Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145864.roa
File: AS145864.roa (raw, json)
Hash identifier: 9eE0kHheGMwZl+IHTtjQ30h0+GTlpiIoAJweBTr5LgM=
Subject key identifier: D0:AC:02:C9:C4:E5:B9:98:25:8F:40:C4:E1:04:6E:DF:32:AD:24:70
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3CCD62C63B0FA727C7497C0917C34A1E1F845E73
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145864.roa
Signing time: Tue 26 May 2026 03:17:14 +0000
ROA not before: Tue 26 May 2026 03:12:14 +0000
ROA not after: Tue 25 May 2027 03:17:14 +0000
asID: 145864
IP address blocks: 240a:ac8e::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:cd:62:c6:3b:0f:a7:27:c7:49:7c:09:17:c3:4a:1e:1f:84:5e:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:12:14 2026 GMT
Not After : May 25 03:17:14 2027 GMT
Subject: CN=D0AC02C9C4E5B998258F40C4E1046EDF32AD2470
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:50:b8:ec:68:33:2c:6e:3b:18:b9:52:6e:89:
cb:d3:79:c8:3a:7b:eb:bf:b1:e4:d1:b2:05:08:d1:
da:2b:fc:64:26:77:28:41:9c:f5:36:3b:ef:04:55:
52:fa:8d:14:b4:8f:3c:7c:ef:d9:70:77:1d:f6:ef:
cc:7f:28:25:8d:e8:00:ed:74:5f:8d:cf:c8:a8:c1:
c4:01:c3:f9:91:a3:c7:ea:05:fb:3f:93:2d:74:f6:
b4:c5:11:93:72:e2:61:79:04:8e:3c:04:92:93:ea:
b3:2f:79:c1:d3:73:59:36:c2:32:be:84:85:0c:82:
b0:73:bb:d8:8b:4c:a4:4d:ae:19:d1:ee:ff:da:9e:
4c:07:8c:e1:d1:d4:06:c4:53:b5:e1:46:2e:07:52:
00:4c:f2:0f:46:e5:69:c0:d5:5d:30:77:64:23:ff:
f5:0a:f2:f6:ec:ab:33:4d:fe:2d:0a:8e:f3:33:a6:
7a:7e:05:ec:4a:eb:30:21:7b:68:f4:6b:aa:34:d8:
8c:94:47:05:50:c6:47:c1:52:f5:5e:0a:77:24:f1:
e0:61:06:97:6d:04:03:0b:97:3a:88:01:7d:df:ef:
7f:ab:bc:5e:45:4b:e9:0e:18:91:f8:c7:d4:1a:2f:
bf:b2:89:ae:4b:1c:1c:d8:90:4d:48:a8:e7:ae:57:
5a:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:AC:02:C9:C4:E5:B9:98:25:8F:40:C4:E1:04:6E:DF:32:AD:24:70
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145864.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ac8e::/32
Signature Algorithm: sha256WithRSAEncryption
94:a8:2c:3a:54:1e:98:34:c3:d1:6f:9a:8f:f0:1b:af:c1:1a:
0f:9a:f5:99:af:c1:29:a8:8c:a8:ae:eb:e3:41:46:59:07:b7:
f7:1d:f2:15:bc:94:4c:4d:7e:ea:7d:3e:33:d4:5f:bb:5b:1b:
7c:41:2e:9d:9a:66:eb:d8:2f:80:91:cc:87:39:55:e0:ca:c6:
51:94:c7:7f:dd:b8:42:23:a0:8e:85:9a:3d:e8:99:89:5a:29:
9b:d1:17:1f:2e:5a:89:0b:f5:97:6b:4e:c7:93:82:7c:3f:71:
ca:d5:37:4c:a0:59:ad:3a:eb:15:4d:6b:f1:41:d7:e8:b7:c6:
ae:3e:a8:6f:68:80:1f:47:ad:66:3b:38:6b:04:11:16:96:ce:
44:79:c2:6e:de:4e:7d:96:bf:c6:74:b0:70:d7:69:16:ba:6c:
47:08:15:47:07:1f:a2:be:90:25:b5:e2:38:5a:05:26:76:83:
77:dc:ae:bc:1d:8f:71:de:ad:31:69:e1:f9:35:0c:27:52:8b:
70:f2:b5:3a:4e:39:40:58:c8:e2:00:ab:73:c6:2d:61:0f:aa:
a4:94:87:b7:27:5a:10:f2:6b:93:91:58:88:11:06:45:2b:8a:
53:80:a8:b8:63:a4:38:7f:25:1f:41:3d:a3:00:0f:a2:78:f8:
60:13:e1:d1
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUPM1ixjsPpyfHSXwJF8NKHh+EXnMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMzEyMTRaFw0yNzA1MjUwMzE3MTRaMDMxMTAvBgNV
BAMTKEQwQUMwMkM5QzRFNUI5OTgyNThGNDBDNEUxMDQ2RURGMzJBRDI0NzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLULjsaDMsbjsYuVJuicvTecg6
e+u/seTRsgUI0dor/GQmdyhBnPU2O+8EVVL6jRS0jzx879lwdx3278x/KCWN6ADt
dF+Nz8iowcQBw/mRo8fqBfs/ky109rTFEZNy4mF5BI48BJKT6rMvecHTc1k2wjK+
hIUMgrBzu9iLTKRNrhnR7v/ankwHjOHR1AbEU7XhRi4HUgBM8g9G5WnA1V0wd2Qj
//UK8vbsqzNN/i0KjvMzpnp+BexK6zAhe2j0a6o02IyURwVQxkfBUvVeCnck8eBh
BpdtBAMLlzqIAX3f73+rvF5FS+kOGJH4x9QaL7+yia5LHBzYkE1IqOeuV1ptAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU0KwCycTluZglj0DE4QRu3zKtJHAwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1ODY0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqsjjANBgkqhkiG9w0BAQsFAAOCAQEAlKgs
OlQemDTD0W+aj/Abr8EaD5r1ma/BKaiMqK7r40FGWQe39x3yFbyUTE1+6n0+M9Rf
u1sbfEEunZpm69gvgJHMhzlV4MrGUZTHf924QiOgjoWaPeiZiVopm9EXHy5aiQv1
l2tOx5OCfD9xytU3TKBZrTrrFU1r8UHX6LfGrj6ob2iAH0etZjs4awQRFpbORHnC
bt5OfZa/xnSwcNdpFrpsRwgVRwcfor6QJbXiOFoFJnaDd9yuvB2Pcd6tMWnh+TUM
J1KLcPK1Ok45QFjI4gCrc8YtYQ+qpJSHtydaEPJrk5FYiBEGRSuKU4CouGOkOH8l
H0E9owAPonj4YBPh0Q==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:26 2026 by rpki-client