Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145998.roa
File: AS145998.roa (raw, json)
Hash identifier: NWTjrKkInmwUNomrsx+EYEMmyGIOX4d6lpZH+ZTC88I=
Subject key identifier: F8:CD:95:DE:4E:C8:F1:03:21:77:7F:AC:E1:E2:6A:11:87:DC:06:57
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 058DBB96F06DFE2ECA72F1933BD703C68AFA45ED
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145998.roa
Signing time: Tue 26 May 2026 01:13:21 +0000
ROA not before: Tue 26 May 2026 01:08:21 +0000
ROA not after: Tue 25 May 2027 01:13:21 +0000
asID: 145998
IP address blocks: 240a:ad14::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:8d:bb:96:f0:6d:fe:2e:ca:72:f1:93:3b:d7:03:c6:8a:fa:45:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:08:21 2026 GMT
Not After : May 25 01:13:21 2027 GMT
Subject: CN=F8CD95DE4EC8F10321777FACE1E26A1187DC0657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:64:93:7f:bf:97:36:a2:67:55:a7:fa:a7:5a:
65:a6:58:0f:c4:a4:23:cb:56:3b:1f:d0:5b:ff:ae:
fa:88:f7:ff:c6:b5:40:4d:f8:0f:9e:7d:c3:22:bd:
d1:be:98:c2:e8:f2:09:b2:6c:0d:78:6d:ff:63:44:
44:1e:aa:82:05:f3:f5:ce:d0:2b:0b:5a:86:a7:df:
0e:b9:95:4a:32:5e:e1:b0:51:d7:1d:5a:d9:55:7c:
d0:0d:c6:eb:6b:86:31:d2:6b:4a:1e:6c:3a:50:35:
d7:bf:5f:2e:a0:81:ed:0b:f4:23:79:b3:e1:17:4b:
f4:09:33:39:b7:9e:48:f2:74:7d:a5:cf:64:59:ab:
9e:c8:3c:07:e8:fa:8d:10:07:01:a8:b8:a7:e2:7d:
b6:fb:75:5d:d7:be:67:27:5d:f8:27:ba:ab:37:9e:
93:b2:22:9a:dc:ad:ce:0f:83:ff:0e:bc:56:f1:b5:
f6:30:45:ab:41:84:ce:a1:bb:36:75:3f:04:1d:92:
9f:9f:c3:d7:1d:3c:b9:33:37:b5:e9:9c:0c:19:91:
18:e7:f7:7b:37:e2:4c:fd:30:96:44:6c:d7:89:41:
a6:ae:f3:97:64:0b:5e:ff:b2:09:8f:6a:a1:d7:23:
62:6c:64:dd:37:ed:99:fa:b6:ea:77:92:fb:fb:ea:
0c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:CD:95:DE:4E:C8:F1:03:21:77:7F:AC:E1:E2:6A:11:87:DC:06:57
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145998.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ad14::/32
Signature Algorithm: sha256WithRSAEncryption
06:50:24:c1:4f:14:45:60:0b:a0:bc:74:96:6e:e2:53:06:2a:
22:0f:23:a4:09:12:80:cb:4a:40:9d:33:50:e8:38:f0:23:a8:
29:33:73:1a:ed:5b:c8:a6:e2:19:59:8a:ac:3a:0f:4f:ee:76:
89:9f:35:22:d3:46:80:6d:70:38:3b:72:06:d2:34:84:86:55:
a2:bd:d7:37:d4:a0:e3:0e:0e:bf:68:54:10:b2:29:68:63:48:
dd:95:d6:25:de:a6:17:7a:98:8a:ff:b7:27:66:33:22:05:03:
