Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145366.roa
File: AS145366.roa (raw, json)
Hash identifier: dYqpoxMy7Wh00+//EFqV54ZpS/tn2jtsFiHHNTMIe6k=
Subject key identifier: 2A:F5:12:4F:67:A2:28:BE:28:45:80:2E:6E:7A:F0:D4:EF:38:FE:6B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 16D6FB29A2FEBB61F50FBC36166EAAC895FD0DC5
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145366.roa
Signing time: Tue 26 May 2026 01:13:12 +0000
ROA not before: Tue 26 May 2026 01:08:12 +0000
ROA not after: Tue 25 May 2027 01:13:12 +0000
asID: 145366
IP address blocks: 240a:aa9c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
16:d6:fb:29:a2:fe:bb:61:f5:0f:bc:36:16:6e:aa:c8:95:fd:0d:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:08:12 2026 GMT
Not After : May 25 01:13:12 2027 GMT
Subject: CN=2AF5124F67A228BE2845802E6E7AF0D4EF38FE6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b8:d1:0c:f4:fc:88:c0:9b:de:91:1a:4e:f5:
d8:9c:71:51:b7:67:66:7b:8a:f3:4e:97:5c:76:03:
90:fd:0d:9a:d7:e2:b5:cc:99:06:c3:ff:5f:e0:2f:
b8:ae:bc:2a:7b:04:0d:29:14:ad:75:df:35:21:78:
b8:fa:85:ec:37:d4:cf:2a:ee:5c:93:66:99:3d:fc:
be:5f:dd:8c:a1:cd:d9:4f:01:72:41:fa:ae:43:d2:
f5:3f:d7:49:b5:05:8c:a5:37:a1:09:85:3f:cf:c3:
c5:fd:c3:e5:e7:5c:23:7e:89:70:76:ec:e4:1d:b9:
55:a2:e1:61:01:09:b7:98:14:ad:db:e4:3c:b1:35:
49:ef:01:d4:45:c9:d0:8a:3c:2a:3b:61:00:39:bf:
0f:93:02:49:9d:80:8a:03:39:34:27:66:c4:2e:e5:
7a:78:0f:9c:c6:4c:92:0c:de:75:ed:14:66:d0:85:
65:56:10:6f:3a:e1:33:fb:33:ed:8e:59:cc:82:fd:
67:5b:4a:2f:ec:6e:3f:4d:4b:1f:d8:70:1d:09:3e:
32:8e:b3:f3:41:da:74:0f:82:dd:7e:b8:ff:4e:38:
2b:5b:d2:ea:0d:98:9a:af:7f:90:e3:32:5c:3c:74:
1f:00:83:8d:85:df:7b:ca:e4:6f:c0:24:1a:aa:97:
e5:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F5:12:4F:67:A2:28:BE:28:45:80:2E:6E:7A:F0:D4:EF:38:FE:6B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145366.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aa9c::/32
Signature Algorithm: sha256WithRSAEncryption
2f:b1:30:b5:6b:3a:ac:e1:ca:48:84:6f:a9:ee:7a:c6:5e:bf:
8a:a3:05:1c:ef:14:2e:25:4d:ca:dc:95:b2:a1:ce:df:f7:4d:
d0:f2:cd:ae:d3:22:54:38:7f:41:5c:dc:29:43:e5:16:e5:57:
8e:b2:bf:11:99:ca:d3:e8:87:6e:87:5e:21:93:9d:80:39:12:
82:ce:ed:0b:36:c2:06:76:7d:a7:24:42:8f:21:4a:c2:86:d6:
f0:7c:11:da:16:b8:4f:bb:a4:b2:59:e4:70:2e:90:ec:5a:ef:
94:c6:18:ff:96:8c:f9:f0:8d:a4:c8:09:e0:83:b9:45:3f:72:
0c:5b:79:d0:11:ad:ab:70:96:6d:da:21:e3:af:07:e5:fa:a3:
49:c6:85:a0:42:ec:6f:37:9e:92:41:f1:b2:b4:f1:97:d1:d3:
47:83:03:1b:79:2e:6f:33:5b:ae:78:7d:de:a6:4b:6d:57:94:
25:d8:ca:96:dc:d1:42:f2:1e:01:c3:4c:93:7b:5a:f8:78:d5:
ef:ce:bf:24:b4:71:ee:30:3d:00:89:90:20:a4:0b:da:20:2c:
36:b9:99:6a:77:2e:51:33:a5:e8:df:3f:80:c3:a4:ef:e5:98:
de:4b:62:ab:4c:59:30:40:d9:88:d7:97:c2:77:e5:f0:29:4b:
1b:5b:99:c2
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUFtb7KaL+u2H1D7w2Fm6qyJX9DcUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMTA4MTJaFw0yNzA1MjUwMTEzMTJaMDMxMTAvBgNV
BAMTKDJBRjUxMjRGNjdBMjI4QkUyODQ1ODAyRTZFN0FGMEQ0RUYzOEZFNkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtuNEM9PyIwJvekRpO9diccVG3
Z2Z7ivNOl1x2A5D9DZrX4rXMmQbD/1/gL7iuvCp7BA0pFK113zUheLj6hew31M8q
7lyTZpk9/L5f3YyhzdlPAXJB+q5D0vU/10m1BYylN6EJhT/Pw8X9w+XnXCN+iXB2
7OQduVWi4WEBCbeYFK3b5DyxNUnvAdRFydCKPCo7YQA5vw+TAkmdgIoDOTQnZsQu
5Xp4D5zGTJIM3nXtFGbQhWVWEG864TP7M+2OWcyC/WdbSi/sbj9NSx/YcB0JPjKO
s/NB2nQPgt1+uP9OOCtb0uoNmJqvf5DjMlw8dB8Ag42F33vK5G/AJBqql+U7AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUKvUST2eiKL4oRYAubnrw1O84/mswHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1MzY2LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqqnDANBgkqhkiG9w0BAQsFAAOCAQEAL7Ew
tWs6rOHKSIRvqe56xl6/iqMFHO8ULiVNytyVsqHO3/dN0PLNrtMiVDh/QVzcKUPl
FuVXjrK/EZnK0+iHbodeIZOdgDkSgs7tCzbCBnZ9pyRCjyFKwobW8HwR2ha4T7uk
slnkcC6Q7FrvlMYY/5aM+fCNpMgJ4IO5RT9yDFt50BGtq3CWbdoh468H5fqjScaF
oELsbzeekkHxsrTxl9HTR4MDG3kubzNbrnh93qZLbVeUJdjKltzRQvIeAcNMk3ta
+HjV786/JLRx7jA9AImQIKQL2iAsNrmZancuUTOl6N8/gMOk7+WY3ktiq0xZMEDZ
iNeXwnfl8ClLG1uZwg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:01 2026 by rpki-client