Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145645.roa
File: AS145645.roa (raw, json)
Hash identifier: /AE0qbuiByXjVGDJBnMD+vou2bWANYOpwd9ES1d1Ksk=
Subject key identifier: AF:E8:FB:2C:2D:9E:72:DB:38:5F:2E:06:F2:7F:17:C1:04:15:3F:BC
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 74F23049EFD3F0FA35A3521C1BA28880AB144F6F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145645.roa
Signing time: Mon 25 May 2026 01:20:39 +0000
ROA not before: Mon 25 May 2026 01:15:39 +0000
ROA not after: Mon 24 May 2027 01:20:39 +0000
asID: 145645
IP address blocks: 240a:abb3::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:f2:30:49:ef:d3:f0:fa:35:a3:52:1c:1b:a2:88:80:ab:14:4f:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:15:39 2026 GMT
Not After : May 24 01:20:39 2027 GMT
Subject: CN=AFE8FB2C2D9E72DB385F2E06F27F17C104153FBC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e5:32:4a:c0:f0:0f:d7:86:a5:89:fe:20:87:
2a:b4:20:86:8a:f1:a3:65:40:55:0d:dd:41:d1:e8:
7b:7b:61:75:4f:6d:a6:ac:6b:5b:97:6c:b2:23:fb:
ff:99:1a:83:3a:c4:f1:66:93:df:da:71:ea:71:9b:
ef:15:27:d8:5c:8f:82:e9:70:38:3a:aa:b4:51:7e:
d5:84:d6:8d:dd:bf:a8:b9:ce:b5:bc:86:45:60:7d:
e2:8f:0a:bc:41:5b:2e:fe:e2:f8:bd:58:58:a2:d1:
e5:ee:c1:96:e1:7b:c6:74:54:eb:ae:8d:7f:75:89:
a9:a2:ad:f5:08:6b:ce:d8:4c:26:1c:5d:48:cc:8f:
da:38:51:93:3a:23:3c:dc:99:69:58:ec:39:d8:b9:
82:ba:a1:57:c5:a7:3f:a1:8a:7b:b5:c3:ec:9d:85:
5a:c0:2a:2f:0a:3a:69:2d:3e:c6:1f:75:07:09:2b:
b4:54:12:b5:2a:5d:2f:07:4c:48:93:b4:6d:fb:1c:
13:31:47:5d:54:b1:f1:bd:a5:97:25:ee:2b:d3:ee:
0e:e1:3c:d2:50:b4:0d:31:9c:e6:cc:6c:1c:a0:d6:
f8:74:b9:68:23:24:0f:e2:bf:f4:02:c1:0b:3f:2d:
de:14:ae:7c:1c:b5:a5:08:2f:f7:f4:6c:db:83:1b:
68:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E8:FB:2C:2D:9E:72:DB:38:5F:2E:06:F2:7F:17:C1:04:15:3F:BC
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145645.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:abb3::/32
Signature Algorithm: sha256WithRSAEncryption
b0:39:c6:66:e9:84:a1:20:25:83:a8:29:6e:0f:c4:30:42:82:
f4:e7:7f:a5:fd:e9:8b:4c:d4:01:f0:a4:b7:55:2b:5b:a8:01:
89:4d:13:09:f8:e8:70:07:a3:48:8c:92:22:45:7e:69:e8:9a:
46:0b:69:ef:09:16:0e:28:9f:51:2d:86:54:e6:34:9c:d5:e0:
84:7c:22:ae:fd:13:7c:74:93:1b:22:fb:11:2b:54:8e:0e:db:
26:25:43:0a:3f:fa:24:70:52:9b:57:90:ee:42:2e:c0:d6:9d:
62:59:8d:60:49:5f:fd:b8:7d:df:79:8e:6b:20:e6:35:76:bf:
da:c9:06:d2:ca:28:0b:57:d3:f2:5e:00:a5:d5:29:90:de:74:
72:45:85:13:0e:2a:73:ee:f0:e6:b7:2e:fd:c9:66:68:08:0f:
ec:f9:55:98:92:b2:49:98:62:55:91:6e:18:12:43:2c:06:20:
2e:a7:cb:b5:30:b9:de:04:27:7f:2c:ca:1e:af:95:8a:ce:3c:
65:9a:df:97:e1:ac:91:bf:36:f0:f3:aa:46:97:41:02:1a:1d:
e5:cd:b6:cb:a3:1e:ae:ea:e4:39:0d:f0:0a:df:06:a0:93:d1:
44:cc:bb:e0:63:3e:68:2d:ad:87:bb:5b:da:4e:56:30:8f:d8:
74:ac:f0:3f
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUdPIwSe/T8Po1o1IcG6KIgKsUT28wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMTE1MzlaFw0yNzA1MjQwMTIwMzlaMDMxMTAvBgNV
BAMTKEFGRThGQjJDMkQ5RTcyREIzODVGMkUwNkYyN0YxN0MxMDQxNTNGQkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC65TJKwPAP14alif4ghyq0IIaK
8aNlQFUN3UHR6Ht7YXVPbaasa1uXbLIj+/+ZGoM6xPFmk9/acepxm+8VJ9hcj4Lp
cDg6qrRRftWE1o3dv6i5zrW8hkVgfeKPCrxBWy7+4vi9WFii0eXuwZbhe8Z0VOuu
jX91iamirfUIa87YTCYcXUjMj9o4UZM6IzzcmWlY7DnYuYK6oVfFpz+hinu1w+yd
hVrAKi8KOmktPsYfdQcJK7RUErUqXS8HTEiTtG37HBMxR11UsfG9pZcl7ivT7g7h
PNJQtA0xnObMbByg1vh0uWgjJA/iv/QCwQs/Ld4UrnwctaUIL/f0bNuDG2jZAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUr+j7LC2ects4Xy4G8n8XwQQVP7wwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1NjQ1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqrszANBgkqhkiG9w0BAQsFAAOCAQEAsDnG
ZumEoSAlg6gpbg/EMEKC9Od/pf3pi0zUAfCkt1UrW6gBiU0TCfjocAejSIySIkV+
aeiaRgtp7wkWDiifUS2GVOY0nNXghHwirv0TfHSTGyL7EStUjg7bJiVDCj/6JHBS
m1eQ7kIuwNadYlmNYElf/bh933mOayDmNXa/2skG0sooC1fT8l4ApdUpkN50ckWF
Ew4qc+7w5rcu/clmaAgP7PlVmJKySZhiVZFuGBJDLAYgLqfLtTC53gQnfyzKHq+V
is48ZZrfl+Gskb828POqRpdBAhod5c22y6MerurkOQ3wCt8GoJPRRMy74GM+aC2t
h7tb2k5WMI/YdKzwPw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:51 2026 by rpki-client