Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145346.roa
File: AS145346.roa (raw, json)
Hash identifier: rl+TuCSVkmWGaSgwaMqmIgdnAFRWuLMM+7N7KfA9sOU=
Subject key identifier: 3A:DA:F5:66:B2:BE:8F:BA:A3:B1:EE:36:75:D4:91:B7:D2:7F:1E:1B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 63E03647772035854F2CFDA3BEAADBBD1023E8E2
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145346.roa
Signing time: Fri 22 May 2026 07:08:43 +0000
ROA not before: Fri 22 May 2026 07:03:43 +0000
ROA not after: Fri 21 May 2027 07:08:43 +0000
asID: 145346
IP address blocks: 240a:aa88::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:e0:36:47:77:20:35:85:4f:2c:fd:a3:be:aa:db:bd:10:23:e8:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:03:43 2026 GMT
Not After : May 21 07:08:43 2027 GMT
Subject: CN=3ADAF566B2BE8FBAA3B1EE3675D491B7D27F1E1B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1d:b7:df:a6:bc:05:00:3a:8d:eb:59:de:ac:
58:00:58:79:ce:07:f7:c4:35:60:40:e1:7a:db:a0:
8e:64:78:d9:30:e9:10:2b:ac:03:01:c2:ae:b4:9e:
98:f5:bb:ca:f0:3b:32:36:23:f5:a7:cc:9e:ec:55:
f7:3e:8c:4a:53:31:72:f8:74:75:96:ed:0d:60:cf:
f2:ee:f5:e9:02:18:15:bb:8f:c6:4e:b7:ca:ce:31:
b2:46:d1:b5:a6:ad:cc:22:f0:7c:da:c0:9b:b7:af:
db:18:37:b4:05:e1:d8:41:dd:7c:6d:8b:dd:5c:4b:
88:e4:7a:c6:e9:31:66:05:ab:f3:e8:12:9f:fe:50:
f0:1a:8c:0e:80:85:53:1f:97:56:81:4b:9e:8d:6f:
ec:78:9d:30:4f:09:e3:0e:1b:91:19:15:7c:d1:6f:
dd:46:62:c9:8c:b9:71:7b:bc:f9:72:98:c4:31:fe:
2f:8e:33:6d:77:5f:8c:b1:ee:10:3d:18:89:f1:96:
a1:18:63:2a:b1:2d:40:6a:d7:d0:5a:17:14:79:84:
35:66:fd:21:cf:81:74:c1:3f:dd:52:ae:87:df:5d:
8f:89:f9:32:6d:f1:6d:d3:b6:41:64:54:f0:b1:ad:
e9:17:0f:45:e9:b9:1a:2c:70:0c:4c:f0:3c:82:ef:
54:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:DA:F5:66:B2:BE:8F:BA:A3:B1:EE:36:75:D4:91:B7:D2:7F:1E:1B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145346.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa88::/32
Signature Algorithm: sha256WithRSAEncryption
91:5e:be:e0:d1:f7:7c:64:c6:6a:36:85:81:10:eb:0c:f8:5a:
c5:3d:6e:5e:83:5c:35:60:41:92:96:14:2c:7f:68:c5:d3:1c:
37:64:0d:ac:b6:e9:51:2c:86:dc:dc:1e:fd:c1:b2:bf:af:44:
28:fd:02:1a:4e:8a:8f:1e:09:cd:e7:7c:06:81:06:25:65:fc:
6b:b0:50:22:9d:d0:05:52:82:34:c9:48:8f:8c:be:80:4c:49:
c7:fd:20:e5:66:10:a9:e8:a4:9a:de:5a:bf:cd:c1:32:72:64:
6d:5b:c5:4e:31:4d:c0:b8:d9:ad:5f:99:ea:6c:fa:43:93:e7:
4d:0b:61:40:e9:e5:1c:65:75:e1:20:c6:e5:40:4a:f2:f9:36:
88:20:28:ba:87:26:95:11:ec:f5:10:f1:55:17:7c:06:1b:77:
24:b9:7d:f9:38:81:76:50:f9:45:87:37:55:4d:d7:2e:d3:ac:
73:ee:bb:64:13:a1:7b:a4:70:28:eb:67:c7:51:55:ea:4f:31:
5f:02:53:d8:a1:cf:9d:08:20:45:68:cb:55:a9:c4:10:db:3c:
ff:41:62:3d:66:ac:57:3d:36:36:e7:18:0e:8e:b2:97:48:10:
27:9c:a0:fa:fb:e9:36:f7:98:01:00:d3:86:12:94:f7:f4:ac:
f2:b5:f1:f9
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUY+A2R3cgNYVPLP2jvqrbvRAj6OIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNzAzNDNaFw0yNzA1MjEwNzA4NDNaMDMxMTAvBgNV
BAMTKDNBREFGNTY2QjJCRThGQkFBM0IxRUUzNjc1RDQ5MUI3RDI3RjFFMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSHbffprwFADqN61nerFgAWHnO
B/fENWBA4XrboI5keNkw6RArrAMBwq60npj1u8rwOzI2I/WnzJ7sVfc+jEpTMXL4
dHWW7Q1gz/Lu9ekCGBW7j8ZOt8rOMbJG0bWmrcwi8HzawJu3r9sYN7QF4dhB3Xxt
i91cS4jkesbpMWYFq/PoEp/+UPAajA6AhVMfl1aBS56Nb+x4nTBPCeMOG5EZFXzR
b91GYsmMuXF7vPlymMQx/i+OM213X4yx7hA9GInxlqEYYyqxLUBq19BaFxR5hDVm
/SHPgXTBP91SroffXY+J+TJt8W3TtkFkVPCxrekXD0XpuRoscAxM8DyC71QjAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUOtr1ZrK+j7qjse42ddSRt9J/HhswHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1MzQ2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqqiDANBgkqhkiG9w0BAQsFAAOCAQEAkV6+
4NH3fGTGajaFgRDrDPhaxT1uXoNcNWBBkpYULH9oxdMcN2QNrLbpUSyG3Nwe/cGy
v69EKP0CGk6Kjx4Jzed8BoEGJWX8a7BQIp3QBVKCNMlIj4y+gExJx/0g5WYQqeik
mt5av83BMnJkbVvFTjFNwLjZrV+Z6mz6Q5PnTQthQOnlHGV14SDG5UBK8vk2iCAo
uocmlRHs9RDxVRd8Bht3JLl9+TiBdlD5RYc3VU3XLtOsc+67ZBOhe6RwKOtnx1FV
6k8xXwJT2KHPnQggRWjLVanEENs8/0FiPWasVz02NucYDo6yl0gQJ5yg+vvpNveY
AQDThhKU9/Ss8rXx+Q==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:38 2026 by rpki-client