Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145721.roa
File: AS145721.roa (raw, json)
Hash identifier: jBYuRdGDBKJcF5LWrqzkqmOHp9sdBdYKyXzQ9qEdKpo=
Subject key identifier: 1D:D8:41:60:D8:EF:AC:5D:ED:67:8B:5F:47:CC:67:3F:EC:B5:92:85
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 282676727EB14AE87CED6834EBC0E1715B723989
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145721.roa
Signing time: Fri 22 May 2026 04:07:59 +0000
ROA not before: Fri 22 May 2026 04:02:59 +0000
ROA not after: Fri 21 May 2027 04:07:59 +0000
asID: 145721
IP address blocks: 240a:abff::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:26:76:72:7e:b1:4a:e8:7c:ed:68:34:eb:c0:e1:71:5b:72:39:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:02:59 2026 GMT
Not After : May 21 04:07:59 2027 GMT
Subject: CN=1DD84160D8EFAC5DED678B5F47CC673FECB59285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:74:b6:59:52:c9:f2:64:f0:a6:94:ff:2d:72:
d6:44:28:b3:4b:20:b1:cc:d6:e5:fb:9c:92:41:53:
eb:7e:dd:12:9f:83:74:0e:06:87:12:f3:fd:2c:0c:
83:61:d8:9d:e8:04:e0:6a:43:5d:5d:4c:54:5c:18:
15:c4:15:39:63:fa:73:14:38:b3:94:17:c0:14:7b:
81:48:d8:0a:ca:1e:4a:c0:f0:92:d3:d6:32:19:b5:
9a:09:85:1d:5f:f6:9a:24:2e:f3:a4:ff:fd:11:db:
1d:c6:44:8c:7f:44:a3:8c:41:f9:71:ec:53:06:df:
82:12:15:86:1a:24:73:7d:5e:3f:12:24:bd:81:96:
37:25:f3:5c:de:9e:d7:aa:2a:84:b7:19:1c:fa:b6:
ac:ff:f3:65:1c:68:02:61:a9:24:04:fc:ac:58:d0:
0f:be:11:b6:c0:c3:ea:62:e7:41:ba:d9:97:f1:3f:
82:00:6d:14:fe:f5:21:bd:82:c4:b7:aa:54:ae:15:
79:c6:f3:a5:42:8d:21:4c:c4:7b:7e:30:22:d8:ca:
4b:0c:96:39:1e:66:35:b8:3a:a1:c5:92:02:af:39:
19:ef:85:50:60:a5:4a:55:8d:d0:2f:6f:8c:bd:20:
e3:ba:13:d0:27:61:28:62:fd:d8:7d:b3:23:c4:af:
99:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D8:41:60:D8:EF:AC:5D:ED:67:8B:5F:47:CC:67:3F:EC:B5:92:85
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145721.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:abff::/32
Signature Algorithm: sha256WithRSAEncryption
21:b3:58:a6:08:54:73:8c:63:9b:04:be:38:84:e5:d0:a5:7e:
6a:19:7a:4e:e8:43:3c:2e:e0:b1:e9:70:8f:cf:52:4a:36:75:
a3:f1:55:6d:b0:c4:cb:0b:15:89:91:00:34:41:03:14:18:d7:
e3:56:2b:82:e3:77:b0:92:a2:07:fe:08:ef:e6:24:53:04:a0:
af:5a:e9:22:78:20:30:88:7a:e0:f3:51:bb:f1:b2:5f:ab:79:
c1:ef:7e:14:57:79:35:55:69:32:90:69:80:d1:48:22:5a:1e:
66:11:37:94:92:a7:d3:4f:ee:a5:8b:28:eb:92:fc:15:48:ee:
5f:76:0a:4d:15:57:0c:96:56:04:dd:3d:8a:88:8e:5c:f8:19:
96:fb:46:d7:f9:b8:25:50:06:8b:eb:ff:61:d1:d5:0d:d2:15:
20:e0:28:30:cf:02:b2:86:70:f2:e4:26:db:92:0e:de:65:e8:
a2:3a:52:16:98:44:a8:97:70:b4:2d:10:e4:4e:2e:cc:67:f8:
96:43:8b:6f:9b:36:42:99:d3:fe:b7:11:28:3a:aa:20:f1:7c:
07:a5:74:f2:60:e5:81:8e:1a:c3:e9:2c:9d:9d:b7:e3:27:d7:
ab:f2:6f:90:21:a5:50:06:e6:79:09:d1:5f:17:f4:94:0c:be:
37:3b:c9:72
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUKCZ2cn6xSuh87Wg068DhcVtyOYkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNDAyNTlaFw0yNzA1MjEwNDA3NTlaMDMxMTAvBgNV
BAMTKDFERDg0MTYwRDhFRkFDNURFRDY3OEI1RjQ3Q0M2NzNGRUNCNTkyODUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDndLZZUsnyZPCmlP8tctZEKLNL
ILHM1uX7nJJBU+t+3RKfg3QOBocS8/0sDINh2J3oBOBqQ11dTFRcGBXEFTlj+nMU
OLOUF8AUe4FI2ArKHkrA8JLT1jIZtZoJhR1f9pokLvOk//0R2x3GRIx/RKOMQflx
7FMG34ISFYYaJHN9Xj8SJL2Bljcl81zenteqKoS3GRz6tqz/82UcaAJhqSQE/KxY
0A++EbbAw+pi50G62ZfxP4IAbRT+9SG9gsS3qlSuFXnG86VCjSFMxHt+MCLYyksM
ljkeZjW4OqHFkgKvORnvhVBgpUpVjdAvb4y9IOO6E9AnYShi/dh9syPEr5k9AgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUHdhBYNjvrF3tZ4tfR8xnP+y1koUwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1NzIxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqr/zANBgkqhkiG9w0BAQsFAAOCAQEAIbNY
pghUc4xjmwS+OITl0KV+ahl6TuhDPC7gselwj89SSjZ1o/FVbbDEywsViZEANEED
FBjX41YrguN3sJKiB/4I7+YkUwSgr1rpInggMIh64PNRu/GyX6t5we9+FFd5NVVp
MpBpgNFIIloeZhE3lJKn00/upYso65L8FUjuX3YKTRVXDJZWBN09ioiOXPgZlvtG
1/m4JVAGi+v/YdHVDdIVIOAoMM8CsoZw8uQm25IO3mXoojpSFphEqJdwtC0Q5E4u
zGf4lkOLb5s2QpnT/rcRKDqqIPF8B6V08mDlgY4aw+ksnZ234yfXq/JvkCGlUAbm
eQnRXxf0lAy+NzvJcg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:51 2026 by rpki-client