Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145351.roa
File: AS145351.roa (raw, json)
Hash identifier: zkh4fTnGusDxnM2n+L8bqDN6MZAD5a4KxRsH7tSJoWU=
Subject key identifier: 6D:83:14:30:2D:94:CE:14:E6:81:77:92:72:DF:68:C9:C0:B0:50:7E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2E21EAB09F03619F008C5943368E258B12723EE7
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145351.roa
Signing time: Mon 25 May 2026 01:51:06 +0000
ROA not before: Mon 25 May 2026 01:46:06 +0000
ROA not after: Mon 24 May 2027 01:51:06 +0000
asID: 145351
IP address blocks: 240a:aa8d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:21:ea:b0:9f:03:61:9f:00:8c:59:43:36:8e:25:8b:12:72:3e:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:46:06 2026 GMT
Not After : May 24 01:51:06 2027 GMT
Subject: CN=6D8314302D94CE14E681779272DF68C9C0B0507E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:62:bc:6d:9a:28:72:41:b9:48:a4:54:91:1d:
15:8b:82:a6:93:a0:11:3a:2f:f6:27:64:94:c3:5d:
74:b0:66:54:72:14:c8:63:cf:43:b2:a6:8c:c1:16:
05:a9:26:d4:db:99:54:3a:fb:99:a9:c7:9b:93:cc:
b7:d3:2a:a2:a9:78:ef:9f:89:15:ba:ae:90:5c:7e:
30:e9:9a:e8:2f:08:2f:74:e8:77:a9:7e:ea:87:aa:
a6:6b:25:f0:ee:09:22:8b:6f:57:9d:d9:4b:5f:02:
c1:7a:a9:97:19:97:4b:07:3d:e6:bb:6b:42:8c:2b:
74:7c:c7:7f:c1:09:68:19:58:5a:cd:df:ab:3c:f8:
f1:05:e4:74:83:55:74:72:45:8d:ab:4d:13:d9:3f:
de:49:5d:1f:5e:84:c0:e2:a0:1a:56:0c:52:94:13:
cf:c6:5b:d9:d8:85:f9:0d:11:cd:79:64:d6:14:74:
6e:f3:af:a7:c1:62:a6:65:57:eb:07:a4:ac:fb:d6:
a6:f4:c7:a9:35:2c:51:6d:0c:3e:cc:8f:79:28:c0:
e5:73:1b:d4:f9:f8:f8:9d:40:24:88:ee:91:2d:b7:
f7:f5:e2:6d:23:50:c8:01:64:75:42:90:7f:fd:df:
7a:6a:bf:b3:73:ab:a9:a5:c6:ec:d1:87:32:af:fe:
81:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:83:14:30:2D:94:CE:14:E6:81:77:92:72:DF:68:C9:C0:B0:50:7E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145351.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa8d::/32
Signature Algorithm: sha256WithRSAEncryption
9a:ce:7b:2d:0b:62:3b:b6:68:83:65:76:06:c5:2a:55:b5:d0:
78:5a:b4:79:07:1e:8f:46:07:c7:27:9d:48:80:d1:93:05:32:
c8:5c:70:a7:a4:91:02:2b:dc:63:bb:9b:ad:d1:93:e2:a2:73:
6e:8c:3b:e6:35:f0:71:ec:25:bb:ce:96:3b:f4:3d:6a:0e:51:
0b:dc:bc:4d:90:c5:cb:e3:8a:14:b0:35:cc:09:10:74:cb:8e:
b7:6b:82:56:9a:0a:ec:da:67:95:22:88:01:00:b6:4e:74:6b:
f4:f8:85:e9:db:1f:f8:59:ab:f5:eb:bf:92:ca:34:0f:8b:ee:
17:24:33:7d:e1:2a:53:91:bc:3d:b2:86:64:29:22:05:f1:d7:
15:33:4d:ff:fa:68:90:55:3d:52:dd:8d:35:5e:17:02:33:d3:
4b:83:a7:58:2b:70:7e:2a:09:bb:27:41:82:a3:d8:56:a7:f4:
ee:85:4a:af:d6:d2:dc:58:bd:d7:fe:84:da:b1:3d:d2:01:42:
1b:cd:4b:38:b2:bd:eb:9d:cf:69:d7:e6:4e:b6:33:41:7c:e3:
44:38:e2:da:f2:84:2f:fe:51:85:38:76:31:bf:03:a5:95:cb:
b4:9f:fc:72:d7:45:2e:67:63:42:a9:bb:37:c0:c9:14:7e:c5:
2e:81:99:ec
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIULiHqsJ8DYZ8AjFlDNo4lixJyPucwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMTQ2MDZaFw0yNzA1MjQwMTUxMDZaMDMxMTAvBgNV
BAMTKDZEODMxNDMwMkQ5NENFMTRFNjgxNzc5MjcyREY2OEM5QzBCMDUwN0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHYrxtmihyQblIpFSRHRWLgqaT
oBE6L/YnZJTDXXSwZlRyFMhjz0OypozBFgWpJtTbmVQ6+5mpx5uTzLfTKqKpeO+f
iRW6rpBcfjDpmugvCC906HepfuqHqqZrJfDuCSKLb1ed2UtfAsF6qZcZl0sHPea7
a0KMK3R8x3/BCWgZWFrN36s8+PEF5HSDVXRyRY2rTRPZP95JXR9ehMDioBpWDFKU
E8/GW9nYhfkNEc15ZNYUdG7zr6fBYqZlV+sHpKz71qb0x6k1LFFtDD7Mj3kowOVz
G9T5+PidQCSI7pEtt/f14m0jUMgBZHVCkH/933pqv7Nzq6mlxuzRhzKv/oG5AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUbYMUMC2UzhTmgXeSct9oycCwUH4wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1MzUxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqqjTANBgkqhkiG9w0BAQsFAAOCAQEAms57
LQtiO7Zog2V2BsUqVbXQeFq0eQcej0YHxyedSIDRkwUyyFxwp6SRAivcY7ubrdGT
4qJzbow75jXwcewlu86WO/Q9ag5RC9y8TZDFy+OKFLA1zAkQdMuOt2uCVpoK7Npn
lSKIAQC2TnRr9PiF6dsf+Fmr9eu/kso0D4vuFyQzfeEqU5G8PbKGZCkiBfHXFTNN
//pokFU9Ut2NNV4XAjPTS4OnWCtwfioJuydBgqPYVqf07oVKr9bS3Fi91/6E2rE9
0gFCG81LOLK9653PadfmTrYzQXzjRDji2vKEL/5RhTh2Mb8DpZXLtJ/8ctdFLmdj
Qqm7N8DJFH7FLoGZ7A==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:41 2026 by rpki-client