Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145964.roa
File: AS145964.roa (raw, json)
Hash identifier: mtusHDwdUjMG2xRriySHcdhum9DU2D88FtkZYcOlUiw=
Subject key identifier: 32:47:0A:C3:59:D9:FB:1F:74:71:75:7A:9E:6D:D6:CA:06:E1:FC:5D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0F72897E67931965C43F4533F738BE367342F46F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145964.roa
Signing time: Mon 25 May 2026 03:19:26 +0000
ROA not before: Mon 25 May 2026 03:14:26 +0000
ROA not after: Mon 24 May 2027 03:19:26 +0000
asID: 145964
IP address blocks: 240a:acf2::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:72:89:7e:67:93:19:65:c4:3f:45:33:f7:38:be:36:73:42:f4:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:26 2026 GMT
Not After : May 24 03:19:26 2027 GMT
Subject: CN=32470AC359D9FB1F7471757A9E6DD6CA06E1FC5D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:76:55:c9:01:dd:4c:b2:c3:b6:ea:98:d6:d3:
bb:ab:7c:62:92:73:3a:b3:a3:ce:a1:f9:5f:1f:fc:
80:03:db:67:9e:df:ab:93:46:66:2f:5d:34:8c:b9:
78:61:30:82:65:18:5d:42:b9:f3:35:b7:a8:b5:f6:
91:6e:1d:79:4d:f9:8b:54:56:71:4a:06:b0:23:ff:
22:36:79:a9:8a:7b:1c:57:0a:5c:b7:31:e6:ff:83:
af:b8:e6:48:20:47:dc:16:ae:9b:06:78:6b:dd:6e:
35:06:d1:e5:a3:ae:ce:06:b8:82:96:60:ef:62:eb:
e0:e2:72:7e:b5:3a:ff:bf:76:1b:4b:69:37:e3:d4:
8e:f1:3e:1e:63:55:61:01:8d:ab:d6:40:5c:8b:4b:
3a:26:f3:50:de:aa:12:3e:dc:0c:b5:95:e0:d9:75:
e3:42:45:65:57:e6:79:7e:68:b8:16:8b:dc:ce:e7:
49:ac:0f:99:97:67:79:c6:b0:3a:b9:be:fe:a1:61:
8d:4b:00:b2:2d:e6:c7:7a:0d:07:f0:be:bc:cb:71:
5b:17:b1:48:ba:fd:e4:a5:23:3b:a8:1c:70:7d:cc:
44:08:83:4a:fc:ae:a3:c1:da:44:53:4b:91:c0:2b:
43:94:77:af:46:69:3e:88:44:b7:f3:2f:34:d9:b0:
05:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:47:0A:C3:59:D9:FB:1F:74:71:75:7A:9E:6D:D6:CA:06:E1:FC:5D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145964.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:acf2::/32
Signature Algorithm: sha256WithRSAEncryption
4b:c7:91:56:0b:a1:76:ee:cf:1c:61:da:8c:57:24:ea:d2:ef:
82:62:e4:4f:34:35:50:9d:72:24:7d:78:15:66:71:9a:43:7a:
39:2c:8f:bc:43:b6:63:1b:82:b8:f5:b8:5e:d7:7f:07:95:0b:
5b:08:46:78:62:7b:21:d7:28:88:0c:fe:bd:a6:ec:e0:97:71:
b4:df:7a:30:db:30:c8:a5:94:14:9c:1e:5a:e9:c3:86:73:2e:
4c:9c:4e:12:c8:56:44:b5:81:fc:5e:fe:d0:db:e6:4c:04:4d:
7c:bb:c3:f1:ba:a5:33:51:4c:f9:11:2e:44:86:11:b1:66:49:
5d:d7:b4:02:22:f8:62:3b:44:26:5d:ea:25:87:20:5e:f2:44:
fd:e1:35:4d:dc:1d:34:f2:62:3d:6a:94:85:60:8e:ba:11:ba:
00:19:e5:7d:05:74:27:18:75:8f:e3:a3:de:b9:2e:7f:f8:71:
cc:fc:5d:78:8c:71:15:d8:b6:a0:b5:c2:e6:b6:7e:7e:ef:88:
9e:99:79:c2:a9:76:d2:96:5f:a6:29:e1:43:e1:e6:69:ef:f2:
6e:a8:1e:12:43:1c:30:12:ba:68:f9:6d:d9:8b:08:9d:1d:39:
b3:6c:c9:37:99:c1:4c:39:71:1a:d0:c1:73:b5:c5:1c:4a:46:
a6:62:ae:67
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUD3KJfmeTGWXEP0Uz9zi+NnNC9G8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjUwMzE0MjZaFw0yNzA1MjQwMzE5MjZaMDMxMTAvBgNV
BAMTKDMyNDcwQUMzNTlEOUZCMUY3NDcxNzU3QTlFNkRENkNBMDZFMUZDNUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCddlXJAd1MssO26pjW07urfGKS
czqzo86h+V8f/IAD22ee36uTRmYvXTSMuXhhMIJlGF1CufM1t6i19pFuHXlN+YtU
VnFKBrAj/yI2eamKexxXCly3Meb/g6+45kggR9wWrpsGeGvdbjUG0eWjrs4GuIKW
YO9i6+Dicn61Ov+/dhtLaTfj1I7xPh5jVWEBjavWQFyLSzom81DeqhI+3Ay1leDZ
deNCRWVX5nl+aLgWi9zO50msD5mXZ3nGsDq5vv6hYY1LALIt5sd6DQfwvrzLcVsX
sUi6/eSlIzuoHHB9zEQIg0r8rqPB2kRTS5HAK0OUd69GaT6IRLfzLzTZsAUBAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUMkcKw1nZ+x90cXV6nm3Wygbh/F0wHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1OTY0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqs8jANBgkqhkiG9w0BAQsFAAOCAQEAS8eR
Vguhdu7PHGHajFck6tLvgmLkTzQ1UJ1yJH14FWZxmkN6OSyPvEO2YxuCuPW4Xtd/
B5ULWwhGeGJ7IdcoiAz+vabs4JdxtN96MNswyKWUFJweWunDhnMuTJxOEshWRLWB
/F7+0NvmTARNfLvD8bqlM1FM+REuRIYRsWZJXde0AiL4YjtEJl3qJYcgXvJE/eE1
TdwdNPJiPWqUhWCOuhG6ABnlfQV0Jxh1j+Oj3rkuf/hxzPxdeIxxFdi2oLXC5rZ+
fu+Inpl5wql20pZfpinhQ+Hmae/ybqgeEkMcMBK6aPlt2YsInR05s2zJN5nBTDlx
GtDBc7XFHEpGpmKuZw==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:03 2026 by rpki-client