Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145334.roa
File: AS145334.roa (raw, json)
Hash identifier: H4NDy/w7OTqfQ/O8TFLJmXPicpopXECNK2BcEXUosK8=
Subject key identifier: C3:BF:94:5E:A6:68:48:8D:54:72:5A:41:A5:F6:23:41:B6:96:8E:38
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 37B46750526437A5623CEF1F178609AAEB7C28F2
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145334.roa
Signing time: Tue 26 May 2026 08:52:41 +0000
ROA not before: Tue 26 May 2026 08:47:41 +0000
ROA not after: Tue 25 May 2027 08:52:41 +0000
asID: 145334
IP address blocks: 240a:aa7c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:b4:67:50:52:64:37:a5:62:3c:ef:1f:17:86:09:aa:eb:7c:28:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 08:47:41 2026 GMT
Not After : May 25 08:52:41 2027 GMT
Subject: CN=C3BF945EA668488D54725A41A5F62341B6968E38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f2:75:43:27:95:f8:59:3f:8e:ce:c5:cf:f5:
45:d4:ad:70:f7:ca:83:63:47:74:9e:a3:ba:a8:09:
f6:af:f5:7f:96:ca:3a:31:68:f4:2b:25:64:63:f1:
94:eb:d8:2e:40:7c:c4:f0:ba:66:28:70:5a:5f:b6:
1d:ba:55:cd:0b:05:6e:81:bf:5d:ef:61:ca:b9:4c:
26:f8:da:c0:60:b2:a3:45:fa:19:6c:f9:d6:f5:02:
e1:67:d6:91:28:4f:c4:61:dd:d5:5b:69:38:64:d0:
64:00:6d:22:b1:4a:63:d7:87:d8:41:3d:aa:f1:09:
c7:cf:a7:42:29:b1:12:96:91:91:dd:a8:89:a1:e3:
6f:0c:73:80:ae:e6:68:39:01:99:4c:33:6f:52:64:
83:7d:3c:a8:73:a6:b8:20:bf:2b:46:6e:ae:76:ea:
73:68:48:b9:2d:a0:66:bf:24:78:9f:40:cb:7c:ba:
50:cf:af:57:04:3e:fe:87:8c:39:1d:f7:1a:9b:0f:
25:38:a6:13:0f:61:49:3b:55:42:2f:56:4b:20:fa:
22:55:ac:6f:d0:0c:4d:99:44:c6:fa:13:83:7d:fa:
da:59:b4:43:9c:e8:14:53:98:1c:8b:83:fa:0d:04:
8b:ce:74:42:17:9e:ed:b0:8c:96:41:c8:ca:c2:ed:
06:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:BF:94:5E:A6:68:48:8D:54:72:5A:41:A5:F6:23:41:B6:96:8E:38
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa7c::/32
Signature Algorithm: sha256WithRSAEncryption
9a:f7:c0:a9:5a:7b:a2:99:9a:d4:fa:b7:0f:e1:ba:39:ba:34:
fd:60:ff:d3:ad:d8:5e:bd:70:9d:88:e4:89:27:6d:55:fa:b7:
ee:40:89:1a:a5:25:29:a0:bb:90:cf:fd:4e:4a:f9:16:a1:e3:
a6:3a:84:8b:9d:30:ab:69:33:38:77:3b:11:e5:55:10:23:73:
e3:25:bf:c5:cf:ce:1c:32:5f:2f:68:3a:fd:1e:b6:89:07:90:
e9:2a:d2:e8:9f:4f:61:a1:2d:7a:07:88:20:fe:7f:dc:06:05:
15:a3:b7:e2:73:22:48:9a:a4:81:07:7b:66:5d:9d:97:f5:40:
0d:63:16:af:ae:e2:76:dc:ff:66:ab:1c:d6:cf:ca:27:46:d2:
bf:0f:2f:72:c1:6e:17:24:9f:55:ac:95:3f:81:ce:c2:4e:04:
5b:e2:d6:38:2b:29:5c:06:16:a0:b8:45:68:0c:32:cc:65:9c:
0b:db:91:ce:10:3e:d1:af:18:15:ff:0d:70:82:7b:e6:23:5a:
a5:89:1b:38:aa:63:21:39:ec:63:a2:8a:03:e7:16:f8:08:00:
be:f9:82:95:87:58:17:e5:92:01:ac:c0:e6:c7:e6:ce:b8:71:
6f:07:7e:7b:7e:9e:67:b5:e0:5d:b6:b5:f5:56:98:aa:61:08:
fc:27:ea:a5
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUN7RnUFJkN6ViPO8fF4YJqut8KPIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwODQ3NDFaFw0yNzA1MjUwODUyNDFaMDMxMTAvBgNV
BAMTKEMzQkY5NDVFQTY2ODQ4OEQ1NDcyNUE0MUE1RjYyMzQxQjY5NjhFMzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJ8nVDJ5X4WT+OzsXP9UXUrXD3
yoNjR3Seo7qoCfav9X+WyjoxaPQrJWRj8ZTr2C5AfMTwumYocFpfth26Vc0LBW6B
v13vYcq5TCb42sBgsqNF+hls+db1AuFn1pEoT8Rh3dVbaThk0GQAbSKxSmPXh9hB
ParxCcfPp0IpsRKWkZHdqImh428Mc4Cu5mg5AZlMM29SZIN9PKhzprggvytGbq52
6nNoSLktoGa/JHifQMt8ulDPr1cEPv6HjDkd9xqbDyU4phMPYUk7VUIvVksg+iJV
rG/QDE2ZRMb6E4N9+tpZtEOc6BRTmByLg/oNBIvOdEIXnu2wjJZByMrC7QbnAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUw7+UXqZoSI1UclpBpfYjQbaWjjgwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1MzM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqqfDANBgkqhkiG9w0BAQsFAAOCAQEAmvfA
qVp7opma1Pq3D+G6Obo0/WD/063YXr1wnYjkiSdtVfq37kCJGqUlKaC7kM/9Tkr5
FqHjpjqEi50wq2kzOHc7EeVVECNz4yW/xc/OHDJfL2g6/R62iQeQ6SrS6J9PYaEt
egeIIP5/3AYFFaO34nMiSJqkgQd7Zl2dl/VADWMWr67idtz/Zqsc1s/KJ0bSvw8v
csFuFySfVayVP4HOwk4EW+LWOCspXAYWoLhFaAwyzGWcC9uRzhA+0a8YFf8NcIJ7
5iNapYkbOKpjITnsY6KKA+cW+AgAvvmClYdYF+WSAazA5sfmzrhxbwd+e36eZ7Xg
Xba19VaYqmEI/CfqpQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:20 2026 by rpki-client