Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145151.roa
File: AS145151.roa (raw, json)
Hash identifier: WodDJqbiwv6B4S9y9ZcX/wD92W9Gn/H/7kczEe4xDc0=
Subject key identifier: 66:AC:83:7C:EB:A6:80:71:94:A5:6D:C6:E6:B6:14:A0:57:B7:E3:C0
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 602D2C181FCA9EBC931D5775D779B50F3AF21E4A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145151.roa
Signing time: Mon 25 May 2026 02:22:32 +0000
ROA not before: Mon 25 May 2026 02:17:32 +0000
ROA not after: Mon 24 May 2027 02:22:32 +0000
asID: 145151
IP address blocks: 240a:a9c5::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:2d:2c:18:1f:ca:9e:bc:93:1d:57:75:d7:79:b5:0f:3a:f2:1e:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:32 2026 GMT
Not After : May 24 02:22:32 2027 GMT
Subject: CN=66AC837CEBA6807194A56DC6E6B614A057B7E3C0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:19:d2:cf:d4:10:cf:ef:86:90:92:86:7a:5c:
3a:94:4d:3a:e2:b6:0a:3d:cc:3a:04:be:10:85:eb:
25:36:fd:01:59:93:73:88:9d:e4:84:08:02:f6:d8:
78:e6:26:2d:16:b5:92:89:6b:46:d2:e6:1c:38:64:
9e:5b:26:f0:4b:97:22:d0:d4:35:6e:84:c3:3a:d5:
c2:57:af:aa:66:26:72:6c:63:ad:46:52:65:58:21:
47:69:8e:7b:67:a7:5b:c3:c8:fa:d3:35:f9:55:8b:
88:24:ca:f7:42:06:ee:a4:95:3e:ae:aa:17:0b:2b:
7b:51:58:1d:8e:79:57:ba:d4:20:03:34:e7:35:7d:
43:14:21:d1:a6:ef:5f:00:72:19:c7:4f:99:67:75:
bf:57:7b:3c:46:79:12:73:5f:ca:f0:11:23:45:56:
1a:7b:92:c4:0e:49:74:24:92:07:72:5a:1b:0f:bf:
a2:ed:08:28:70:96:c3:87:28:e7:ec:2d:24:8a:82:
44:ac:24:c4:5d:cc:98:41:7c:d7:2f:8f:ff:6f:d0:
1e:32:4d:d9:e9:12:04:8a:78:3d:82:cc:76:08:88:
13:95:8a:7d:b6:80:0d:fe:8a:60:14:fc:e5:a7:18:
a2:c3:b9:62:b1:84:47:fc:53:24:33:1c:ea:05:c4:
01:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:AC:83:7C:EB:A6:80:71:94:A5:6D:C6:E6:B6:14:A0:57:B7:E3:C0
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145151.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a9c5::/32
Signature Algorithm: sha256WithRSAEncryption
69:17:8a:bc:e9:b7:c9:5d:bb:16:6c:af:62:3f:5f:62:ba:12:
1b:84:1a:4f:16:7e:bc:3b:38:b9:78:14:a5:c7:c2:cb:8b:4e:
a0:1e:97:7a:e9:12:07:d2:32:8b:82:23:9e:02:54:d3:fd:64:
46:bf:4c:69:61:5e:c6:31:62:b8:75:ec:fa:c9:fb:a0:16:d9:
00:f7:cc:e5:f7:8b:6f:2f:a0:d4:80:be:af:bb:b5:fb:5c:db:
1a:64:5d:a6:fa:8c:68:71:b9:20:8a:72:e5:9a:2f:d9:f3:7d:
54:01:04:61:eb:78:f6:3c:8d:59:9c:44:fe:39:1b:c6:b6:f8:
f3:93:17:59:b1:93:fa:4b:97:19:46:e7:a2:96:4b:06:b2:92:
70:4c:1c:86:21:55:5f:9f:ad:76:93:90:59:83:f0:95:d8:6d:
32:74:9f:0b:e3:e4:3f:7d:a0:ea:8e:5f:66:64:b6:b8:ee:2b:
5d:13:3c:33:51:67:57:c7:e1:18:65:54:e1:5a:89:6f:41:a1:
ff:11:a4:61:53:2c:40:97:65:c1:f4:8f:8c:a1:db:07:06:4d:
38:39:b7:fb:31:eb:0f:53:4e:a2:95:09:38:b2:11:ae:a9:88:
8f:20:b0:4a:a1:b4:a4:59:20:ba:49:ed:29:f9:46:2b:cd:13:
f7:3b:9e:ba
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUYC0sGB/KnryTHVd113m1DzryHkowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMjE3MzJaFw0yNzA1MjQwMjIyMzJaMDMxMTAvBgNV
BAMTKDY2QUM4MzdDRUJBNjgwNzE5NEE1NkRDNkU2QjYxNEEwNTdCN0UzQzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSGdLP1BDP74aQkoZ6XDqUTTri
tgo9zDoEvhCF6yU2/QFZk3OIneSECAL22HjmJi0WtZKJa0bS5hw4ZJ5bJvBLlyLQ
1DVuhMM61cJXr6pmJnJsY61GUmVYIUdpjntnp1vDyPrTNflVi4gkyvdCBu6klT6u
qhcLK3tRWB2OeVe61CADNOc1fUMUIdGm718AchnHT5lndb9XezxGeRJzX8rwESNF
Vhp7ksQOSXQkkgdyWhsPv6LtCChwlsOHKOfsLSSKgkSsJMRdzJhBfNcvj/9v0B4y
TdnpEgSKeD2CzHYIiBOVin22gA3+imAU/OWnGKLDuWKxhEf8UyQzHOoFxAHfAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUZqyDfOumgHGUpW3G5rYUoFe348AwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1MTUxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqpxTANBgkqhkiG9w0BAQsFAAOCAQEAaReK
vOm3yV27FmyvYj9fYroSG4QaTxZ+vDs4uXgUpcfCy4tOoB6XeukSB9Iyi4IjngJU
0/1kRr9MaWFexjFiuHXs+sn7oBbZAPfM5feLby+g1IC+r7u1+1zbGmRdpvqMaHG5
IIpy5Zov2fN9VAEEYet49jyNWZxE/jkbxrb485MXWbGT+kuXGUbnopZLBrKScEwc
hiFVX5+tdpOQWYPwldhtMnSfC+PkP32g6o5fZmS2uO4rXRM8M1FnV8fhGGVU4VqJ
b0Gh/xGkYVMsQJdlwfSPjKHbBwZNODm3+zHrD1NOopUJOLIRrqmIjyCwSqG0pFkg
ukntKflGK80T9zueug==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:54 2026 by rpki-client