Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145514.roa
File: AS145514.roa (raw, json)
Hash identifier: rTcKU8eIm6GTl59XFQfoMewFUw4qyEnzl9JlrIdY7WM=
Subject key identifier: F8:44:7B:6B:89:10:D4:23:4E:E5:09:B9:BF:74:F7:D8:73:FB:BA:23
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4F49EBB634FA1021A19E05847261DC75371E3281
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145514.roa
Signing time: Tue 26 May 2026 01:13:25 +0000
ROA not before: Tue 26 May 2026 01:08:25 +0000
ROA not after: Tue 25 May 2027 01:13:25 +0000
asID: 145514
IP address blocks: 240a:ab30::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:49:eb:b6:34:fa:10:21:a1:9e:05:84:72:61:dc:75:37:1e:32:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:08:25 2026 GMT
Not After : May 25 01:13:25 2027 GMT
Subject: CN=F8447B6B8910D4234EE509B9BF74F7D873FBBA23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:bf:47:75:f1:e5:40:f6:bb:db:47:ec:73:52:
aa:d3:62:3c:de:60:74:5e:b1:c0:c6:2e:4e:92:56:
02:42:5f:ce:31:fd:ae:4b:ed:26:5f:ce:ed:2d:49:
d1:6e:23:66:14:ec:3a:4a:eb:60:3d:5b:6a:4d:4d:
75:8c:32:70:85:06:3e:7f:97:fd:40:0e:99:32:a1:
63:15:93:98:13:07:8e:95:7d:b5:c6:34:9a:4a:fa:
62:97:53:d8:9c:b4:29:0c:c0:79:5c:65:38:fc:aa:
38:77:5e:f0:6b:1d:4e:45:ab:c5:0d:f0:14:33:ef:
d4:00:51:80:a5:7d:86:c1:6c:b9:54:fc:fc:e6:57:
b9:8e:b2:58:c7:1f:e3:45:3f:a1:2c:bb:39:ad:eb:
66:09:3f:bb:2e:34:c0:6d:d5:be:8d:3a:9e:78:ed:
86:d9:88:16:22:11:8a:c0:0e:b5:4f:95:a5:58:38:
a9:cf:27:de:f7:95:e7:6f:af:0f:29:36:1f:c1:94:
65:94:c1:75:f8:bc:5e:aa:09:59:ad:66:37:42:01:
86:8d:a0:2c:64:a4:dc:4b:f8:a4:14:45:03:02:73:
f0:25:29:b5:31:86:d7:72:71:e9:ef:63:67:b5:1a:
0f:e9:59:9b:d5:b1:b7:07:b8:ab:ad:e8:4d:e9:db:
7d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:44:7B:6B:89:10:D4:23:4E:E5:09:B9:BF:74:F7:D8:73:FB:BA:23
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145514.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ab30::/32
Signature Algorithm: sha256WithRSAEncryption
2c:4c:aa:90:26:6d:ca:7c:0a:c0:03:1b:69:52:e3:64:6c:c7:
43:d4:32:1b:85:bf:b3:51:1f:cf:9d:54:3a:a0:71:83:65:dc:
d4:99:09:f2:76:d1:6a:cb:7c:6c:4d:0c:a6:fb:eb:0c:8e:40:
66:5f:58:23:6f:0d:e6:3e:91:b3:26:01:c3:a7:33:8c:e3:94:
fe:0d:6a:d5:24:aa:eb:13:6e:5a:9f:78:4c:cf:2a:db:75:d2:
26:56:f4:20:92:78:11:1b:a1:66:0d:78:84:b5:b3:fd:0c:55:
c0:be:31:4d:f4:e9:2e:5f:50:e1:67:c4:97:8e:8b:b7:37:cc:
71:46:64:c0:a6:f4:ae:8b:81:c9:41:fc:5b:79:f7:44:6a:b3:
9a:ca:34:39:6e:85:55:77:7b:53:2b:d2:79:a4:5e:da:18:ae:
98:96:5a:c7:0a:63:d7:74:d5:b3:be:6e:ab:81:58:81:4b:c4:
d1:f1:ad:0b:d0:c8:15:2d:11:49:b1:a1:85:54:07:82:e3:08:
a8:6c:a9:aa:35:e7:11:c4:f3:fd:98:cd:e0:fb:d5:58:07:73:
1b:52:ea:ce:b2:ac:b6:0a:3e:97:02:68:43:ca:be:ea:3c:bd:
7f:fa:cc:f9:58:ac:d1:4d:04:0e:31:f5:f1:15:90:79:80:52:
b4:34:1b:23
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUT0nrtjT6ECGhngWEcmHcdTceMoEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMTA4MjVaFw0yNzA1MjUwMTEzMjVaMDMxMTAvBgNV
BAMTKEY4NDQ3QjZCODkxMEQ0MjM0RUU1MDlCOUJGNzRGN0Q4NzNGQkJBMjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCev0d18eVA9rvbR+xzUqrTYjze
YHRescDGLk6SVgJCX84x/a5L7SZfzu0tSdFuI2YU7DpK62A9W2pNTXWMMnCFBj5/
l/1ADpkyoWMVk5gTB46VfbXGNJpK+mKXU9ictCkMwHlcZTj8qjh3XvBrHU5Fq8UN
8BQz79QAUYClfYbBbLlU/PzmV7mOsljHH+NFP6Esuzmt62YJP7suNMBt1b6NOp54
7YbZiBYiEYrADrVPlaVYOKnPJ973ledvrw8pNh/BlGWUwXX4vF6qCVmtZjdCAYaN
oCxkpNxL+KQURQMCc/AlKbUxhtdycenvY2e1Gg/pWZvVsbcHuKut6E3p233nAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU+ER7a4kQ1CNO5Qm5v3T32HP7uiMwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1NTE0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqrMDANBgkqhkiG9w0BAQsFAAOCAQEALEyq
kCZtynwKwAMbaVLjZGzHQ9QyG4W/s1Efz51UOqBxg2Xc1JkJ8nbRast8bE0Mpvvr
DI5AZl9YI28N5j6RsyYBw6czjOOU/g1q1SSq6xNuWp94TM8q23XSJlb0IJJ4ERuh
Zg14hLWz/QxVwL4xTfTpLl9Q4WfEl46LtzfMcUZkwKb0rouByUH8W3n3RGqzmso0
OW6FVXd7UyvSeaRe2hiumJZaxwpj13TVs75uq4FYgUvE0fGtC9DIFS0RSbGhhVQH
guMIqGypqjXnEcTz/ZjN4PvVWAdzG1LqzrKstgo+lwJoQ8q+6jy9f/rM+Vis0U0E
DjH18RWQeYBStDQbIw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:17 2026 by rpki-client