Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145834.roa
File: AS145834.roa (raw, json)
Hash identifier: nWZvOAJqbn27m334OoBqyFd958b4zlC2OD2ISy3Ob5o=
Subject key identifier: BE:DC:1C:06:A7:AB:FA:CC:FB:35:94:F4:4C:7D:A7:1A:40:F2:F4:9A
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 503D934BB0A96ADD95EDAF31E3926294B66907CA
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145834.roa
Signing time: Mon 25 May 2026 03:19:37 +0000
ROA not before: Mon 25 May 2026 03:14:37 +0000
ROA not after: Mon 24 May 2027 03:19:37 +0000
asID: 145834
IP address blocks: 240a:ac70::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
50:3d:93:4b:b0:a9:6a:dd:95:ed:af:31:e3:92:62:94:b6:69:07:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:37 2026 GMT
Not After : May 24 03:19:37 2027 GMT
Subject: CN=BEDC1C06A7ABFACCFB3594F44C7DA71A40F2F49A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fa:ab:a2:42:0a:34:e4:94:3e:68:61:52:e3:
9e:d6:2a:38:14:85:34:05:a6:66:ff:1b:99:fc:aa:
6a:72:92:9e:07:83:95:8e:bd:e6:d3:58:6e:02:a6:
5f:03:ec:27:67:b0:2b:c8:fc:d1:a3:d6:6e:32:23:
70:08:11:ee:df:6b:44:7c:ff:f2:87:7b:92:29:c5:
4a:f8:c2:15:31:33:52:97:49:f2:8b:78:af:0f:63:
6a:c5:27:a3:e3:7c:ce:ad:d1:58:73:8a:29:91:38:
6f:f5:91:d4:0b:53:0e:06:c0:e0:08:4e:e4:a1:19:
88:31:75:11:1f:5b:60:52:e2:99:43:c0:c9:d3:5b:
41:79:51:75:06:97:d1:c7:65:78:66:e3:e3:c1:6b:
5c:22:63:a9:eb:43:5e:1b:7b:d6:90:fd:2d:e8:d9:
b7:cd:74:a7:d3:98:d8:c6:13:58:55:78:29:ca:56:
5d:93:bd:56:7c:59:ec:a9:67:ae:87:3f:40:2c:ac:
40:ee:95:cf:65:58:56:21:3d:46:e1:11:7b:b8:af:
fb:56:a6:f0:c7:62:73:3d:5a:24:56:f7:d9:b3:7d:
44:89:d6:9b:10:e3:d8:cc:f7:f0:78:dc:30:48:f0:
f9:bc:43:3d:1b:89:c8:a0:fc:81:fa:2c:46:6c:1e:
94:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:DC:1C:06:A7:AB:FA:CC:FB:35:94:F4:4C:7D:A7:1A:40:F2:F4:9A
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145834.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ac70::/32
Signature Algorithm: sha256WithRSAEncryption
49:2d:5a:24:8d:cd:61:c7:d2:ce:30:48:b0:3d:5a:2d:73:db:
b0:f8:c7:5d:ae:24:ad:a3:8b:03:7f:3e:a3:59:5f:40:cc:8d:
30:d8:c6:d9:86:cc:d9:b1:fa:ad:96:ff:2b:be:0e:0c:cd:0c:
65:38:fe:39:64:88:69:58:cd:5b:e2:c9:8f:f8:37:2e:d6:69:
68:ca:70:e8:d6:06:72:eb:ab:83:d1:c3:69:33:d7:24:85:58:
22:88:81:e4:79:cb:d7:f6:47:9f:e0:4d:21:c9:46:b5:98:ad:
d4:9e:f4:71:9c:da:97:bc:6e:5e:a5:d3:9e:8e:ce:20:33:a7:
a4:ea:66:4d:d1:66:90:5d:8d:cf:1f:82:ed:de:6f:cc:5b:c3:
ac:d0:2a:ab:26:00:ce:79:5d:27:7d:6b:ee:ff:dc:ef:11:49:
38:66:34:e9:e5:2a:09:0d:b9:f3:0c:2d:2b:7f:80:f0:e7:e2:
03:ec:bf:34:ad:f1:c6:77:a0:bd:ce:ad:ff:5c:f6:e8:bd:bf:
99:59:78:c9:54:1e:68:09:15:11:90:23:67:7b:3a:c3:39:42:
be:49:59:9a:cc:30:92:ec:36:ab:4c:2b:26:41:94:7e:2a:86:
f0:57:6c:60:4f:f9:b9:11:2a:d3:60:68:fa:0a:6c:fa:a3:aa:
40:c0:c0:ee
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUUD2TS7Cpat2V7a8x45JilLZpB8owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMzE0MzdaFw0yNzA1MjQwMzE5MzdaMDMxMTAvBgNV
BAMTKEJFREMxQzA2QTdBQkZBQ0NGQjM1OTRGNDRDN0RBNzFBNDBGMkY0OUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw+quiQgo05JQ+aGFS457WKjgU
hTQFpmb/G5n8qmpykp4Hg5WOvebTWG4Cpl8D7CdnsCvI/NGj1m4yI3AIEe7fa0R8
//KHe5IpxUr4whUxM1KXSfKLeK8PY2rFJ6PjfM6t0VhziimROG/1kdQLUw4GwOAI
TuShGYgxdREfW2BS4plDwMnTW0F5UXUGl9HHZXhm4+PBa1wiY6nrQ14be9aQ/S3o
2bfNdKfTmNjGE1hVeCnKVl2TvVZ8WeypZ66HP0AsrEDulc9lWFYhPUbhEXu4r/tW
pvDHYnM9WiRW99mzfUSJ1psQ49jM9/B43DBI8Pm8Qz0bicig/IH6LEZsHpSDAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUvtwcBqer+sz7NZT0TH2nGkDy9JowHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1ODM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqscDANBgkqhkiG9w0BAQsFAAOCAQEASS1a
JI3NYcfSzjBIsD1aLXPbsPjHXa4kraOLA38+o1lfQMyNMNjG2YbM2bH6rZb/K74O
DM0MZTj+OWSIaVjNW+LJj/g3LtZpaMpw6NYGcuurg9HDaTPXJIVYIoiB5HnL1/ZH
n+BNIclGtZit1J70cZzal7xuXqXTno7OIDOnpOpmTdFmkF2Nzx+C7d5vzFvDrNAq
qyYAznldJ31r7v/c7xFJOGY06eUqCQ258wwtK3+A8OfiA+y/NK3xxnegvc6t/1z2
6L2/mVl4yVQeaAkVEZAjZ3s6wzlCvklZmswwkuw2q0wrJkGUfiqG8FdsYE/5uREq
02Bo+gps+qOqQMDA7g==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:59 2026 by rpki-client