Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145177.roa
File: AS145177.roa (raw, json)
Hash identifier: nnbK93Mkhcm+JXUeLPrgvevCSFCjQF3ZKsfgJ0Sc1Xo=
Subject key identifier: B2:CF:96:3E:37:A8:E8:E3:F1:47:A9:AD:D8:BC:CE:98:B5:04:9E:8F
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1B8EDB9F1899D29A381727433DBEDAE12A2079C2
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145177.roa
Signing time: Fri 22 May 2026 06:46:34 +0000
ROA not before: Fri 22 May 2026 06:41:34 +0000
ROA not after: Fri 21 May 2027 06:46:34 +0000
asID: 145177
IP address blocks: 240a:a9df::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:8e:db:9f:18:99:d2:9a:38:17:27:43:3d:be:da:e1:2a:20:79:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:41:34 2026 GMT
Not After : May 21 06:46:34 2027 GMT
Subject: CN=B2CF963E37A8E8E3F147A9ADD8BCCE98B5049E8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5f:91:de:c8:94:9a:0f:15:3d:5a:c0:13:ad:
b5:a9:86:6c:89:c2:79:e5:1f:b7:23:e9:f4:3a:1b:
11:9b:be:ce:b7:27:75:3d:75:fd:b9:d3:e4:db:50:
61:44:87:2e:0e:a0:57:2f:47:0d:b1:62:b2:7f:3c:
87:01:e0:0b:c6:a7:b0:52:e4:bf:62:da:92:98:5a:
08:f5:96:d9:93:80:2e:11:d3:fc:80:cb:5b:bd:90:
f3:a5:64:da:3a:07:ad:50:b2:15:c7:f9:4a:69:d5:
0e:c2:71:ef:6e:5a:be:a9:bf:6b:99:10:71:c4:62:
24:92:71:29:75:bc:4e:0e:36:d6:65:54:50:f0:9d:
95:d5:86:3f:53:06:9c:7e:79:b7:a9:4a:d7:64:4e:
4b:3d:c4:b2:fe:73:12:fc:ca:87:ab:c4:d2:c6:07:
c6:09:d2:ae:bd:8e:54:bb:ea:1c:47:74:c8:5b:ca:
8b:14:d2:93:00:17:04:c4:a6:7a:23:5c:b0:57:ff:
a5:ac:87:ba:6b:0e:f5:15:f8:1f:c9:76:33:bb:dd:
a7:ad:08:b5:9b:20:b0:f5:d3:c3:ad:0c:9d:45:35:
0e:03:33:7d:fe:13:c5:05:b0:b6:7d:6a:20:5b:81:
3d:81:7a:c6:43:77:55:ec:a5:86:2e:35:08:b7:6a:
c8:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:CF:96:3E:37:A8:E8:E3:F1:47:A9:AD:D8:BC:CE:98:B5:04:9E:8F
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145177.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a9df::/32
Signature Algorithm: sha256WithRSAEncryption
a8:f5:27:d1:ab:67:38:37:75:3a:34:f9:3e:a2:45:06:17:cc:
01:2e:a7:0d:14:56:26:17:f3:88:e7:9f:39:59:0d:da:c6:a7:
9d:79:88:c0:80:f1:76:27:f7:cd:4c:10:a1:72:b6:a3:db:fe:
fb:95:09:cc:5a:a9:7e:39:e1:29:d7:c9:76:c1:2e:6f:6b:af:
20:39:2c:31:6e:63:62:52:e3:ab:6d:0e:c0:dd:77:e4:6c:16:
8c:5e:24:6c:4b:42:4d:d6:f0:d8:fe:90:54:5f:b0:05:3b:96:
dc:03:1e:ac:cb:fa:ef:ca:54:e2:c8:e8:cc:da:a7:48:7b:c3:
0e:46:a0:44:66:c9:a7:a4:e7:ef:f3:84:8f:eb:24:0a:b3:0a:
06:ce:7c:5a:83:48:a1:3b:62:bd:7b:1b:fe:8b:64:b5:41:fa:
76:2f:1b:12:8c:58:14:20:84:e7:7a:47:3a:01:e9:fc:28:9c:
08:bf:cb:52:e6:85:49:64:a8:ad:44:d2:f2:08:cc:54:d5:9b:
43:7e:3d:0d:8b:fd:9d:05:50:a3:a2:a8:c2:de:66:a1:4d:15:
3a:ce:4f:f8:77:91:1e:7b:a8:c7:9b:de:2b:ec:d9:dd:d4:59:
eb:21:5b:55:4f:df:07:cf:f4:c1:0c:be:03:16:32:f5:d8:6c:
0c:61:fd:88
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUG47bnxiZ0po4FydDPb7a4SogecIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjQxMzRaFw0yNzA1MjEwNjQ2MzRaMDMxMTAvBgNV
BAMTKEIyQ0Y5NjNFMzdBOEU4RTNGMTQ3QTlBREQ4QkNDRTk4QjUwNDlFOEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8X5HeyJSaDxU9WsATrbWphmyJ
wnnlH7cj6fQ6GxGbvs63J3U9df250+TbUGFEhy4OoFcvRw2xYrJ/PIcB4AvGp7BS
5L9i2pKYWgj1ltmTgC4R0/yAy1u9kPOlZNo6B61QshXH+Upp1Q7Cce9uWr6pv2uZ
EHHEYiSScSl1vE4ONtZlVFDwnZXVhj9TBpx+ebepStdkTks9xLL+cxL8yoerxNLG
B8YJ0q69jlS76hxHdMhbyosU0pMAFwTEpnojXLBX/6Wsh7prDvUV+B/JdjO73aet
CLWbILD108OtDJ1FNQ4DM33+E8UFsLZ9aiBbgT2BesZDd1XspYYuNQi3asjbAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUss+WPjeo6OPxR6mt2LzOmLUEno8wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1MTc3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqp3zANBgkqhkiG9w0BAQsFAAOCAQEAqPUn
0atnODd1OjT5PqJFBhfMAS6nDRRWJhfziOefOVkN2sannXmIwIDxdif3zUwQoXK2
o9v++5UJzFqpfjnhKdfJdsEub2uvIDksMW5jYlLjq20OwN135GwWjF4kbEtCTdbw
2P6QVF+wBTuW3AMerMv678pU4sjozNqnSHvDDkagRGbJp6Tn7/OEj+skCrMKBs58
WoNIoTtivXsb/otktUH6di8bEoxYFCCE53pHOgHp/CicCL/LUuaFSWSorUTS8gjM
VNWbQ349DYv9nQVQo6Kowt5moU0VOs5P+HeRHnuox5veK+zZ3dRZ6yFbVU/fB8/0
wQy+AxYy9dhsDGH9iA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:22 2026 by rpki-client