Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145489.roa
File: AS145489.roa (raw, json)
Hash identifier: 7LxxPqUg8Anq91ZPzbcOYgFIWmYTx3ws2e78qM6g0cc=
Subject key identifier: 68:A0:7E:34:8D:87:F3:79:B9:97:C1:01:AF:62:35:EA:42:59:A0:0E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 46007E76BEBE84112D1266476DE26008AC96CBEC
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145489.roa
Signing time: Mon 25 May 2026 02:22:28 +0000
ROA not before: Mon 25 May 2026 02:17:28 +0000
ROA not after: Mon 24 May 2027 02:22:28 +0000
asID: 145489
IP address blocks: 240a:ab17::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:00:7e:76:be:be:84:11:2d:12:66:47:6d:e2:60:08:ac:96:cb:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:28 2026 GMT
Not After : May 24 02:22:28 2027 GMT
Subject: CN=68A07E348D87F379B997C101AF6235EA4259A00E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:aa:21:20:c2:be:46:11:46:b3:d0:37:3d:7a:
40:e2:d7:87:33:49:6c:96:9a:ea:a0:79:3c:72:98:
1f:46:ce:c3:8c:6f:0c:99:90:22:5b:53:cb:51:a2:
2f:94:e7:da:c9:d1:7b:35:bf:2d:b6:79:09:31:af:
94:d9:1f:cc:08:bb:e9:79:03:57:4c:c1:c4:95:b4:
d0:71:36:d0:86:60:ac:fc:a5:33:98:cc:a0:e6:b9:
92:6b:ea:04:58:3e:97:d6:bf:3a:0b:a6:0b:e8:36:
71:d8:85:bb:c3:45:71:73:ed:e3:82:c4:08:de:47:
0a:2e:86:17:a7:7d:26:a0:60:80:6c:51:21:58:55:
74:6e:c7:51:58:9f:d4:ac:c9:02:02:ce:6e:db:ba:
92:e6:b6:47:2f:34:c1:2b:4b:b5:37:8c:f1:04:41:
ed:2b:ef:09:15:4a:d1:d1:b4:1e:78:75:be:44:d3:
d3:6a:4c:f7:27:18:c6:24:18:d5:95:8a:7c:dc:3d:
c4:cc:57:10:ff:a9:e2:f5:1a:ab:ab:6c:34:d3:d8:
8d:3d:44:91:5c:22:46:16:ca:a6:ba:12:1a:6e:de:
a7:0b:a2:09:b6:1e:80:35:ea:d8:bd:26:cd:b2:9e:
98:21:bd:ea:5c:c1:c0:1f:dd:c3:bb:43:e5:b0:60:
a2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:A0:7E:34:8D:87:F3:79:B9:97:C1:01:AF:62:35:EA:42:59:A0:0E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145489.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ab17::/32
Signature Algorithm: sha256WithRSAEncryption
09:74:d5:0d:95:fb:2e:43:75:e4:d0:b7:29:73:05:78:f3:d8:
6e:93:87:6e:b4:fb:73:bc:35:f5:3c:9e:70:4a:f2:7b:19:d4:
35:8f:50:c1:a3:6b:1a:b7:cd:ee:1f:7f:0f:a2:85:ce:ad:69:
4e:3e:e2:dd:a3:11:6d:b3:0a:b3:4f:3e:3d:be:b2:96:d0:75:
bf:a3:07:a7:b3:17:ea:91:11:ca:31:5c:a7:b8:da:aa:f8:be:
80:ad:56:62:cc:63:3b:e1:25:72:6f:d3:03:cb:f3:18:db:99:
44:f7:6d:98:78:77:65:13:a8:29:09:24:1f:c5:b8:9a:bb:5a:
82:6c:54:c6:0c:47:4f:d7:d0:22:6d:7e:68:92:b9:de:61:de:
17:b1:9e:14:e3:98:50:41:c6:1d:bb:d3:67:ed:b6:4f:47:0a:
c5:c4:22:c9:78:d0:3e:1e:ce:36:82:22:68:00:81:d7:5d:67:
ab:16:04:ac:bd:68:2a:4b:06:c6:04:fa:00:c8:12:91:37:29:
2f:a5:97:38:11:e9:28:08:03:6d:12:27:bd:83:d6:ca:bf:69:
98:fd:6a:d9:d4:36:62:9d:01:80:90:3d:79:29:69:62:1f:08:
95:48:2e:0b:b7:23:0a:be:70:4d:50:88:3e:54:cd:9b:54:8e:
01:67:db:7a
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIURgB+dr6+hBEtEmZHbeJgCKyWy+wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMjE3MjhaFw0yNzA1MjQwMjIyMjhaMDMxMTAvBgNV
BAMTKDY4QTA3RTM0OEQ4N0YzNzlCOTk3QzEwMUFGNjIzNUVBNDI1OUEwMEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiqiEgwr5GEUaz0Dc9ekDi14cz
SWyWmuqgeTxymB9GzsOMbwyZkCJbU8tRoi+U59rJ0Xs1vy22eQkxr5TZH8wIu+l5
A1dMwcSVtNBxNtCGYKz8pTOYzKDmuZJr6gRYPpfWvzoLpgvoNnHYhbvDRXFz7eOC
xAjeRwouhhenfSagYIBsUSFYVXRux1FYn9SsyQICzm7bupLmtkcvNMErS7U3jPEE
Qe0r7wkVStHRtB54db5E09NqTPcnGMYkGNWVinzcPcTMVxD/qeL1GqurbDTT2I09
RJFcIkYWyqa6Ehpu3qcLogm2HoA16ti9Js2ynpghvepcwcAf3cO7Q+WwYKJVAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUaKB+NI2H83m5l8EBr2I16kJZoA4wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1NDg5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqrFzANBgkqhkiG9w0BAQsFAAOCAQEACXTV
DZX7LkN15NC3KXMFePPYbpOHbrT7c7w19TyecEryexnUNY9QwaNrGrfN7h9/D6KF
zq1pTj7i3aMRbbMKs08+Pb6yltB1v6MHp7MX6pERyjFcp7jaqvi+gK1WYsxjO+El
cm/TA8vzGNuZRPdtmHh3ZROoKQkkH8W4mrtagmxUxgxHT9fQIm1+aJK53mHeF7Ge
FOOYUEHGHbvTZ+22T0cKxcQiyXjQPh7ONoIiaACB111nqxYErL1oKksGxgT6AMgS
kTcpL6WXOBHpKAgDbRInvYPWyr9pmP1q2dQ2Yp0BgJA9eSlpYh8IlUguC7cjCr5w
TVCIPlTNm1SOAWfbeg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:01 2026 by rpki-client