Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145591.roa
File: AS145591.roa (raw, json)
Hash identifier: Lct/P3m3bJ39GF2nO1v568op5cnPaKTfeSYUqtewIz0=
Subject key identifier: 3D:7C:C3:F4:E1:55:A0:62:8C:BE:60:5E:F3:0D:66:68:8F:24:A6:EA
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1543292066E64EE0E687CC71BA662F02ED2225EA
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145591.roa
Signing time: Mon 25 May 2026 01:51:08 +0000
ROA not before: Mon 25 May 2026 01:46:08 +0000
ROA not after: Mon 24 May 2027 01:51:08 +0000
asID: 145591
IP address blocks: 240a:ab7d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:43:29:20:66:e6:4e:e0:e6:87:cc:71:ba:66:2f:02:ed:22:25:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:46:08 2026 GMT
Not After : May 24 01:51:08 2027 GMT
Subject: CN=3D7CC3F4E155A0628CBE605EF30D66688F24A6EA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:f3:43:3a:67:ff:bd:ef:c4:c9:d3:1f:da:5b:
59:16:30:e4:3e:ff:0e:9f:8a:f7:dd:d6:fa:68:24:
af:98:cb:98:91:41:9e:25:72:66:27:87:a6:6e:e4:
9b:30:7b:39:75:82:55:c6:b2:80:09:e2:f0:d3:e5:
dc:c8:76:7b:e8:35:1f:3c:62:07:0c:40:36:b6:b4:
fe:f9:5e:5b:d9:a8:a8:25:bd:2e:b8:d4:a8:5a:1c:
51:82:c1:fe:3d:e0:a6:00:9e:ef:d8:c6:25:51:42:
91:2f:2e:1b:6a:fe:24:44:04:f8:b6:bf:ae:b4:29:
22:d0:19:6b:89:72:37:8c:d3:85:56:aa:81:a8:1b:
6c:93:0e:c6:b4:1c:0e:a2:51:10:0d:b8:74:ce:b2:
a0:80:9c:a0:16:92:95:be:cf:dc:28:23:0f:12:35:
1c:dc:fc:28:03:4e:a3:7d:56:42:ad:31:16:65:9f:
29:ee:e6:c8:b6:47:47:57:90:86:f3:e1:c3:ae:f9:
33:e8:0e:dc:a7:2a:b2:d1:ab:df:3e:8a:63:33:32:
54:b0:1b:73:e9:b5:eb:dc:a3:67:cb:7a:2d:9d:d9:
c0:c9:bd:6b:cd:67:87:aa:2a:ae:57:fb:7f:67:a0:
66:a1:6c:d8:d3:b4:ca:e8:1d:bf:8e:33:44:1b:2e:
4a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:7C:C3:F4:E1:55:A0:62:8C:BE:60:5E:F3:0D:66:68:8F:24:A6:EA
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145591.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ab7d::/32
Signature Algorithm: sha256WithRSAEncryption
17:a8:d6:b4:a4:15:a7:22:03:d5:c4:0c:e9:90:0d:8a:34:c4:
1b:cb:1c:93:d2:8e:9a:62:37:c1:5d:b6:8f:ce:ba:73:70:e3:
0f:3c:09:ee:a5:b3:58:c3:51:7f:09:83:aa:4f:9d:2e:95:be:
85:88:13:4b:d0:d5:00:5e:01:18:58:65:d3:51:c9:4d:d6:9a:
26:50:0e:8e:d4:1e:54:dc:2a:ec:7b:b3:08:69:09:90:a7:eb:
70:78:3b:fc:ab:e3:f5:16:6c:5b:7b:d1:65:da:49:f7:b3:62:
b9:85:f0:a1:e1:69:8d:91:5f:27:21:62:09:bf:f6:df:9c:ac:
b3:0f:b5:29:e2:7d:c1:0c:41:ce:ce:38:5a:9d:6b:d1:d6:d6:
1f:fc:0a:06:d0:03:a0:39:4a:8e:5c:8d:6d:e5:ac:33:44:e5:
0a:aa:79:d9:6c:f1:bd:35:48:bd:2e:1c:2f:d1:67:f5:27:ea:
99:32:96:b4:29:87:82:51:27:47:73:90:9f:68:c8:9c:ca:f9:
d7:92:e3:44:27:14:a3:2a:41:8b:ea:46:8a:0e:74:fd:f7:54:
25:47:52:8d:65:dd:ea:c8:fc:ae:31:f6:21:05:26:b6:b1:52:
08:76:7d:0f:6d:30:27:69:f7:ca:97:6e:4d:85:30:b9:87:26:
f6:0f:83:59
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUFUMpIGbmTuDmh8xxumYvAu0iJeowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMTQ2MDhaFw0yNzA1MjQwMTUxMDhaMDMxMTAvBgNV
BAMTKDNEN0NDM0Y0RTE1NUEwNjI4Q0JFNjA1RUYzMEQ2NjY4OEYyNEE2RUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR80M6Z/+978TJ0x/aW1kWMOQ+
/w6fivfd1vpoJK+Yy5iRQZ4lcmYnh6Zu5Jswezl1glXGsoAJ4vDT5dzIdnvoNR88
YgcMQDa2tP75XlvZqKglvS641KhaHFGCwf494KYAnu/YxiVRQpEvLhtq/iREBPi2
v660KSLQGWuJcjeM04VWqoGoG2yTDsa0HA6iURANuHTOsqCAnKAWkpW+z9woIw8S
NRzc/CgDTqN9VkKtMRZlnynu5si2R0dXkIbz4cOu+TPoDtynKrLRq98+imMzMlSw
G3Pptevco2fLei2d2cDJvWvNZ4eqKq5X+39noGahbNjTtMroHb+OM0QbLkrjAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUPXzD9OFVoGKMvmBe8w1maI8kpuowHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1NTkxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqrfTANBgkqhkiG9w0BAQsFAAOCAQEAF6jW
tKQVpyID1cQM6ZANijTEG8sck9KOmmI3wV22j866c3DjDzwJ7qWzWMNRfwmDqk+d
LpW+hYgTS9DVAF4BGFhl01HJTdaaJlAOjtQeVNwq7HuzCGkJkKfrcHg7/Kvj9RZs
W3vRZdpJ97NiuYXwoeFpjZFfJyFiCb/235yssw+1KeJ9wQxBzs44Wp1r0dbWH/wK
BtADoDlKjlyNbeWsM0TlCqp52WzxvTVIvS4cL9Fn9SfqmTKWtCmHglEnR3OQn2jI
nMr515LjRCcUoypBi+pGig50/fdUJUdSjWXd6sj8rjH2IQUmtrFSCHZ9D20wJ2n3
ypduTYUwuYcm9g+DWQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:50 2026 by rpki-client