Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145040.roa
File: AS145040.roa (raw, json)
Hash identifier: G1ZXgKndMrpVjcj92+dyhy4JWWJxGiCWgSMtibOhbO0=
Subject key identifier: B9:21:C8:29:BD:78:B2:75:A6:BA:FB:FD:4D:C6:76:9B:22:BC:99:13
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3D655304E55B3AB3DC29AF21CF6F4FC966F12F88
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145040.roa
Signing time: Fri 22 May 2026 07:08:43 +0000
ROA not before: Fri 22 May 2026 07:03:43 +0000
ROA not after: Fri 21 May 2027 07:08:43 +0000
asID: 145040
IP address blocks: 240a:a956::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3d:65:53:04:e5:5b:3a:b3:dc:29:af:21:cf:6f:4f:c9:66:f1:2f:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:03:43 2026 GMT
Not After : May 21 07:08:43 2027 GMT
Subject: CN=B921C829BD78B275A6BAFBFD4DC6769B22BC9913
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:48:25:83:c4:dc:c4:79:e6:43:cc:b3:a5:4c:
21:a2:84:af:a9:a0:23:9f:e9:e3:46:1d:5a:3e:f1:
79:05:82:80:0d:87:56:e8:80:45:6a:d4:ef:48:8d:
81:23:16:99:d8:ab:4d:30:64:18:2d:4f:a3:3a:0c:
be:36:2e:c6:52:3a:08:39:8a:2b:a2:03:d0:1f:83:
86:4d:f2:88:a4:99:e6:15:9a:09:c5:05:c0:1b:f3:
32:4f:4b:91:33:28:82:2f:a5:15:24:0c:18:22:98:
74:e6:f2:27:f0:c3:1a:42:e2:aa:89:d2:9f:e4:37:
79:e1:38:3d:90:df:74:9f:12:0d:a8:69:9b:68:86:
2a:2f:cb:ac:36:3b:56:63:dc:27:8b:45:9c:97:21:
4b:c7:e7:5c:ff:c6:8d:4c:a4:88:f9:06:b8:71:1d:
f5:4b:a1:34:56:dd:19:97:69:f4:97:4f:aa:8f:65:
e3:dc:b5:4c:db:21:cf:d4:7f:51:95:93:41:8e:7d:
b4:23:31:a8:90:1e:3d:3d:f5:fe:25:9f:f2:e7:c2:
d8:71:56:00:f7:6d:b0:48:d6:3c:3d:6b:44:90:a8:
46:a8:75:c6:b6:b1:ff:cc:87:bb:c8:d6:99:7c:74:
c6:18:e4:2d:c1:c5:d5:10:3a:b4:41:0f:13:a8:f6:
4e:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:21:C8:29:BD:78:B2:75:A6:BA:FB:FD:4D:C6:76:9B:22:BC:99:13
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145040.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a956::/32
Signature Algorithm: sha256WithRSAEncryption
8d:6e:c8:df:20:35:d7:d6:ad:33:42:03:94:8a:71:ae:e9:fe:
5f:51:3a:57:8b:85:63:8b:3c:6b:56:ec:5d:0c:88:fd:b4:8b:
5c:1c:bc:28:5e:b7:db:2c:32:f5:0b:a1:8a:cb:c4:5c:24:84:
c1:72:13:0d:21:c5:7d:5b:b0:fa:10:4d:8a:3b:ce:9d:f4:09:
67:f6:ac:76:4d:73:dd:53:be:ec:ad:d2:84:a7:54:f3:0a:c3:
85:23:d8:25:56:38:d6:8c:8b:51:c7:88:5c:2f:21:fc:0f:0b:
08:c2:26:6d:e7:be:ea:dd:16:12:58:72:a8:00:32:88:e4:3c:
a6:eb:31:9c:93:eb:5f:94:96:e9:1e:c3:74:23:56:9e:4c:5a:
b1:f3:e2:46:23:af:0b:53:e8:a5:4b:b6:77:d6:08:c0:66:f0:
be:ea:90:b3:d9:50:71:ea:1e:4b:ec:33:cf:2f:34:28:c3:93:
43:2a:d0:67:b4:15:a3:c5:e3:90:14:f2:40:04:57:3d:d7:7f:
9f:97:6a:b0:60:91:6c:27:57:fd:7c:71:b4:65:f7:ea:d6:9b:
57:0b:21:ee:85:6b:67:cb:35:2c:bc:7b:c2:b1:c1:af:ec:3b:
f9:05:ee:05:51:f1:d6:11:93:69:99:74:2d:da:2f:1a:7d:5d:
8c:ec:88:13
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUPWVTBOVbOrPcKa8hz29PyWbxL4gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzAzNDNaFw0yNzA1MjEwNzA4NDNaMDMxMTAvBgNV
BAMTKEI5MjFDODI5QkQ3OEIyNzVBNkJBRkJGRDREQzY3NjlCMjJCQzk5MTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFSCWDxNzEeeZDzLOlTCGihK+p
oCOf6eNGHVo+8XkFgoANh1bogEVq1O9IjYEjFpnYq00wZBgtT6M6DL42LsZSOgg5
iiuiA9Afg4ZN8oikmeYVmgnFBcAb8zJPS5EzKIIvpRUkDBgimHTm8ifwwxpC4qqJ
0p/kN3nhOD2Q33SfEg2oaZtohiovy6w2O1Zj3CeLRZyXIUvH51z/xo1MpIj5Brhx
HfVLoTRW3RmXafSXT6qPZePctUzbIc/Uf1GVk0GOfbQjMaiQHj099f4ln/Lnwthx
VgD3bbBI1jw9a0SQqEaodca2sf/Mh7vI1pl8dMYY5C3BxdUQOrRBDxOo9k6zAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUuSHIKb14snWmuvv9TcZ2myK8mRMwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1MDQwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqpVjANBgkqhkiG9w0BAQsFAAOCAQEAjW7I
3yA119atM0IDlIpxrun+X1E6V4uFY4s8a1bsXQyI/bSLXBy8KF632ywy9QuhisvE
XCSEwXITDSHFfVuw+hBNijvOnfQJZ/asdk1z3VO+7K3ShKdU8wrDhSPYJVY41oyL
UceIXC8h/A8LCMImbee+6t0WElhyqAAyiOQ8pusxnJPrX5SW6R7DdCNWnkxasfPi
RiOvC1PopUu2d9YIwGbwvuqQs9lQceoeS+wzzy80KMOTQyrQZ7QVo8XjkBTyQARX
Pdd/n5dqsGCRbCdX/XxxtGX36tabVwsh7oVrZ8s1LLx7wrHBr+w7+QXuBVHx1hGT
aZl0LdovGn1djOyIEw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:14 2026 by rpki-client