69:e1:9d:75:44:ef:28:0a:f1:7a:72:a2:2a:3d:41:f4:66:
08:e8:c8:c9:93:0e:0d:2e:0c:a9:41:85:04:69:15:92:d6:19:
02:f9:f1:8b
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUXM0qHte7Krr+dO/7nUoclC74NTkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjAwMTJaFw0yNzA1MjEwNjA1MTJaMDMxMTAvBgNV
BAMTKEU1QTVDNzBERUY4ODA2MUMwN0ZCQkEzMjBCMEU2Nzc1MEQ1NkE0NzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQK9nDzL0h7Qc2yuTH8qeeNcKu
2RPtTnDkC0gRboYttcOr54faHka7jzeeTf4D1hxlaP0yX1LURRM72Qo2lYZW/CyH
K8mdbfhP7eIgLVbD6hAu2q64YPSYqS5jpbzMmVuTKwvyDZ9/pxceR1pZPKZxenzZ
xtaqB9jza7F0xNJAwIUcIigQgbQM5wtdXhhwUUeskiPxBmqMInpbULtC5vL+tq9n
gxjaNJJWz0i+csgyc7DA94QmM+g3jL1CvGc7OaG4z6Pfj25bjumJ9DaDxu2CwEqn
yrGxfA3KODK9fPaJQoEBVPmuKoC39pdf+BJfYGZnIiCZ6yN/mrALSebG7mL/AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU5aXHDe+IBhwH+7oyCw5ndQ1WpHEwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1MDMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqpTzANBgkqhkiG9w0BAQsFAAOCAQEASYE2
PstuYN32XoYpl36dj5fGZGdEiF1XCibs0mNeyuWuNyQ6cRVU1Ip35Hr8vgRX4m7j
JB4WcaKuXyAHpvx1LdpUlteKpCHAIXJvFizH5ajK/Q/BfEYQfX8Lzatxzc72TQcj
S8bCi2ytCCOMXdpetsiV+TjqWCxbtWUHcgHvc3sGcHGCjhW28ne+4WVgi4ZMoTox
HtWdGwQ7pn1pnTPIS1gU5lZg0v0/6scIKKZr06DjxMwcFa394QlcVw7depcpPo+W
1SsaUOcUDVetMsaqUsVBgTlfFSokvmnhnXVE7ygK8Xpyoio9QfRmCOjIyZMODS4M
qUGFBGkVktYZAvnxiw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:41 2026 by rpki-client