Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145042.roa
File: AS145042.roa (raw, json)
Hash identifier: aZ2JugYbp0kMktT4y6agUIL1Txb9T0Sa5nfCvVCQ/u8=
Subject key identifier: 89:B8:B8:EC:66:C0:11:46:BE:41:1D:E1:15:F4:8F:BE:0F:CD:C8:F9
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2D13C71167BE0DEC2632A1BB189D776E80C773DA
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145042.roa
Signing time: Tue 26 May 2026 06:12:43 +0000
ROA not before: Tue 26 May 2026 06:07:43 +0000
ROA not after: Tue 25 May 2027 06:12:43 +0000
asID: 145042
IP address blocks: 240a:a958::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:13:c7:11:67:be:0d:ec:26:32:a1:bb:18:9d:77:6e:80:c7:73:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:07:43 2026 GMT
Not After : May 25 06:12:43 2027 GMT
Subject: CN=89B8B8EC66C01146BE411DE115F48FBE0FCDC8F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c2:94:1b:0d:dd:af:84:03:d7:27:f2:56:73:
bf:4d:f6:0b:02:ba:3e:8c:0e:c9:9c:dc:79:68:2c:
74:52:07:99:ef:45:c4:bf:77:52:e8:5f:40:e5:72:
40:f1:13:d7:a6:bb:9e:dc:99:5d:74:5c:3f:37:67:
9f:bf:53:fc:4a:e2:51:14:99:ee:1d:b1:3e:7b:57:
cf:eb:32:6a:fb:c6:e0:71:fb:ba:30:4a:bf:4b:7e:
c2:08:0d:ef:38:5b:dd:63:69:73:61:db:18:61:72:
49:26:e2:93:85:dd:03:39:74:f9:45:30:b3:8d:f1:
ab:9c:80:fd:35:02:0c:f5:94:46:e1:b9:4e:ac:09:
69:07:49:65:9d:67:6c:eb:91:73:76:e4:6b:06:22:
05:8c:d1:f6:40:40:42:51:03:30:6e:04:65:21:78:
d7:14:ef:ba:75:03:c6:c4:35:33:4f:71:3b:0d:ab:
b5:ea:b2:ef:ae:f7:32:1e:30:da:cb:0a:aa:94:a7:
83:54:67:15:e2:da:92:43:7a:ba:2e:57:77:60:7b:
b5:9a:23:8f:89:e2:15:f3:c4:d5:ab:a5:69:b3:fb:
65:3f:aa:e0:dc:7c:94:91:99:63:4b:a1:57:61:d4:
82:e7:ab:00:db:db:0e:3e:ed:17:b9:42:4c:ab:aa:
a3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:B8:B8:EC:66:C0:11:46:BE:41:1D:E1:15:F4:8F:BE:0F:CD:C8:F9
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145042.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a958::/32
Signature Algorithm: sha256WithRSAEncryption
64:53:4c:c6:65:33:0f:58:a1:5d:9d:3e:28:e7:8e:c2:f3:29:
10:dd:a4:22:cd:af:2a:7d:25:31:d9:67:ac:43:e1:d6:68:7b:
ad:c4:56:29:97:ae:78:c0:ad:a0:79:66:88:6a:71:9e:d1:3d:
97:90:fe:a8:cb:9b:04:a9:67:f4:77:bf:9a:8e:f8:dc:ea:6f:
ad:d7:4f:f9:6f:4f:0d:4f:07:48:32:95:1a:ee:a9:c7:f4:27:
a3:89:cb:3a:0a:0d:f0:ae:ca:6c:da:2a:7e:df:9d:87:05:5a:
48:a7:f8:ad:bf:c8:fe:87:6d:47:41:e9:2c:dd:f3:71:93:4e:
a9:9e:90:02:20:a2:90:0a:06:48:e9:61:ce:02:eb:e4:ac:bc:
68:5e:1f:6f:64:8a:97:af:c1:27:65:ec:9a:17:35:83:33:be:
5e:8a:e2:35:4c:f0:97:ed:31:27:15:d6:11:68:58:28:bd:fe:
84:d4:62:dc:1d:c6:e3:71:69:d6:20:fc:a8:15:b2:d5:6e:af:
2c:95:dd:f2:20:16:bd:c5:40:be:70:ef:09:a5:4c:61:55:5e:
20:f5:2f:09:9c:2b:80:9b:df:7d:57:c0:d3:a8:48:ba:b6:24:
73:ea:cb:7d:06:78:9d:f8:98:b7:f4:94:0a:64:77:a1:de:fb:
67:8a:df:da
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIULRPHEWe+DewmMqG7GJ13boDHc9owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwNjA3NDNaFw0yNzA1MjUwNjEyNDNaMDMxMTAvBgNV
BAMTKDg5QjhCOEVDNjZDMDExNDZCRTQxMURFMTE1RjQ4RkJFMEZDREM4RjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3wpQbDd2vhAPXJ/JWc79N9gsC
uj6MDsmc3HloLHRSB5nvRcS/d1LoX0DlckDxE9emu57cmV10XD83Z5+/U/xK4lEU
me4dsT57V8/rMmr7xuBx+7owSr9LfsIIDe84W91jaXNh2xhhckkm4pOF3QM5dPlF
MLON8aucgP01Agz1lEbhuU6sCWkHSWWdZ2zrkXN25GsGIgWM0fZAQEJRAzBuBGUh
eNcU77p1A8bENTNPcTsNq7Xqsu+u9zIeMNrLCqqUp4NUZxXi2pJDerouV3dge7Wa
I4+J4hXzxNWrpWmz+2U/quDcfJSRmWNLoVdh1ILnqwDb2w4+7Re5QkyrqqPRAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUibi47GbAEUa+QR3hFfSPvg/NyPkwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1MDQyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqpWDANBgkqhkiG9w0BAQsFAAOCAQEAZFNM
xmUzD1ihXZ0+KOeOwvMpEN2kIs2vKn0lMdlnrEPh1mh7rcRWKZeueMCtoHlmiGpx
ntE9l5D+qMubBKln9He/mo743OpvrddP+W9PDU8HSDKVGu6px/Qno4nLOgoN8K7K
bNoqft+dhwVaSKf4rb/I/odtR0HpLN3zcZNOqZ6QAiCikAoGSOlhzgLr5Ky8aF4f
b2SKl6/BJ2Xsmhc1gzO+XoriNUzwl+0xJxXWEWhYKL3+hNRi3B3G43Fp1iD8qBWy
1W6vLJXd8iAWvcVAvnDvCaVMYVVeIPUvCZwrgJvffVfA06hIurYkc+rLfQZ4nfiY
t/SUCmR3od77Z4rf2g==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:10 2026 by rpki-client