Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145086.roa
File: AS145086.roa (raw, json)
Hash identifier: WMWBhj2zJpQgqyxNlLUR7sasCXFhK4lHUpHvgsY9ZNc=
Subject key identifier: B0:E7:F8:A5:D1:1B:2E:AA:04:14:EF:D9:4E:4F:A9:67:66:33:77:58
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0AF2D4CB7A911B7639407046AA49067D2131500D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145086.roa
Signing time: Mon 25 May 2026 03:19:33 +0000
ROA not before: Mon 25 May 2026 03:14:33 +0000
ROA not after: Mon 24 May 2027 03:19:33 +0000
asID: 145086
IP address blocks: 240a:a984::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:f2:d4:cb:7a:91:1b:76:39:40:70:46:aa:49:06:7d:21:31:50:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:33 2026 GMT
Not After : May 24 03:19:33 2027 GMT
Subject: CN=B0E7F8A5D11B2EAA0414EFD94E4FA96766337758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:45:69:47:d9:e8:4c:03:93:b0:c0:7f:47:01:
af:3d:3f:7f:f1:16:d6:70:4f:da:dc:b6:52:0b:4b:
38:19:43:a2:94:51:a1:41:8e:43:35:3f:5f:8b:ff:
52:da:b4:2d:db:64:a4:0c:48:3e:0c:5b:4f:03:f9:
08:8d:6e:95:c2:8c:5e:e0:a9:93:e0:ce:c8:7e:5d:
5b:68:48:8e:80:53:4c:35:b3:27:c1:e7:1a:27:4c:
87:bc:e4:e3:d1:da:37:13:17:d1:07:fb:9e:cc:bd:
d0:03:ab:37:1a:84:d2:8b:6c:97:9c:38:5f:ba:c7:
93:f7:8a:6b:2a:c3:75:2a:e2:2c:6d:1a:87:2a:ac:
d3:b3:df:01:52:c5:c7:9f:a7:af:41:86:b5:68:c4:
fc:8a:89:fb:1e:dc:4e:22:75:12:8d:32:aa:9a:64:
3e:4b:43:ee:9b:0f:57:70:60:b3:1e:c7:55:80:7d:
45:01:d7:b2:3b:fd:96:c1:0b:34:8e:b3:68:2e:ab:
da:b1:53:58:d3:ac:10:09:33:0c:b3:c9:e5:41:ec:
35:7d:12:8b:3c:f8:bf:f6:d7:71:9c:6c:58:15:8d:
7c:fc:66:06:83:e2:ba:57:c8:c4:46:78:11:6b:10:
8a:7d:66:cb:cb:72:5c:50:b0:20:b0:88:c0:cc:7e:
eb:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:E7:F8:A5:D1:1B:2E:AA:04:14:EF:D9:4E:4F:A9:67:66:33:77:58
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145086.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a984::/32
Signature Algorithm: sha256WithRSAEncryption
48:14:f7:32:f5:94:c4:ba:74:7e:98:b3:53:0c:5d:ec:07:2e:
b8:84:14:c1:31:61:5f:21:5e:41:99:21:c5:33:41:68:a9:ef:
a2:c6:33:d4:96:88:b8:83:04:c9:18:6d:da:2f:b8:84:68:95:
74:cf:38:d7:04:e4:e1:e4:a5:92:55:33:6b:62:a9:3e:36:69:
b4:2a:97:a8:f1:03:5d:8a:a0:c5:52:95:23:d4:76:bb:97:d9:
aa:ed:3a:8a:60:c9:7d:12:78:80:01:3e:04:99:42:d6:54:cf:
36:c0:11:90:2a:2c:15:d0:e9:00:b9:55:f9:1d:3c:9c:2c:bc:
64:ed:d0:24:e2:c7:7a:f3:34:31:2e:43:25:60:a7:ac:f4:03:
10:5b:0a:ef:89:a4:65:aa:2e:02:64:3f:c6:b2:9a:e5:1d:e1:
7c:c3:84:43:50:9f:40:fb:fa:d5:58:09:c5:43:4f:25:96:75:
4a:78:36:49:27:b0:4b:40:47:dd:5c:82:50:b2:fc:83:a2:90:
d2:60:de:05:51:af:d2:cf:7f:cd:c6:60:1d:23:b7:9c:85:7c:
be:72:0b:9c:06:4e:c6:06:a0:d6:c8:92:e3:57:fd:9d:29:c8:
57:f7:25:81:ef:38:f5:1e:5e:db:aa:f3:b6:7a:6d:20:f1:06:
76:af:57:ea
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUCvLUy3qRG3Y5QHBGqkkGfSExUA0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMzE0MzNaFw0yNzA1MjQwMzE5MzNaMDMxMTAvBgNV
BAMTKEIwRTdGOEE1RDExQjJFQUEwNDE0RUZEOTRFNEZBOTY3NjYzMzc3NTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3RWlH2ehMA5OwwH9HAa89P3/x
FtZwT9rctlILSzgZQ6KUUaFBjkM1P1+L/1LatC3bZKQMSD4MW08D+QiNbpXCjF7g
qZPgzsh+XVtoSI6AU0w1syfB5xonTIe85OPR2jcTF9EH+57MvdADqzcahNKLbJec
OF+6x5P3imsqw3Uq4ixtGocqrNOz3wFSxcefp69BhrVoxPyKifse3E4idRKNMqqa
ZD5LQ+6bD1dwYLMex1WAfUUB17I7/ZbBCzSOs2guq9qxU1jTrBAJMwyzyeVB7DV9
Eos8+L/213GcbFgVjXz8ZgaD4rpXyMRGeBFrEIp9ZsvLclxQsCCwiMDMfus7AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUsOf4pdEbLqoEFO/ZTk+pZ2Yzd1gwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1MDg2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqphDANBgkqhkiG9w0BAQsFAAOCAQEASBT3
MvWUxLp0fpizUwxd7AcuuIQUwTFhXyFeQZkhxTNBaKnvosYz1JaIuIMEyRht2i+4
hGiVdM841wTk4eSlklUza2KpPjZptCqXqPEDXYqgxVKVI9R2u5fZqu06imDJfRJ4
gAE+BJlC1lTPNsARkCosFdDpALlV+R08nCy8ZO3QJOLHevM0MS5DJWCnrPQDEFsK
74mkZaouAmQ/xrKa5R3hfMOEQ1CfQPv61VgJxUNPJZZ1Sng2SSewS0BH3VyCULL8
g6KQ0mDeBVGv0s9/zcZgHSO3nIV8vnILnAZOxgag1siS41f9nSnIV/clge849R5e
26rztnptIPEGdq9X6g==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:02 2026 by rpki-client