Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145985.roa
File: AS145985.roa (raw, json)
Hash identifier: QRhDU/AVQxvx532EfdaGCnfwVwiLwH2C2XlDdRonqU4=
Subject key identifier: B7:9B:EE:52:01:35:16:98:82:49:B6:62:D1:5B:5F:3B:10:A5:16:E6
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 29E85C830DDFACBB057E997606B862596D160C4A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145985.roa
Signing time: Fri 22 May 2026 01:50:32 +0000
ROA not before: Fri 22 May 2026 01:45:32 +0000
ROA not after: Fri 21 May 2027 01:50:32 +0000
asID: 145985
IP address blocks: 240a:ad07::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:e8:5c:83:0d:df:ac:bb:05:7e:99:76:06:b8:62:59:6d:16:0c:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:32 2026 GMT
Not After : May 21 01:50:32 2027 GMT
Subject: CN=B79BEE52013516988249B662D15B5F3B10A516E6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:f2:3b:03:f4:e7:12:83:65:68:f0:20:1f:09:
e1:53:f9:14:b9:3c:be:d1:27:bd:a7:95:fd:e7:3d:
80:06:07:05:29:d6:cf:dd:d4:a5:38:52:4e:1e:03:
10:ad:a5:8a:95:5e:5a:b5:13:4d:a2:aa:6a:d7:99:
a6:07:c9:20:19:24:9e:bd:42:8c:39:7c:8e:d8:b7:
5f:3d:42:fe:6f:c8:0c:0b:c9:96:c3:a1:58:da:20:
52:51:1a:9a:d7:31:7d:a4:1a:f6:fc:33:e1:96:d2:
2a:ec:f6:d2:0b:b0:b6:a5:4f:d8:22:6c:e1:1f:1b:
f3:77:f1:d7:f0:cc:3b:e0:6e:4e:90:ae:d8:b9:a2:
aa:45:52:53:d9:76:ae:91:a5:92:c5:c4:e3:a7:d7:
9b:d9:aa:9f:6a:f9:32:c2:48:58:0f:86:6b:03:ce:
8a:59:df:b6:cb:dd:b4:1d:32:9f:88:81:ca:d9:9d:
46:bc:b1:83:60:21:fd:33:ab:74:c5:98:08:0b:7c:
8f:76:77:c7:60:65:db:6b:62:41:5a:db:bf:b0:a0:
12:00:8a:dd:7a:45:a0:97:4b:16:68:52:be:c2:1b:
8a:8c:53:94:bc:63:b5:8b:7b:e8:67:57:01:f8:a6:
02:03:b7:33:73:2b:3c:03:20:ec:94:83:87:69:07:
2d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:9B:EE:52:01:35:16:98:82:49:B6:62:D1:5B:5F:3B:10:A5:16:E6
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145985.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ad07::/32
Signature Algorithm: sha256WithRSAEncryption
70:dc:a3:2a:8e:0c:1f:f4:78:56:1d:9e:8c:3f:2d:8e:07:47:
ac:8a:c2:85:1f:2f:f4:82:35:46:76:d2:9a:31:e8:95:32:be:
0d:86:5a:98:2e:fe:cc:52:5c:0b:a6:3d:7b:3f:e4:1b:5c:8e:
7e:3d:72:2a:f1:75:92:06:25:66:65:c5:9c:45:02:d8:af:da:
db:df:68:25:b7:a5:a6:12:1d:56:35:99:a4:95:1c:f6:70:4e:
6b:be:50:a7:df:7b:f6:3f:ae:72:80:69:d4:b2:5e:35:db:b9:
e9:eb:01:d5:3f:c5:6b:49:ea:20:01:9c:94:36:f2:96:28:69:
68:a8:32:af:9c:ce:c0:dc:c6:75:3c:c0:2b:d7:04:e9:fd:7c:
88:d4:1b:2e:44:31:c5:ef:d0:4a:bc:0f:01:66:3e:e5:58:2f:
2c:16:e8:b7:54:f0:ff:a4:bb:ae:1c:ad:db:ee:19:41:98:be:
aa:17:e3:bd:d9:67:b3:60:c4:ac:c4:8d:db:f1:ed:6e:ed:64:
ad:89:38:5e:b5:03:36:e6:06:c8:03:41:60:16:98:26:e7:4d:
13:6b:75:38:ae:de:98:08:e2:65:2b:f7:80:07:3e:a7:78:c0:
93:d1:2b:fb:23:09:13:61:f7:34:87:20:23:a4:01:b7:14:b1:
d2:a3:54:25
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUKehcgw3frLsFfpl2BrhiWW0WDEowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjIwMTQ1MzJaFw0yNzA1MjEwMTUwMzJaMDMxMTAvBgNV
BAMTKEI3OUJFRTUyMDEzNTE2OTg4MjQ5QjY2MkQxNUI1RjNCMTBBNTE2RTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD8jsD9OcSg2Vo8CAfCeFT+RS5
PL7RJ72nlf3nPYAGBwUp1s/d1KU4Uk4eAxCtpYqVXlq1E02iqmrXmaYHySAZJJ69
Qow5fI7Yt189Qv5vyAwLyZbDoVjaIFJRGprXMX2kGvb8M+GW0irs9tILsLalT9gi
bOEfG/N38dfwzDvgbk6Qrti5oqpFUlPZdq6RpZLFxOOn15vZqp9q+TLCSFgPhmsD
zopZ37bL3bQdMp+IgcrZnUa8sYNgIf0zq3TFmAgLfI92d8dgZdtrYkFa27+woBIA
it16RaCXSxZoUr7CG4qMU5S8Y7WLe+hnVwH4pgIDtzNzKzwDIOyUg4dpBy0rAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQUt5vuUgE1FpiCSbZi0VtfOxClFuYwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1OTg1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqtBzANBgkqhkiG9w0BAQsFAAOCAQEAcNyj
Ko4MH/R4Vh2ejD8tjgdHrIrChR8v9II1RnbSmjHolTK+DYZamC7+zFJcC6Y9ez/k
G1yOfj1yKvF1kgYlZmXFnEUC2K/a299oJbelphIdVjWZpJUc9nBOa75Qp9979j+u
coBp1LJeNdu56esB1T/Fa0nqIAGclDbylihpaKgyr5zOwNzGdTzAK9cE6f18iNQb
LkQxxe/QSrwPAWY+5VgvLBbot1Tw/6S7rhyt2+4ZQZi+qhfjvdlns2DErMSN2/Ht
bu1krYk4XrUDNuYGyANBYBaYJudNE2t1OK7emAjiZSv3gAc+p3jAk9Er+yMJE2H3
NIcgI6QBtxSx0qNUJQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:58 2026 by rpki-client