Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145320.roa
File: AS145320.roa (raw, json)
Hash identifier: +dtN24c422WZq7E2zXQGvH5NQpSnB7t2S/AeebV+x8I=
Subject key identifier: 0B:AF:C5:F2:26:33:F7:51:EB:4A:E7:54:D8:B0:D5:0F:2F:D1:F0:A5
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1F44029003514CAAF752914743458795239FAC63
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145320.roa
Signing time: Mon 25 May 2026 06:48:48 +0000
ROA not before: Mon 25 May 2026 06:43:48 +0000
ROA not after: Mon 24 May 2027 06:48:48 +0000
asID: 145320
IP address blocks: 240a:aa6e::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:44:02:90:03:51:4c:aa:f7:52:91:47:43:45:87:95:23:9f:ac:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:43:48 2026 GMT
Not After : May 24 06:48:48 2027 GMT
Subject: CN=0BAFC5F22633F751EB4AE754D8B0D50F2FD1F0A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:85:90:eb:ca:cb:cd:6b:bf:cd:61:d1:48:6f:
56:e2:3e:54:39:6f:76:c2:3c:7d:74:df:8f:c5:bf:
be:38:2c:1e:97:4e:96:ce:a0:35:97:d2:c0:8c:03:
d1:b7:61:dc:49:e4:c7:ab:ee:ea:0c:36:3b:17:67:
b9:e0:8b:be:70:9b:89:e6:9f:72:21:c7:06:b0:35:
a0:87:e6:89:36:d9:ae:4d:f8:71:e0:92:22:48:49:
e8:2d:c9:99:40:d7:ce:c3:59:c5:09:9d:b2:6e:65:
9a:50:2c:8d:c4:2a:49:2e:04:5e:4f:93:06:2a:dc:
af:9d:77:80:07:04:97:81:f6:39:f8:43:34:df:ca:
bd:40:bd:8a:55:03:fe:c4:f4:25:0f:5b:58:f7:a4:
ec:3f:a2:38:61:0d:a4:e5:6a:51:63:2a:33:f5:ba:
32:29:00:a6:2d:9a:ec:0a:fe:24:a5:0a:02:b7:c6:
fa:19:ce:b0:84:47:3b:26:8a:85:46:87:62:a2:86:
20:0a:f3:52:80:45:62:3b:f6:fa:07:dc:4f:d6:13:
cc:66:71:14:88:b2:b5:56:b4:e7:57:79:b6:7b:3a:
5f:d7:15:c2:2d:55:69:90:f9:9e:52:63:58:6a:6f:
4b:2d:7c:9f:ae:40:fe:ba:b2:c9:c6:f6:91:96:7f:
1f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:AF:C5:F2:26:33:F7:51:EB:4A:E7:54:D8:B0:D5:0F:2F:D1:F0:A5
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145320.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa6e::/32
Signature Algorithm: sha256WithRSAEncryption
5a:74:e2:84:19:4d:50:90:09:c6:8a:6b:ee:39:e1:d1:33:ed:
92:be:5c:a7:71:58:36:22:93:0c:a7:a2:6b:83:22:45:ee:23:
a7:ca:ad:82:f0:cb:97:60:ae:6a:85:dc:f9:ed:b4:92:e0:a4:
b6:74:49:23:65:43:17:96:6c:56:1e:ea:d8:ab:54:4c:6f:77:
b7:11:f9:dc:65:d6:31:79:b3:0e:fe:11:b9:65:4c:52:73:3d:
85:dc:16:47:e0:a5:8a:54:47:3b:b8:5c:7c:ac:de:5c:c8:9b:
01:d8:23:9e:d7:f1:c9:2c:2e:92:c9:ac:e7:25:86:2b:87:a4:
7c:d6:7f:4a:2a:7a:89:17:70:75:de:ea:57:1d:07:ca:8a:b2:
5e:7b:32:a7:bd:89:19:75:29:79:5f:66:17:5d:e3:0e:2e:17:
ff:1f:0a:80:ff:b8:ca:77:ca:a2:c1:9e:90:13:ab:29:96:3f:
6f:20:98:19:ec:17:31:8f:4a:69:2e:a0:9b:a4:a1:51:e5:53:
15:7b:49:41:9d:f2:5b:df:96:a0:e1:e8:66:7a:42:4f:fc:5b:
06:cb:a7:0d:ce:70:35:04:c8:bb:96:f6:fb:77:8c:d9:b5:16:
48:32:18:3f:27:41:72:df:34:09:f4:bb:a9:94:e7:98:89:87:
e2:12:5a:12
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUH0QCkANRTKr3UpFHQ0WHlSOfrGMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwNjQzNDhaFw0yNzA1MjQwNjQ4NDhaMDMxMTAvBgNV
BAMTKDBCQUZDNUYyMjYzM0Y3NTFFQjRBRTc1NEQ4QjBENTBGMkZEMUYwQTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDhZDrysvNa7/NYdFIb1biPlQ5
b3bCPH1034/Fv744LB6XTpbOoDWX0sCMA9G3YdxJ5Mer7uoMNjsXZ7ngi75wm4nm
n3IhxwawNaCH5ok22a5N+HHgkiJISegtyZlA187DWcUJnbJuZZpQLI3EKkkuBF5P
kwYq3K+dd4AHBJeB9jn4QzTfyr1AvYpVA/7E9CUPW1j3pOw/ojhhDaTlalFjKjP1
ujIpAKYtmuwK/iSlCgK3xvoZzrCERzsmioVGh2KihiAK81KARWI79voH3E/WE8xm
cRSIsrVWtOdXebZ7Ol/XFcItVWmQ+Z5SY1hqb0stfJ+uQP66ssnG9pGWfx9ZAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUC6/F8iYz91HrSudU2LDVDy/R8KUwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1MzIwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqqbjANBgkqhkiG9w0BAQsFAAOCAQEAWnTi
hBlNUJAJxopr7jnh0TPtkr5cp3FYNiKTDKeia4MiRe4jp8qtgvDLl2CuaoXc+e20
kuCktnRJI2VDF5ZsVh7q2KtUTG93txH53GXWMXmzDv4RuWVMUnM9hdwWR+ClilRH
O7hcfKzeXMibAdgjntfxySwuksms5yWGK4ekfNZ/Sip6iRdwdd7qVx0HyoqyXnsy
p72JGXUpeV9mF13jDi4X/x8KgP+4ynfKosGekBOrKZY/byCYGewXMY9KaS6gm6Sh
UeVTFXtJQZ3yW9+WoOHoZnpCT/xbBsunDc5wNQTIu5b2+3eM2bUWSDIYPydBct80
CfS7qZTnmImH4hJaEg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:12 2026 by rpki-client