Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145677.roa
File: AS145677.roa (raw, json)
Hash identifier: DIP8hhDQNUheavQhkrbt/xTL+ur/Sv4xBYJasEsdwKI=
Subject key identifier: D9:93:34:B6:F9:E7:71:9E:A7:C5:E5:3F:06:A9:F1:5D:D4:A7:DD:BE
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 308A9C4F9598BF0494E3F0C5E091EE4A87490681
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145677.roa
Signing time: Tue 26 May 2026 03:16:48 +0000
ROA not before: Tue 26 May 2026 03:11:48 +0000
ROA not after: Tue 25 May 2027 03:16:48 +0000
asID: 145677
IP address blocks: 240a:abd3::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:8a:9c:4f:95:98:bf:04:94:e3:f0:c5:e0:91:ee:4a:87:49:06:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:11:48 2026 GMT
Not After : May 25 03:16:48 2027 GMT
Subject: CN=D99334B6F9E7719EA7C5E53F06A9F15DD4A7DDBE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:45:c7:8c:3e:5d:20:31:56:3e:f2:75:3f:ae:
bf:22:7d:72:32:70:fe:70:97:aa:7d:84:6b:33:59:
09:80:80:03:de:5c:9e:42:1f:7d:61:cd:67:29:f2:
b7:a5:45:0a:43:7c:e2:cd:5c:9c:36:01:4d:9a:50:
31:1e:c7:b8:aa:bf:fb:8d:8c:94:f1:84:21:30:6d:
a8:75:d3:eb:29:1b:86:f6:a5:11:04:3c:f2:ac:c6:
9c:81:84:c1:78:88:b4:91:c6:fd:7a:53:82:15:68:
91:2c:39:38:7c:9e:4f:8f:c0:4f:c9:c4:b6:49:4b:
0e:4f:cd:3b:61:41:08:3d:c6:36:22:d3:ef:3c:8f:
69:30:53:44:0b:ec:4c:d4:1b:4e:f5:e2:b1:fa:a7:
f6:31:29:96:0e:93:ba:84:4f:49:a7:38:c3:fb:d3:
6a:7b:7d:cb:a9:7a:70:8d:d4:b2:2e:e0:c9:5d:92:
56:e7:d9:35:0a:a1:89:e9:d0:f1:73:65:9f:52:fb:
b2:71:22:b4:07:a5:79:b1:6c:c0:fd:f7:e1:33:69:
ca:3f:f0:6c:de:99:97:26:f4:d5:14:db:e6:eb:77:
a7:4b:df:55:c9:ee:95:13:67:03:39:d7:ed:59:f3:
48:35:89:7d:98:a0:f9:c9:13:5d:43:92:ec:c2:91:
9e:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:93:34:B6:F9:E7:71:9E:A7:C5:E5:3F:06:A9:F1:5D:D4:A7:DD:BE
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145677.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:abd3::/32
Signature Algorithm: sha256WithRSAEncryption
4a:dc:76:72:fa:26:10:61:b1:fb:f8:7f:07:20:d2:eb:4c:1c:
c3:64:3b:37:d6:b5:f6:35:c5:40:45:03:40:9e:6c:b0:c0:bd:
58:2c:76:af:63:37:18:72:b2:48:d7:b7:11:f3:b7:59:47:28:
9f:64:4e:fc:ab:49:7e:84:19:b3:da:49:ce:60:29:6e:e8:05:
78:26:56:53:4c:fb:38:69:74:07:70:f1:17:c3:ee:77:f9:99:
ed:e0:3f:49:85:eb:af:9f:87:23:4b:f8:cc:61:d6:63:7a:a0:
ae:a2:46:da:a2:91:d1:1f:c0:56:10:f5:01:14:21:32:d7:04:
90:a2:f5:2f:e3:84:2b:2b:1e:36:93:fc:72:c0:81:b9:19:e9:
ed:b9:1b:f2:9f:c6:d8:63:43:de:1d:f0:3f:10:fb:a6:71:c9:
0a:d8:1f:4e:7d:62:25:e8:25:9f:18:6c:0a:d7:44:e4:ab:17:
f5:b7:75:e8:65:7d:80:51:fc:01:fa:18:14:8c:9f:a3:0f:c7:
c7:1a:c8:2b:8d:4b:82:56:af:fb:31:65:ed:6a:4f:43:6f:76:
a5:b2:2c:b0:4e:64:bc:7a:6d:18:cd:a8:8d:1f:fc:cd:0b:13:
df:ae:1d:0a:48:03:39:b9:39:56:76:92:74:91:00:86:fc:66:
1d:14:ab:f4
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUMIqcT5WYvwSU4/DF4JHuSodJBoEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMzExNDhaFw0yNzA1MjUwMzE2NDhaMDMxMTAvBgNV
BAMTKEQ5OTMzNEI2RjlFNzcxOUVBN0M1RTUzRjA2QTlGMTVERDRBN0REQkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYRceMPl0gMVY+8nU/rr8ifXIy
cP5wl6p9hGszWQmAgAPeXJ5CH31hzWcp8relRQpDfOLNXJw2AU2aUDEex7iqv/uN
jJTxhCEwbah10+spG4b2pREEPPKsxpyBhMF4iLSRxv16U4IVaJEsOTh8nk+PwE/J
xLZJSw5PzTthQQg9xjYi0+88j2kwU0QL7EzUG0714rH6p/YxKZYOk7qET0mnOMP7
02p7fcupenCN1LIu4Mldklbn2TUKoYnp0PFzZZ9S+7JxIrQHpXmxbMD99+Ezaco/
8GzemZcm9NUU2+brd6dL31XJ7pUTZwM51+1Z80g1iX2YoPnJE11DkuzCkZ5pAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU2ZM0tvnncZ6nxeU/BqnxXdSn3b4wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1Njc3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqr0zANBgkqhkiG9w0BAQsFAAOCAQEAStx2
cvomEGGx+/h/ByDS60wcw2Q7N9a19jXFQEUDQJ5ssMC9WCx2r2M3GHKySNe3EfO3
WUcon2RO/KtJfoQZs9pJzmApbugFeCZWU0z7OGl0B3DxF8Pud/mZ7eA/SYXrr5+H
I0v4zGHWY3qgrqJG2qKR0R/AVhD1ARQhMtcEkKL1L+OEKyseNpP8csCBuRnp7bkb
8p/G2GND3h3wPxD7pnHJCtgfTn1iJeglnxhsCtdE5KsX9bd16GV9gFH8AfoYFIyf
ow/HxxrIK41Lglav+zFl7WpPQ292pbIssE5kvHptGM2ojR/8zQsT364dCkgDObk5
VnaSdJEAhvxmHRSr9A==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:47 2026 by rpki-client