Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145225.roa
File: AS145225.roa (raw, json)
Hash identifier: 59r1xWbYAT3T1viqPmw7Vu0kcjdRaSV+TbW51SFTIh8=
Subject key identifier: 7B:4E:05:97:76:55:85:9C:0B:64:6A:54:2E:A5:75:09:8A:B2:F5:B2
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 543721B1D55B1FB20BEF7257D483AAD17DD94ACF
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145225.roa
Signing time: Fri 22 May 2026 01:50:36 +0000
ROA not before: Fri 22 May 2026 01:45:36 +0000
ROA not after: Fri 21 May 2027 01:50:36 +0000
asID: 145225
IP address blocks: 240a:aa0f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:37:21:b1:d5:5b:1f:b2:0b:ef:72:57:d4:83:aa:d1:7d:d9:4a:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:36 2026 GMT
Not After : May 21 01:50:36 2027 GMT
Subject: CN=7B4E05977655859C0B646A542EA575098AB2F5B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a8:14:40:82:f9:b4:66:d8:39:4b:83:be:4a:
5b:3e:96:5f:9e:4d:71:80:40:90:a2:36:b9:53:c2:
80:c0:1f:7b:ab:52:4f:67:6b:b6:46:44:0b:22:86:
d3:0a:17:02:03:f1:09:4a:32:50:32:ab:e3:0c:b1:
e8:2d:0d:2b:5e:9d:ab:e2:34:57:c4:ed:12:f8:db:
84:ee:c9:30:64:7b:e6:e8:e9:ff:d6:ec:ee:0c:18:
51:e5:1a:bf:fc:5a:eb:7d:6f:9b:46:d8:4a:ee:d0:
59:a6:a4:b5:75:1f:7f:9e:eb:f9:b9:93:c2:ed:64:
b4:fe:72:21:45:d8:b0:21:60:d4:2e:ba:2b:fb:15:
5c:23:0a:39:4d:d4:81:1a:ed:a3:f5:96:57:4b:73:
8b:ed:57:62:df:22:5e:2e:62:8d:c5:d8:64:18:9d:
4f:e7:47:f4:a5:fc:ed:49:86:7d:f1:95:74:31:35:
fa:8e:9e:d1:b1:5c:24:55:74:b3:1e:96:47:b6:6c:
da:79:b8:aa:98:47:ab:92:b0:1e:9f:94:e5:6e:9d:
78:a3:27:d2:76:5b:49:da:5f:49:2d:02:fe:67:6c:
22:97:e5:bc:85:c3:15:51:91:3d:d8:bb:5d:2f:43:
0f:05:f7:de:4d:17:21:cd:24:50:12:99:1a:ac:2a:
75:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:4E:05:97:76:55:85:9C:0B:64:6A:54:2E:A5:75:09:8A:B2:F5:B2
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145225.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa0f::/32
Signature Algorithm: sha256WithRSAEncryption
b8:32:72:82:78:30:23:20:ed:37:51:3b:90:7a:33:54:ad:e1:
e5:97:d6:19:78:cf:e1:13:72:ee:14:c2:15:00:21:56:cb:aa:
f2:4b:5f:fe:06:c7:d1:47:e9:01:58:30:2c:8f:37:aa:51:63:
f0:a8:aa:4d:e4:35:d8:ad:71:60:01:66:52:0b:57:cf:de:da:
bc:01:90:67:f8:96:e3:1c:7e:78:78:8d:74:ba:e0:18:a6:61:
f4:6a:70:c1:90:04:b0:0d:a5:6a:4a:5e:63:35:db:44:43:e5:
49:c2:a9:ce:23:7f:6e:df:36:da:92:b9:34:a7:31:86:47:3c:
08:1c:b0:fd:2e:9f:e2:a1:8d:b0:bf:79:88:46:6b:f7:cf:26:
fb:88:13:dc:9c:84:16:ee:7b:ef:4a:fd:90:7b:01:29:80:15:
a7:3f:29:9c:53:5e:cf:2d:bb:35:4b:a4:c9:ed:31:67:cc:15:
5d:de:3e:39:de:fc:77:5f:8f:83:3d:33:6a:58:1c:ea:94:3a:
3b:65:df:85:4b:9f:2f:67:47:b3:50:68:1b:1d:cc:7a:0b:30:
b8:f6:0f:0b:ad:04:f0:a2:07:38:64:2a:d5:e6:ed:e4:45:85:
01:53:c8:3f:d3:78:cb:4a:50:b0:8d:db:0c:c1:d8:81:bc:c3:
8a:ae:83:32
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUVDchsdVbH7IL73JX1IOq0X3ZSs8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwMTQ1MzZaFw0yNzA1MjEwMTUwMzZaMDMxMTAvBgNV
BAMTKDdCNEUwNTk3NzY1NTg1OUMwQjY0NkE1NDJFQTU3NTA5OEFCMkY1QjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnqBRAgvm0Ztg5S4O+Sls+ll+e
TXGAQJCiNrlTwoDAH3urUk9na7ZGRAsihtMKFwID8QlKMlAyq+MMsegtDStenavi
NFfE7RL424TuyTBke+bo6f/W7O4MGFHlGr/8Wut9b5tG2Eru0FmmpLV1H3+e6/m5
k8LtZLT+ciFF2LAhYNQuuiv7FVwjCjlN1IEa7aP1lldLc4vtV2LfIl4uYo3F2GQY
nU/nR/Sl/O1Jhn3xlXQxNfqOntGxXCRVdLMelke2bNp5uKqYR6uSsB6flOVunXij
J9J2W0naX0ktAv5nbCKX5byFwxVRkT3Yu10vQw8F995NFyHNJFASmRqsKnWNAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUe04Fl3ZVhZwLZGpULqV1CYqy9bIwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1MjI1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqqDzANBgkqhkiG9w0BAQsFAAOCAQEAuDJy
gngwIyDtN1E7kHozVK3h5ZfWGXjP4RNy7hTCFQAhVsuq8ktf/gbH0UfpAVgwLI83
qlFj8KiqTeQ12K1xYAFmUgtXz97avAGQZ/iW4xx+eHiNdLrgGKZh9GpwwZAEsA2l
akpeYzXbREPlScKpziN/bt822pK5NKcxhkc8CByw/S6f4qGNsL95iEZr988m+4gT
3JyEFu5770r9kHsBKYAVpz8pnFNezy27NUukye0xZ8wVXd4+Od78d1+Pgz0zalgc
6pQ6O2XfhUufL2dHs1BoGx3MegswuPYPC60E8KIHOGQq1ebt5EWFAVPIP9N4y0pQ
sI3bDMHYgbzDiq6DMg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:20 2026 by rpki-client