Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145428.roa
File: AS145428.roa (raw, json)
Hash identifier: T0RQyKBA6UD9PWk61LGfCYk0PQYMfHiipqKIVWLRmu4=
Subject key identifier: 11:2F:F9:62:40:15:30:EE:F7:C9:7B:03:72:DD:03:4C:A0:86:1F:F1
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 02130452C6A14077EC9B255A6E3053A6EFF6971D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145428.roa
Signing time: Fri 22 May 2026 06:46:22 +0000
ROA not before: Fri 22 May 2026 06:41:22 +0000
ROA not after: Fri 21 May 2027 06:46:22 +0000
asID: 145428
IP address blocks: 240a:aada::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:13:04:52:c6:a1:40:77:ec:9b:25:5a:6e:30:53:a6:ef:f6:97:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:41:22 2026 GMT
Not After : May 21 06:46:22 2027 GMT
Subject: CN=112FF962401530EEF7C97B0372DD034CA0861FF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ee:73:70:d3:8f:7c:47:22:a4:bf:33:49:15:
60:17:bd:f8:cf:c0:6a:2b:b2:c6:17:13:8c:10:90:
7d:15:0d:0d:ed:0b:c6:f6:f6:bb:41:8e:bc:fd:22:
c5:91:0d:5f:d0:a2:7a:22:a9:e0:aa:f4:9e:e7:91:
96:62:65:d8:8b:a4:08:8e:d0:cc:11:9f:15:4f:e0:
30:c4:fb:e9:1a:2c:7d:c3:24:25:27:8f:08:b7:ac:
5a:71:46:69:eb:c8:9f:d2:d1:5f:c4:99:13:de:f2:
46:b3:aa:10:c3:4e:9f:06:80:07:92:26:86:37:ab:
22:0e:cd:a9:6f:ae:6c:49:ce:00:59:44:bc:cf:6c:
87:f8:c1:97:7c:8f:f5:4b:f8:c1:4d:1e:12:99:84:
22:21:a4:47:66:1d:f5:68:38:6a:48:54:cc:7b:65:
27:28:7c:c8:41:1c:57:c9:d8:1b:d3:d6:7f:5c:a8:
19:87:55:50:9e:c3:7e:a8:a5:36:87:55:1f:3f:17:
e5:86:8f:c1:cf:42:6a:d8:07:5f:65:02:5c:6a:48:
d7:f6:47:a6:66:ce:d9:22:42:65:74:8f:ce:ac:2c:
bb:ec:a0:73:98:7c:66:b8:e4:45:b9:e3:50:5b:90:
86:19:54:a2:11:c5:a3:81:03:ca:98:84:26:61:2f:
4f:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:2F:F9:62:40:15:30:EE:F7:C9:7B:03:72:DD:03:4C:A0:86:1F:F1
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145428.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aada::/32
Signature Algorithm: sha256WithRSAEncryption
6b:a0:65:c0:8e:30:6d:de:9d:fe:27:1e:1f:20:b8:72:a8:34:
0c:06:af:21:b9:55:5b:8b:dc:97:ee:80:2f:b6:76:89:35:1a:
72:72:09:77:8e:1c:8c:f1:b8:72:75:1f:16:2a:a2:9d:6f:6d:
58:87:f3:44:53:41:bb:8a:fc:cf:56:41:e1:29:90:0e:41:43:
09:73:04:80:78:77:d4:4d:0f:e1:74:97:e9:b8:3d:9f:74:76:
2c:81:d4:bc:e8:c6:5c:2b:f6:c2:cd:ae:22:a0:c4:a8:f4:61:
d7:76:13:4d:12:12:17:5e:36:1b:ee:d2:70:eb:cd:08:05:9b:
98:2e:ac:a3:04:54:60:c8:04:50:02:ef:68:0d:cc:b2:81:d4:
ad:c4:58:dc:be:e1:4f:5a:7a:91:c3:67:22:7d:5e:a5:9f:57:
e8:4e:50:b3:f4:a5:d0:a4:ae:7c:7d:24:76:4a:b0:bc:0a:44:
00:70:17:18:77:eb:2c:07:65:59:c8:f1:55:90:5b:00:8c:55:
1a:0b:31:5a:d9:6b:82:11:b2:0d:c2:c2:71:c6:09:db:25:07:
9a:af:ca:a8:34:f3:51:83:77:5a:1b:4b:01:f9:87:50:db:e0:
47:51:df:28:cf:53:9a:0e:00:86:f2:d4:d4:b8:af:60:bd:b1:
b0:17:96:a2
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUAhMEUsahQHfsmyVabjBTpu/2lx0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNjQxMjJaFw0yNzA1MjEwNjQ2MjJaMDMxMTAvBgNV
BAMTKDExMkZGOTYyNDAxNTMwRUVGN0M5N0IwMzcyREQwMzRDQTA4NjFGRjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy7nNw0498RyKkvzNJFWAXvfjP
wGorssYXE4wQkH0VDQ3tC8b29rtBjrz9IsWRDV/QonoiqeCq9J7nkZZiZdiLpAiO
0MwRnxVP4DDE++kaLH3DJCUnjwi3rFpxRmnryJ/S0V/EmRPe8kazqhDDTp8GgAeS
JoY3qyIOzalvrmxJzgBZRLzPbIf4wZd8j/VL+MFNHhKZhCIhpEdmHfVoOGpIVMx7
ZScofMhBHFfJ2BvT1n9cqBmHVVCew36opTaHVR8/F+WGj8HPQmrYB19lAlxqSNf2
R6ZmztkiQmV0j86sLLvsoHOYfGa45EW541BbkIYZVKIRxaOBA8qYhCZhL0+FAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUES/5YkAVMO73yXsDct0DTKCGH/EwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1NDI4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqq2jANBgkqhkiG9w0BAQsFAAOCAQEAa6Bl
wI4wbd6d/iceHyC4cqg0DAavIblVW4vcl+6AL7Z2iTUacnIJd44cjPG4cnUfFiqi
nW9tWIfzRFNBu4r8z1ZB4SmQDkFDCXMEgHh31E0P4XSX6bg9n3R2LIHUvOjGXCv2
ws2uIqDEqPRh13YTTRISF142G+7ScOvNCAWbmC6sowRUYMgEUALvaA3MsoHUrcRY
3L7hT1p6kcNnIn1epZ9X6E5Qs/Sl0KSufH0kdkqwvApEAHAXGHfrLAdlWcjxVZBb
AIxVGgsxWtlrghGyDcLCccYJ2yUHmq/KqDTzUYN3WhtLAfmHUNvgR1HfKM9Tmg4A
hvLU1LivYL2xsBeWog==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:15 2026 by rpki-client