Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145683.roa
File: AS145683.roa (raw, json)
Hash identifier: I09WqXHg+qOVBaUv8txnRTZYieTyfK54W7+muHIRD9I=
Subject key identifier: 47:29:E9:23:61:F0:23:04:8D:39:AB:AD:63:56:4A:BC:78:C2:62:DE
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 04B924E0906BC2AF2A1752873123ADE0D0827A5F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145683.roa
Signing time: Mon 25 May 2026 01:51:09 +0000
ROA not before: Mon 25 May 2026 01:46:09 +0000
ROA not after: Mon 24 May 2027 01:51:09 +0000
asID: 145683
IP address blocks: 240a:abd9::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:b9:24:e0:90:6b:c2:af:2a:17:52:87:31:23:ad:e0:d0:82:7a:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:46:09 2026 GMT
Not After : May 24 01:51:09 2027 GMT
Subject: CN=4729E92361F023048D39ABAD63564ABC78C262DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:84:4d:89:3e:1f:89:88:79:bf:d5:a4:ff:b0:
51:fe:05:06:c9:41:57:c6:ec:fc:8e:41:c2:ff:0f:
96:ea:a3:c7:67:11:93:a5:24:bb:e0:42:f7:ab:f5:
54:87:1c:29:19:b6:9f:c2:2a:66:3e:fa:ab:83:9e:
f1:52:12:63:9d:04:36:35:07:95:32:28:e0:d7:96:
47:ef:45:c6:e6:b9:34:55:68:56:c2:4c:48:48:39:
04:17:57:1c:db:4e:48:13:98:53:3a:21:3d:70:f3:
fc:3d:08:fc:ae:31:6c:23:82:b0:c1:f7:4f:96:4c:
ca:69:fe:1a:7b:21:99:26:2e:22:9f:10:f1:11:be:
6e:07:dd:31:ee:19:cb:1b:be:87:82:f7:6d:8e:ab:
0e:a0:72:f4:4a:69:92:4c:dc:85:a7:5e:df:71:af:
b6:e4:ed:14:fc:cf:8f:8d:7d:ba:c7:0d:8e:5e:56:
f9:36:f8:c2:c7:34:28:42:0e:50:e9:1a:ae:8d:0c:
d5:3f:0f:16:47:32:10:c3:26:ad:0c:34:6f:10:aa:
a6:26:f7:94:3c:1a:cb:bb:97:12:1e:33:3d:5d:0e:
7d:d4:15:54:17:0a:3d:56:90:09:97:5a:d6:fd:0a:
da:26:2f:aa:55:11:20:09:0c:77:1e:f1:c6:df:d8:
34:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:29:E9:23:61:F0:23:04:8D:39:AB:AD:63:56:4A:BC:78:C2:62:DE
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145683.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:abd9::/32
Signature Algorithm: sha256WithRSAEncryption
39:b1:35:af:45:72:e1:88:71:f3:aa:27:26:bf:c9:6a:a8:d9:
0b:57:fa:41:8c:ba:37:b5:a9:ec:15:64:59:9a:80:f7:06:7e:
82:01:b9:1d:b2:d8:3f:70:6a:47:8b:53:b1:a4:aa:3a:d0:36:
e8:20:e9:05:b6:d3:7e:84:7d:8f:89:29:2d:de:e8:fa:f4:a3:
cf:26:86:a2:30:27:f7:17:87:e1:e7:b1:5f:f4:d8:a8:6d:a1:
e7:2e:65:76:b2:c9:09:33:6b:31:cd:ee:bb:1a:d0:c7:1a:cd:
87:71:36:4d:ec:cf:9e:41:d3:4d:19:f4:1d:f8:c8:f1:73:e8:
3b:f7:0a:e0:08:51:39:e0:08:ea:18:44:63:ff:aa:2a:f1:e9:
35:a9:ea:f4:1b:83:eb:ef:04:82:19:22:3c:83:71:37:de:eb:
23:a0:30:de:2b:63:0b:bb:e4:cf:73:63:26:ed:49:1f:52:1b:
4c:c5:c1:40:d2:d1:2a:a0:08:dd:d9:48:19:38:41:b6:1c:6d:
4a:95:9c:17:eb:42:ea:98:46:3a:c4:1a:b1:b6:ae:0e:2b:8f:
0c:a5:6c:2f:26:37:5f:49:d6:fd:21:0f:6c:bf:e2:33:84:8d:
e1:b6:c0:a0:36:e5:81:2c:12:13:22:7e:90:92:43:94:ed:ff:
39:8b:f8:b6
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUBLkk4JBrwq8qF1KHMSOt4NCCel8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMTQ2MDlaFw0yNzA1MjQwMTUxMDlaMDMxMTAvBgNV
BAMTKDQ3MjlFOTIzNjFGMDIzMDQ4RDM5QUJBRDYzNTY0QUJDNzhDMjYyREUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6hE2JPh+JiHm/1aT/sFH+BQbJ
QVfG7PyOQcL/D5bqo8dnEZOlJLvgQver9VSHHCkZtp/CKmY++quDnvFSEmOdBDY1
B5UyKODXlkfvRcbmuTRVaFbCTEhIOQQXVxzbTkgTmFM6IT1w8/w9CPyuMWwjgrDB
90+WTMpp/hp7IZkmLiKfEPERvm4H3THuGcsbvoeC922Oqw6gcvRKaZJM3IWnXt9x
r7bk7RT8z4+NfbrHDY5eVvk2+MLHNChCDlDpGq6NDNU/DxZHMhDDJq0MNG8QqqYm
95Q8Gsu7lxIeMz1dDn3UFVQXCj1WkAmXWtb9CtomL6pVESAJDHce8cbf2DSZAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQURynpI2HwIwSNOautY1ZKvHjCYt4wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1NjgzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqr2TANBgkqhkiG9w0BAQsFAAOCAQEAObE1
r0Vy4Yhx86onJr/JaqjZC1f6QYy6N7Wp7BVkWZqA9wZ+ggG5HbLYP3BqR4tTsaSq
OtA26CDpBbbTfoR9j4kpLd7o+vSjzyaGojAn9xeH4eexX/TYqG2h5y5ldrLJCTNr
Mc3uuxrQxxrNh3E2TezPnkHTTRn0HfjI8XPoO/cK4AhROeAI6hhEY/+qKvHpNanq
9BuD6+8EghkiPINxN97rI6Aw3itjC7vkz3NjJu1JH1IbTMXBQNLRKqAI3dlIGThB
thxtSpWcF+tC6phGOsQasbauDiuPDKVsLyY3X0nW/SEPbL/iM4SN4bbAoDblgSwS
EyJ+kJJDlO3/OYv4tg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:54 2026 by rpki-client