Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145568.roa
File: AS145568.roa (raw, json)
Hash identifier: ALTN96MUNACWEQFP1XrGSEY0o0h9aji2uqkCSp2vQSc=
Subject key identifier: 49:6F:1B:AA:A9:0E:50:7F:33:0D:24:9E:79:6D:EE:56:A9:A8:D6:9E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4B3B30F12DAFD24FD9BC89CD994B859B23038481
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145568.roa
Signing time: Mon 25 May 2026 06:48:45 +0000
ROA not before: Mon 25 May 2026 06:43:45 +0000
ROA not after: Mon 24 May 2027 06:48:45 +0000
asID: 145568
IP address blocks: 240a:ab66::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:3b:30:f1:2d:af:d2:4f:d9:bc:89:cd:99:4b:85:9b:23:03:84:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:43:45 2026 GMT
Not After : May 24 06:48:45 2027 GMT
Subject: CN=496F1BAAA90E507F330D249E796DEE56A9A8D69E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2f:72:63:95:7d:0e:b2:f5:e0:7c:8b:7a:6a:
e3:78:f8:b9:44:80:9f:00:54:e1:5f:bf:e6:8b:f0:
b3:ef:54:e4:e3:a8:01:b6:d1:98:e2:3d:71:4c:de:
1b:e7:1b:b0:2f:7a:76:0f:36:d1:1a:95:e4:e7:5e:
cb:18:f7:8f:06:cf:ef:58:f0:d4:0f:1b:4c:69:06:
ef:25:b2:f5:b7:69:43:f4:81:18:76:8f:05:3b:90:
49:1e:cb:a9:1b:52:dc:2e:11:5b:d3:d9:6d:9c:cb:
29:a5:6c:09:e6:6e:8e:c6:82:f8:bb:a1:da:38:60:
bc:27:17:f9:00:92:62:fe:85:38:91:8f:e8:77:a0:
db:de:89:c7:60:f6:4f:da:4b:ec:09:0e:7a:b9:b9:
0f:1e:c2:77:68:6d:fe:34:c0:ac:fe:7a:dd:ed:f6:
c2:46:9c:b9:c0:2d:84:f0:04:34:1b:6d:88:f7:e9:
52:25:0c:07:69:2e:81:48:b5:e9:32:24:bb:c0:ca:
38:a0:41:e9:73:41:d9:87:9b:ba:24:7b:47:d7:1f:
de:e3:19:08:18:82:89:98:fc:0d:b7:28:0d:5a:48:
35:78:6f:f7:15:8c:b1:d4:17:be:d9:89:0c:e5:fa:
2e:4f:8a:7a:87:d3:fa:2f:b1:71:ff:d8:85:97:31:
87:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:6F:1B:AA:A9:0E:50:7F:33:0D:24:9E:79:6D:EE:56:A9:A8:D6:9E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145568.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ab66::/32
Signature Algorithm: sha256WithRSAEncryption
96:cf:15:52:e4:bf:8b:e1:fc:69:77:76:18:ca:4f:57:55:e3:
1b:a2:56:a1:c7:90:0c:6e:1f:ca:69:05:31:c4:ca:f2:3b:b3:
db:7f:be:3e:fb:03:7b:41:0a:85:6a:6b:30:73:65:4a:95:82:
46:e9:7d:89:29:b0:7e:f6:40:c7:95:fb:52:6c:95:81:04:b3:
9c:d5:f8:b7:45:8b:c7:35:0d:d2:fe:45:ee:68:bc:cc:5c:15:
99:61:6c:3f:10:c4:36:e5:19:aa:f9:44:6e:04:53:97:36:87:
ea:fa:c6:75:19:96:70:3c:21:79:cd:31:d8:ee:17:e5:ab:a1:
4f:d1:36:90:99:79:81:13:51:23:35:4a:21:6d:ea:6f:35:f2:
6d:25:76:ad:03:c5:18:8e:82:03:4f:d2:93:6a:40:7a:10:e8:
c6:5d:8e:2d:78:10:9e:bb:af:1e:7b:22:23:42:3d:2e:83:70:
5b:e7:2f:9b:ed:87:e5:18:8e:ba:3a:90:22:71:5c:e3:fa:ed:
94:ac:27:cc:ab:f5:aa:5b:91:f9:e4:10:99:11:fc:9b:31:b0:
a7:24:df:2e:82:f0:7b:77:ae:8b:a6:6a:b7:74:84:97:e0:5b:
50:81:dd:26:f8:3c:f1:ff:40:6e:ef:7e:17:23:4a:20:8b:2b:
b9:40:64:c8
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUSzsw8S2v0k/ZvInNmUuFmyMDhIEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwNjQzNDVaFw0yNzA1MjQwNjQ4NDVaMDMxMTAvBgNV
BAMTKDQ5NkYxQkFBQTkwRTUwN0YzMzBEMjQ5RTc5NkRFRTU2QTlBOEQ2OUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3L3JjlX0OsvXgfIt6auN4+LlE
gJ8AVOFfv+aL8LPvVOTjqAG20ZjiPXFM3hvnG7AvenYPNtEaleTnXssY948Gz+9Y
8NQPG0xpBu8lsvW3aUP0gRh2jwU7kEkey6kbUtwuEVvT2W2cyymlbAnmbo7Ggvi7
odo4YLwnF/kAkmL+hTiRj+h3oNveicdg9k/aS+wJDnq5uQ8ewndobf40wKz+et3t
9sJGnLnALYTwBDQbbYj36VIlDAdpLoFItekyJLvAyjigQelzQdmHm7oke0fXH97j
GQgYgomY/A23KA1aSDV4b/cVjLHUF77ZiQzl+i5PinqH0/ovsXH/2IWXMYePAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUSW8bqqkOUH8zDSSeeW3uVqmo1p4wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1NTY4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqrZjANBgkqhkiG9w0BAQsFAAOCAQEAls8V
UuS/i+H8aXd2GMpPV1XjG6JWoceQDG4fymkFMcTK8juz23++PvsDe0EKhWprMHNl
SpWCRul9iSmwfvZAx5X7UmyVgQSznNX4t0WLxzUN0v5F7mi8zFwVmWFsPxDENuUZ
qvlEbgRTlzaH6vrGdRmWcDwhec0x2O4X5auhT9E2kJl5gRNRIzVKIW3qbzXybSV2
rQPFGI6CA0/Sk2pAehDoxl2OLXgQnruvHnsiI0I9LoNwW+cvm+2H5RiOujqQInFc
4/rtlKwnzKv1qluR+eQQmRH8mzGwpyTfLoLwe3eui6Zqt3SEl+BbUIHdJvg88f9A
bu9+FyNKIIsruUBkyA==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:51 2026 by rpki-client