Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145390.roa
File: AS145390.roa (raw, json)
Hash identifier: t/F/sx9d3lbNXYc6JkzQSLlgE9oM36nSGx+PH5fgzSw=
Subject key identifier: 9F:99:84:F1:38:69:08:11:37:89:FE:A9:6D:40:83:EF:AF:29:CB:5B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2D2F8B2AA582691EC59DF791884E700BF10A190B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145390.roa
Signing time: Tue 26 May 2026 06:12:29 +0000
ROA not before: Tue 26 May 2026 06:07:29 +0000
ROA not after: Tue 25 May 2027 06:12:29 +0000
asID: 145390
IP address blocks: 240a:aab4::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:2f:8b:2a:a5:82:69:1e:c5:9d:f7:91:88:4e:70:0b:f1:0a:19:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:07:29 2026 GMT
Not After : May 25 06:12:29 2027 GMT
Subject: CN=9F9984F1386908113789FEA96D4083EFAF29CB5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:dc:00:be:35:76:64:89:31:cf:97:4d:66:13:
84:02:d3:64:8d:eb:16:2b:cb:df:7d:54:39:4a:cd:
53:e2:4d:40:95:5f:0a:77:cd:0d:32:0d:cb:fe:3f:
1c:64:5b:79:5a:c8:00:3c:88:20:16:6e:78:46:80:
d3:53:dd:c3:ae:4b:f6:c3:4d:64:f1:2e:96:59:ba:
e9:c3:80:f3:44:75:e2:6e:41:c8:7f:cf:96:07:b5:
af:87:00:80:dd:74:ed:dc:2e:74:1d:ab:08:5c:97:
e1:65:3a:0d:60:fe:75:08:6c:2b:ef:e5:ca:a6:68:
67:0d:ae:96:47:25:30:26:46:66:e0:80:b4:2c:8c:
51:20:b9:cb:88:11:47:02:8b:ce:62:06:c2:e4:ca:
12:a9:d2:ed:34:16:c9:24:69:f1:f1:f9:8b:c0:1a:
b4:05:26:9e:29:e4:ce:1a:62:04:bf:dd:12:a0:5f:
16:52:da:ed:3d:4e:57:d4:f1:12:29:aa:87:89:88:
d2:a4:69:3b:c4:61:36:87:50:c5:4b:cb:c9:3b:fd:
f3:17:62:c7:31:b3:c0:8c:59:69:9a:06:f1:01:71:
31:3d:dd:7f:a1:16:be:46:19:d5:29:7e:1d:65:ca:
cc:e6:e4:d7:29:39:f5:92:e9:ed:96:b1:b4:c3:75:
5f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:99:84:F1:38:69:08:11:37:89:FE:A9:6D:40:83:EF:AF:29:CB:5B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145390.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aab4::/32
Signature Algorithm: sha256WithRSAEncryption
63:42:ea:d1:f4:18:af:0f:b5:a9:b9:2c:96:1a:76:2d:a5:0b:
1a:e1:f5:42:44:12:84:39:1a:0c:fc:88:87:a6:e5:cb:35:8d:
cb:50:df:86:23:9e:27:c0:ee:7c:a8:0d:f8:3f:4f:3d:3f:4a:
3c:fd:8e:66:19:fd:62:7f:8a:c0:7a:14:8d:95:9e:03:a1:90:
89:84:af:ec:ea:82:d5:22:27:d8:b4:61:99:42:48:9e:79:b7:
51:26:d5:1c:f8:b5:4b:c2:32:00:c0:11:b9:01:e7:82:95:80:
df:65:f1:ad:d5:69:85:5b:73:0f:f8:1b:ec:86:44:96:a1:68:
13:a6:82:81:e4:29:34:0e:28:3a:5c:b4:dc:37:f1:cd:a3:0d:
88:3a:67:03:30:2a:1b:fe:ad:ab:2b:71:4f:0e:92:03:4a:5d:
b3:33:f0:9f:f2:ce:92:05:03:15:f3:5d:a9:19:39:66:00:c2:
3b:39:b5:eb:68:99:95:79:df:9b:68:95:14:9c:32:53:9c:0d:
db:2e:dd:67:87:d6:91:bd:3d:39:5d:e1:2f:01:d6:41:9e:90:
ee:7e:40:4c:c2:00:49:e4:5c:9a:a6:9a:fe:32:f1:c7:43:4d:
2e:d2:72:92:d6:74:3d:df:2d:3b:d4:0b:a7:80:35:e5:90:dc:
43:a9:c8:ae
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIULS+LKqWCaR7FnfeRiE5wC/EKGQswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwNjA3MjlaFw0yNzA1MjUwNjEyMjlaMDMxMTAvBgNV
BAMTKDlGOTk4NEYxMzg2OTA4MTEzNzg5RkVBOTZENDA4M0VGQUYyOUNCNUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu3AC+NXZkiTHPl01mE4QC02SN
6xYry999VDlKzVPiTUCVXwp3zQ0yDcv+PxxkW3layAA8iCAWbnhGgNNT3cOuS/bD
TWTxLpZZuunDgPNEdeJuQch/z5YHta+HAIDddO3cLnQdqwhcl+FlOg1g/nUIbCvv
5cqmaGcNrpZHJTAmRmbggLQsjFEgucuIEUcCi85iBsLkyhKp0u00FskkafHx+YvA
GrQFJp4p5M4aYgS/3RKgXxZS2u09TlfU8RIpqoeJiNKkaTvEYTaHUMVLy8k7/fMX
Yscxs8CMWWmaBvEBcTE93X+hFr5GGdUpfh1lyszm5NcpOfWS6e2WsbTDdV/vAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUn5mE8ThpCBE3if6pbUCD768py1swHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1MzkwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqqtDANBgkqhkiG9w0BAQsFAAOCAQEAY0Lq
0fQYrw+1qbkslhp2LaULGuH1QkQShDkaDPyIh6blyzWNy1DfhiOeJ8DufKgN+D9P
PT9KPP2OZhn9Yn+KwHoUjZWeA6GQiYSv7OqC1SIn2LRhmUJInnm3USbVHPi1S8Iy
AMARuQHngpWA32XxrdVphVtzD/gb7IZElqFoE6aCgeQpNA4oOly03DfxzaMNiDpn
AzAqG/6tqytxTw6SA0pdszPwn/LOkgUDFfNdqRk5ZgDCOzm162iZlXnfm2iVFJwy
U5wN2y7dZ4fWkb09OV3hLwHWQZ6Q7n5ATMIASeRcmqaa/jLxx0NNLtJyktZ0Pd8t
O9QLp4A15ZDcQ6nIrg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:11 2026 by rpki-client