a7:99:5b:30:d0:a9:e2:e4:58:d2:2b:e4:0c:de:3e:83:3a:2f:
dc:53:83:f2:d7:d3:07:9c:fd:9d:59:c6:bc:c4:a5:b5:ef:b9:
5f:d6:52:6b:eb:a2:4b:d5:ec:8a:15:cf:78:39:a1:9f:bb:5d:
fe:59:15:4c:d3:de:d0:98:b8:f2:b7:09:00:33:8c:c3:1c:24:
8a:04:7f:db:cc:66:b6:bf:04:9b:be:08:bd:82:75:e3:40:4a:
82:2e:b9:8d:e2:54:fd:4c:49:bd:9b:5a:3d:7e:e0:90:18:a0:
1b:35:a1:1b:44:be:de:1a:74:1a:91:24:df:3f:de:38:cb:a8:
6b:1a:4f:65:f0:b2:55:62:30:c0:44:83:79:3b:de:56:7e:8e:
4a:04:9e:cd
-----BEGIN CERTIFICATE-----
MIIEuTCCA6GgAwIBAgIUBY27lvBt/i7KcvGTO9cDxor6Re0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdCOTczRjg3MjdGMTE2NTM2OEQxREEzRjE4NThGRDc2
NjBBNDk2MDAeFw0yNjA1MjYwMTA4MjFaFw0yNzA1MjUwMTEzMjFaMDMxMTAvBgNV
BAMTKEY4Q0Q5NURFNEVDOEYxMDMyMTc3N0ZBQ0UxRTI2QTExODdEQzA2NTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtZJN/v5c2omdVp/qnWmWmWA/E
pCPLVjsf0Fv/rvqI9//GtUBN+A+efcMivdG+mMLo8gmybA14bf9jREQeqoIF8/XO
0CsLWoan3w65lUoyXuGwUdcdWtlVfNANxutrhjHSa0oebDpQNde/Xy6gge0L9CN5
s+EXS/QJMzm3nkjydH2lz2RZq57IPAfo+o0QBwGouKfifbb7dV3XvmcnXfgnuqs3
npOyIprcrc4Pg/8OvFbxtfYwRatBhM6huzZ1PwQdkp+fw9cdPLkzN7XpnAwZkRjn
93s34kz9MJZEbNeJQaau85dkC17/sgmPaqHXI2JsZN037Zn6tup3kvv76gyNAgMB
AAGjggHDMIIBvzAdBgNVHQ4EFgQU+M2V3k7I8QMhd3+s4eJqEYfcBlcwHwYDVR0j
BBgwFoAUV7lz+HJ/EWU2jR2j8YWP12YKSWAwDgYDVR0PAQH/BAQDAgeAMGoGA1Ud
HwRjMGEwX6BdoFuGWXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRp
LXN1YjAwMi8wLzU3Qjk3M0Y4NzI3RjExNjUzNjhEMURBM0YxODU4RkQ3NjYwQTQ5
NjAuY3JsMG4GCCsGAQUFBwEBBGIwYDBeBggrBgEFBQcwAoZScnN5bmM6Ly9ycGtp
LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC81N0I5NzNGODcyN0YxMTY1MzY4RDFE
QTNGMTg1OEZENzY2MEE0OTYwLmNlcjBVBggrBgEFBQcBCwRJMEcwRQYIKwYBBQUH
MAuGOXJzeW5jOi8vcnN5bmMuZml0aS5uZXQuY24vcmVwby9maXRpLXN1YjAwMi8w
L0FTMTQ1OTk4LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCAGCCsGAQUF
BwEHAQH/BBEwDzANBAIAAjAHAwUAJAqtFDANBgkqhkiG9w0BAQsFAAOCAQEABlAk
wU8URWALoLx0lm7iUwYqIg8jpAkSgMtKQJ0zUOg48COoKTNzGu1byKbiGVmKrDoP
T+52iZ81ItNGgG1wODtyBtI0hIZVor3XN9Sg4w4Ov2hUELIpaGNI3ZXWJd6mF3qY
iv+3J2YzIgUDp5lbMNCp4uRY0ivkDN4+gzov3FOD8tfTB5z9nVnGvMSlte+5X9ZS
a+uiS9XsihXPeDmhn7td/lkVTNPe0Ji48rcJADOMwxwkigR/28xmtr8Em74IvYJ1
40BKgi65jeJU/UxJvZtaPX7gkBigGzWhG0S+3hp0GpEk3z/eOMuoaxpPZfCyVWIw
wESDeTveVn6OSgSezQ==
-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:11 2026 by rpki-client