Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145957.roa
File: AS145957.roa (raw, json)
Hash identifier: xdsLHSNvDNnCakFrwlSqZtWLQQyg2310JOZqDhFI/Iw=
Subject key identifier: FD:AD:9E:47:B4:2F:43:69:58:AD:7C:EE:86:55:AA:76:95:22:76:3F
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4AADFD16BF4EE42B3467075A8C7836645D58978C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145957.roa
Signing time: Fri 22 May 2026 04:08:24 +0000
ROA not before: Fri 22 May 2026 04:03:24 +0000
ROA not after: Fri 21 May 2027 04:08:24 +0000
asID: 145957
IP address blocks: 240a:aceb::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:ad:fd:16:bf:4e:e4:2b:34:67:07:5a:8c:78:36:64:5d:58:97:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:03:24 2026 GMT
Not After : May 21 04:08:24 2027 GMT
Subject: CN=FDAD9E47B42F436958AD7CEE8655AA769522763F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:8b:6f:80:8c:c6:69:95:93:a5:09:77:60:a5:
c4:53:8a:fc:c5:c0:aa:00:5f:f5:52:ec:10:cc:35:
f3:e1:15:96:d3:36:3b:0e:3f:81:e0:f0:66:f6:58:
59:0e:a2:b5:50:de:c3:cb:18:d0:9b:16:57:3c:d7:
a7:e9:ff:62:00:ed:83:83:51:a0:14:e7:35:4e:e1:
88:08:6a:2a:81:74:b6:cd:b7:5f:9d:cc:b5:a3:92:
b1:df:4c:a1:41:55:81:98:39:ea:37:9f:e3:c9:4e:
eb:70:9d:33:e2:15:de:3d:4e:a5:86:1d:a3:eb:6d:
47:00:e8:ca:a7:13:d2:4a:5f:75:5d:0b:98:f7:98:
73:00:b7:08:b2:c0:f4:81:92:92:2c:b5:ea:40:4f:
be:11:2d:1b:87:4c:f9:55:52:19:0a:95:1a:55:3d:
10:a6:10:cc:57:8d:a6:e8:ca:d3:e7:2a:3c:8e:b6:
74:44:57:70:10:b3:3f:2e:64:21:a2:e8:91:d8:2f:
8f:42:fc:b9:79:c2:9a:19:64:bb:72:39:ca:b7:55:
b6:05:53:51:46:76:4a:f0:23:ae:8f:4d:e0:ac:11:
67:43:cc:fa:e5:4f:03:24:37:16:3a:c2:6d:02:93:
8a:2f:65:83:8c:96:1c:5e:5b:60:60:69:d3:09:39:
87:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:AD:9E:47:B4:2F:43:69:58:AD:7C:EE:86:55:AA:76:95:22:76:3F
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145957.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aceb::/32
Signature Algorithm: sha256WithRSAEncryption
30:f3:52:08:d1:14:2a:d4:56:32:20:a0:a4:40:06:68:78:74:
c5:3c:0f:6d:6f:33:06:ba:11:d9:a4:78:73:07:79:69:62:49:
99:20:fa:9a:de:c3:c5:1f:e7:8a:2f:a9:e1:92:d9:f2:87:b8:
80:23:51:98:3e:72:b4:86:05:e4:fd:c9:83:eb:d1:6a:47:a7:
16:6a:fe:7c:5f:92:e6:33:7f:2a:a2:3e:91:5b:6a:2c:33:e1:
02:e5:6d:83:01:58:0d:42:48:22:3b:32:74:0d:0b:ee:ee:c9:
88:f3:f5:51:59:dd:cd:0b:05:3e:fa:28:20:7e:30:f1:63:ee:
aa:fe:6b:d0:38:e6:48:a6:ed:c8:74:d2:1a:c5:2a:29:d3:33:
ad:25:b8:73:ef:19:08:78:49:98:9d:14:87:b7:77:15:7f:67:
b3:88:aa:34:6a:a6:04:bd:20:15:41:97:ec:11:da:bf:b5:52:
d2:c4:06:47:2e:47:fe:32:8e:2b:e2:43:ee:e8:7e:44:21:bc:
f2:6c:1e:a9:19:89:00:79:82:6c:06:7c:cc:fe:4d:72:60:e5:
0c:96:19:d8:1a:15:8f:a9:d0:ee:0e:8d:fd:76:f5:b1:22:52:
15:d0:6c:bf:9a:5f:b9:21:4c:1f:6e:40:b3:48:90:21:84:18:
70:1d:8a:0b
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUSq39Fr9O5Cs0ZwdajHg2ZF1Yl4wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwNDAzMjRaFw0yNzA1MjEwNDA4MjRaMDMxMTAvBgNV
BAMTKEZEQUQ5RTQ3QjQyRjQzNjk1OEFEN0NFRTg2NTVBQTc2OTUyMjc2M0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJi2+AjMZplZOlCXdgpcRTivzF
wKoAX/VS7BDMNfPhFZbTNjsOP4Hg8Gb2WFkOorVQ3sPLGNCbFlc816fp/2IA7YOD
UaAU5zVO4YgIaiqBdLbNt1+dzLWjkrHfTKFBVYGYOeo3n+PJTutwnTPiFd49TqWG
HaPrbUcA6MqnE9JKX3VdC5j3mHMAtwiywPSBkpIstepAT74RLRuHTPlVUhkKlRpV
PRCmEMxXjaboytPnKjyOtnREV3AQsz8uZCGi6JHYL49C/Ll5wpoZZLtyOcq3VbYF
U1FGdkrwI66PTeCsEWdDzPrlTwMkNxY6wm0Ck4ovZYOMlhxeW2BgadMJOYftAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU/a2eR7QvQ2lYrXzuhlWqdpUidj8wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1OTU3LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqs6zANBgkqhkiG9w0BAQsFAAOCAQEAMPNS
CNEUKtRWMiCgpEAGaHh0xTwPbW8zBroR2aR4cwd5aWJJmSD6mt7DxR/nii+p4ZLZ
8oe4gCNRmD5ytIYF5P3Jg+vRakenFmr+fF+S5jN/KqI+kVtqLDPhAuVtgwFYDUJI
IjsydA0L7u7JiPP1UVndzQsFPvooIH4w8WPuqv5r0DjmSKbtyHTSGsUqKdMzrSW4
c+8ZCHhJmJ0Uh7d3FX9ns4iqNGqmBL0gFUGX7BHav7VS0sQGRy5H/jKOK+JD7uh+
RCG88mweqRmJAHmCbAZ8zP5NcmDlDJYZ2BoVj6nQ7g6N/Xb1sSJSFdBsv5pfuSFM
H25As0iQIYQYcB2KCw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:19 2026 by rpki-client