Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145959.roa
File: AS145959.roa (raw, json)
Hash identifier: vniNuv2tD7t/X4zIjbBhra/UCpqqLAKwdMiuDV4pqvY=
Subject key identifier: 13:39:AF:27:3E:B7:C4:F8:29:9B:02:B3:C5:4F:F5:54:90:DD:E8:E1
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1DADFF364D6087B3212EB0BF0C09FF24F1E52388
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145959.roa
Signing time: Fri 22 May 2026 01:50:16 +0000
ROA not before: Fri 22 May 2026 01:45:16 +0000
ROA not after: Fri 21 May 2027 01:50:16 +0000
asID: 145959
IP address blocks: 240a:aced::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:ad:ff:36:4d:60:87:b3:21:2e:b0:bf:0c:09:ff:24:f1:e5:23:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:16 2026 GMT
Not After : May 21 01:50:16 2027 GMT
Subject: CN=1339AF273EB7C4F8299B02B3C54FF55490DDE8E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:40:93:35:38:02:08:18:6e:8c:28:33:b1:75:
ec:16:fd:4a:9b:69:96:50:79:73:3c:bd:40:b8:bc:
8d:40:94:c5:5a:02:a8:84:78:d0:67:51:d5:27:41:
98:9d:8a:14:fd:b2:99:92:15:47:a0:8c:19:01:d3:
47:f4:8a:96:d5:b9:e2:13:3c:46:0f:c4:d9:47:89:
f6:76:65:b1:4a:27:fd:dc:f7:2b:d0:62:6e:39:03:
1e:96:b0:61:d4:af:cc:81:17:2f:91:2b:41:da:72:
81:8a:7b:f5:a4:58:2b:e7:40:46:fc:05:59:5a:c4:
35:dc:73:58:da:a5:82:ad:77:39:6c:fa:76:59:a0:
02:e2:eb:a3:17:cb:df:b4:73:2a:b7:0b:dd:74:e7:
31:31:a6:c9:4e:21:8b:78:50:95:f1:cc:17:1c:4e:
5c:9c:87:02:8d:67:c5:0b:d8:e4:ee:50:09:3b:a9:
f6:58:4f:1d:a9:6d:ed:21:a9:0c:ec:fe:5b:1f:e1:
26:47:01:4a:4a:9d:68:1f:46:03:1f:a5:d0:f7:6c:
a1:ef:4b:d3:03:16:d5:7d:8e:6e:5a:07:7d:43:fe:
b6:63:fe:7b:c5:c7:3f:6d:22:15:c5:11:b5:bd:90:
68:0f:29:81:60:66:b8:a1:4b:03:2e:85:e9:94:cd:
1d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:39:AF:27:3E:B7:C4:F8:29:9B:02:B3:C5:4F:F5:54:90:DD:E8:E1
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145959.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aced::/32
Signature Algorithm: sha256WithRSAEncryption
46:c0:03:9e:7e:b9:1a:cc:2e:c8:72:0a:b4:71:81:bc:ea:f8:
f9:6c:68:4c:43:ad:08:20:99:74:56:9b:97:cc:4d:c2:63:89:
6c:e4:c1:ad:b2:b3:c9:36:2d:45:ea:be:4b:de:67:cb:b5:07:
30:3b:0d:65:a1:c4:9c:6f:d3:e6:7e:b6:b8:78:8b:c4:5a:64:
d4:70:b2:54:37:6f:d7:8d:c2:6c:9d:2a:67:fb:45:83:80:b2:
2f:e3:fe:8c:6d:14:da:2b:98:72:36:2e:aa:7f:63:b9:8b:3d:
71:52:16:56:51:95:a0:de:2d:0e:7b:b1:09:94:6e:20:11:c1:
da:c1:ab:27:87:c7:19:30:02:a4:f9:19:6f:8c:20:10:9b:fb:
d3:8f:f3:32:cc:8a:72:e6:68:b4:9a:2f:d4:df:7f:24:fe:97:
95:dd:85:88:20:1c:2b:94:ab:b0:c4:12:61:2d:05:d7:8e:a3:
92:9d:1e:c8:9e:50:41:ee:ce:59:6b:f8:66:24:9d:2a:7a:04:
df:4b:91:b7:09:be:bd:2a:31:f8:d6:d9:e4:b6:7e:fc:12:ca:
50:d1:1c:0e:ff:a3:8c:1e:ea:1c:6c:55:bf:85:e8:1a:da:21:
e1:14:a3:c0:46:72:18:b9:02:69:9f:b6:2e:c9:cb:75:a1:a2:
42:5a:be:96
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUHa3/Nk1gh7MhLrC/DAn/JPHlI4gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwMTQ1MTZaFw0yNzA1MjEwMTUwMTZaMDMxMTAvBgNV
BAMTKDEzMzlBRjI3M0VCN0M0RjgyOTlCMDJCM0M1NEZGNTU0OTBEREU4RTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsQJM1OAIIGG6MKDOxdewW/Uqb
aZZQeXM8vUC4vI1AlMVaAqiEeNBnUdUnQZidihT9spmSFUegjBkB00f0ipbVueIT
PEYPxNlHifZ2ZbFKJ/3c9yvQYm45Ax6WsGHUr8yBFy+RK0HacoGKe/WkWCvnQEb8
BVlaxDXcc1japYKtdzls+nZZoALi66MXy9+0cyq3C9105zExpslOIYt4UJXxzBcc
TlychwKNZ8UL2OTuUAk7qfZYTx2pbe0hqQzs/lsf4SZHAUpKnWgfRgMfpdD3bKHv
S9MDFtV9jm5aB31D/rZj/nvFxz9tIhXFEbW9kGgPKYFgZrihSwMuhemUzR1zAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUEzmvJz63xPgpmwKzxU/1VJDd6OEwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1OTU5LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqs7TANBgkqhkiG9w0BAQsFAAOCAQEARsAD
nn65GswuyHIKtHGBvOr4+WxoTEOtCCCZdFabl8xNwmOJbOTBrbKzyTYtReq+S95n
y7UHMDsNZaHEnG/T5n62uHiLxFpk1HCyVDdv143CbJ0qZ/tFg4CyL+P+jG0U2iuY
cjYuqn9juYs9cVIWVlGVoN4tDnuxCZRuIBHB2sGrJ4fHGTACpPkZb4wgEJv704/z
MsyKcuZotJov1N9/JP6Xld2FiCAcK5SrsMQSYS0F146jkp0eyJ5QQe7OWWv4ZiSd
KnoE30uRtwm+vSox+NbZ5LZ+/BLKUNEcDv+jjB7qHGxVv4XoGtoh4RSjwEZyGLkC
aZ+2LsnLdaGiQlq+lg==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:32 2026 by rpki-client