Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145515.roa
File: AS145515.roa (raw, json)
Hash identifier: iRayRvANOjbTgLtjMcdW4KSiOBmU32UJLhWIE7Rj1O0=
Subject key identifier: C2:B4:B6:0A:D6:18:32:2F:CD:2F:B4:29:A0:6E:DA:E6:CE:DE:0A:EA
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3E3D3BA3B7A4FDF8D0FC1036BF4E74C1567E300C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145515.roa
Signing time: Fri 22 May 2026 01:50:41 +0000
ROA not before: Fri 22 May 2026 01:45:41 +0000
ROA not after: Fri 21 May 2027 01:50:41 +0000
asID: 145515
IP address blocks: 240a:ab31::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:3d:3b:a3:b7:a4:fd:f8:d0:fc:10:36:bf:4e:74:c1:56:7e:30:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:41 2026 GMT
Not After : May 21 01:50:41 2027 GMT
Subject: CN=C2B4B60AD618322FCD2FB429A06EDAE6CEDE0AEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:42:49:04:57:70:fd:95:d0:0b:34:ab:8b:e5:
e8:84:2e:bd:0e:96:37:59:81:93:1d:53:19:6d:1d:
bb:07:ff:6f:20:a1:54:41:23:e2:ed:d1:49:8c:4e:
9d:d7:77:c6:3e:f1:3c:e2:11:e4:fc:8f:38:d1:bf:
99:7b:57:a7:8f:4f:f4:b5:da:ec:e6:47:48:08:7c:
ac:39:16:6f:39:01:eb:c3:44:a2:9d:a6:c2:f3:b3:
5d:c9:aa:fa:0b:7a:f2:ae:18:56:09:b9:8d:03:da:
ff:5b:1b:44:d1:df:66:a8:31:3d:df:63:e3:74:8c:
c9:12:1e:cc:86:3d:18:5b:60:73:41:ad:76:41:c1:
a5:b0:28:95:ca:a6:43:47:d4:b3:b9:c5:ff:49:f7:
02:37:d6:d0:2c:ab:92:e7:4b:c0:30:d0:a2:23:25:
51:fb:a9:c3:d7:4c:e4:9c:0a:f2:e2:1e:e2:28:bc:
1e:f1:ae:b3:0f:01:5a:ea:5e:7a:e2:b7:67:ed:6c:
a6:b2:dc:3b:ab:ce:6d:51:77:ea:f0:3a:a9:f5:48:
de:f7:a8:50:67:49:2e:c1:00:2e:c7:20:6f:ef:db:
4b:d3:4c:0e:83:30:e6:35:f5:65:3b:66:05:62:86:
3f:5c:2f:4e:d8:16:69:75:a0:7b:51:b7:1c:d5:ba:
3e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:B4:B6:0A:D6:18:32:2F:CD:2F:B4:29:A0:6E:DA:E6:CE:DE:0A:EA
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145515.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ab31::/32
Signature Algorithm: sha256WithRSAEncryption
b5:f4:18:e1:1a:e8:83:79:74:39:ac:35:31:4e:ed:d0:5a:b8:
3d:d4:43:c4:00:f5:01:0d:78:18:5b:5a:4c:36:93:d0:94:b3:
b1:cd:77:f9:6b:44:fc:88:db:dd:ae:f4:88:d9:ee:02:06:b5:
45:35:cd:9d:2f:19:51:68:ac:fb:a7:2a:8f:7c:c3:3c:b6:55:
92:56:cb:14:ca:7b:70:d8:46:ce:02:2d:42:a5:cc:db:45:10:
46:8a:dd:07:d0:b5:a2:4a:49:2a:fc:8e:26:dc:0a:df:de:24:
42:85:5f:2e:83:16:30:af:0d:b1:3a:55:da:b9:dd:50:1f:3f:
df:80:a7:83:7b:8c:3a:88:41:da:1e:9a:58:2a:23:80:84:3e:
c4:52:f7:ff:b5:bd:f3:2f:71:80:c1:82:91:28:cd:01:ea:d0:
c7:16:c4:b7:b8:36:aa:df:38:9a:8b:11:a2:5f:41:ce:14:de:
f0:6f:c7:91:f4:f1:63:9d:a2:5a:ec:cc:db:60:a6:2d:da:12:
15:b0:e1:66:04:d4:dd:67:73:75:58:23:ca:f7:d9:95:3e:d9:
d1:4e:d4:05:43:56:78:e6:5b:b4:d1:55:90:af:13:f7:b6:34:
9d:9b:2e:ef:ea:87:ff:ad:4c:6f:95:34:d9:96:08:7c:14:0c:
f7:ec:ab:93
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUPj07o7ek/fjQ/BA2v050wVZ+MAwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwMTQ1NDFaFw0yNzA1MjEwMTUwNDFaMDMxMTAvBgNV
BAMTKEMyQjRCNjBBRDYxODMyMkZDRDJGQjQyOUEwNkVEQUU2Q0VERTBBRUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqQkkEV3D9ldALNKuL5eiELr0O
ljdZgZMdUxltHbsH/28goVRBI+Lt0UmMTp3Xd8Y+8TziEeT8jzjRv5l7V6ePT/S1
2uzmR0gIfKw5Fm85AevDRKKdpsLzs13JqvoLevKuGFYJuY0D2v9bG0TR32aoMT3f
Y+N0jMkSHsyGPRhbYHNBrXZBwaWwKJXKpkNH1LO5xf9J9wI31tAsq5LnS8Aw0KIj
JVH7qcPXTOScCvLiHuIovB7xrrMPAVrqXnrit2ftbKay3Durzm1Rd+rwOqn1SN73
qFBnSS7BAC7HIG/v20vTTA6DMOY19WU7ZgVihj9cL07YFml1oHtRtxzVuj6jAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUwrS2CtYYMi/NL7QpoG7a5s7eCuowHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1NTE1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqrMTANBgkqhkiG9w0BAQsFAAOCAQEAtfQY
4Rrog3l0Oaw1MU7t0Fq4PdRDxAD1AQ14GFtaTDaT0JSzsc13+WtE/Ijb3a70iNnu
Aga1RTXNnS8ZUWis+6cqj3zDPLZVklbLFMp7cNhGzgItQqXM20UQRordB9C1okpJ
KvyOJtwK394kQoVfLoMWMK8NsTpV2rndUB8/34Cng3uMOohB2h6aWCojgIQ+xFL3
/7W98y9xgMGCkSjNAerQxxbEt7g2qt84mosRol9BzhTe8G/HkfTxY52iWuzM22Cm
LdoSFbDhZgTU3WdzdVgjyvfZlT7Z0U7UBUNWeOZbtNFVkK8T97Y0nZsu7+qH/61M
b5U02ZYIfBQM9+yrkw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:00 2026 by rpki-client