Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145029.roa
File: AS145029.roa (raw, json)
Hash identifier: 96WwgEqcg9z8oo4uHAbZCcLOCTCuVdH76OwLIzN+YHQ=
Subject key identifier: 6D:29:3B:0C:FA:79:0D:86:E5:FE:75:B3:D0:FC:3C:91:57:D4:63:CA
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0C90FF565E4EAF3B42420A433EEC92300334EEF9
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145029.roa
Signing time: Fri 22 May 2026 01:50:10 +0000
ROA not before: Fri 22 May 2026 01:45:10 +0000
ROA not after: Fri 21 May 2027 01:50:10 +0000
asID: 145029
IP address blocks: 240a:a94b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0c:90:ff:56:5e:4e:af:3b:42:42:0a:43:3e:ec:92:30:03:34:ee:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:10 2026 GMT
Not After : May 21 01:50:10 2027 GMT
Subject: CN=6D293B0CFA790D86E5FE75B3D0FC3C9157D463CA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1e:0f:41:d3:b2:c7:db:1f:aa:4a:a8:80:85:
1e:d6:52:b2:ea:bc:54:71:7e:af:46:66:4f:71:10:
4d:55:06:98:2e:73:20:da:64:71:98:6f:6e:d0:58:
fa:ce:10:bd:f5:1b:3d:bb:24:da:e2:74:df:08:34:
4d:6a:4d:32:fc:67:9f:c3:d3:ed:19:56:55:83:d8:
b6:c6:54:81:61:fd:b5:58:d0:1b:b9:df:78:c4:e2:
73:ca:6f:47:64:91:55:f6:6b:a5:51:5e:fd:e2:f8:
81:eb:1a:fa:b4:e5:f7:70:03:14:c9:fb:aa:8f:d7:
b2:51:33:8a:55:de:84:f4:5f:a4:4f:cc:e8:42:0d:
e7:12:47:f0:08:58:cc:e7:a1:15:7c:6d:6f:c6:fc:
2c:58:9b:54:8b:4b:a6:54:7c:8c:56:4d:94:80:dd:
9d:85:e8:b5:72:50:03:d0:49:55:fc:8c:b0:fe:02:
9c:9f:4b:0e:1c:a9:d1:a2:21:23:d7:c8:7f:bb:42:
60:85:19:ed:19:4e:f8:4f:0a:1e:14:fb:81:fc:93:
92:02:5b:f1:d4:56:40:a0:8a:af:66:58:09:ba:a2:
37:28:b9:b3:0f:6a:f6:71:14:8d:73:17:ef:39:c5:
34:35:47:92:92:d8:dd:3a:53:f6:07:73:14:cd:db:
5e:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:29:3B:0C:FA:79:0D:86:E5:FE:75:B3:D0:FC:3C:91:57:D4:63:CA
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145029.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a94b::/32
Signature Algorithm: sha256WithRSAEncryption
45:72:09:44:22:33:3a:9c:9c:28:34:97:4a:bc:57:8b:7c:e4:
66:0e:17:3d:bf:68:3b:4a:ad:d5:2d:d9:61:e8:c6:67:32:e1:
5b:74:42:6b:ad:7c:26:81:b7:e7:24:27:d7:2e:83:86:5f:be:
8e:bb:a3:3c:88:d9:65:0a:4b:20:e9:fa:71:38:6c:d3:b6:1b:
74:a5:f0:5f:23:c0:d6:9b:52:cb:6d:39:99:1a:c3:56:13:3b:
5c:7e:2a:0b:c1:c6:f4:b2:5e:9f:41:f2:bc:7e:f6:cc:d1:ce:
27:39:d2:0b:83:62:91:2c:8e:ac:0a:6e:92:fb:e9:0e:c8:80:
be:38:46:f9:f4:86:a4:6d:cb:7c:7d:81:5f:01:fd:8f:99:20:
a7:80:37:a2:02:4a:34:2e:65:49:de:39:9f:79:1a:1d:98:90:
0e:b8:f7:4e:63:8b:06:45:18:4e:45:a2:50:97:18:ee:51:8d:
57:b0:11:ff:5b:28:14:1b:51:65:a8:0a:89:24:b6:6a:f6:41:
8e:db:ac:1f:8f:ac:ef:24:ac:5b:b6:7f:ea:bc:e5:4f:ca:0e:
6d:1f:b2:95:78:1b:e7:52:ff:a3:44:34:ce:1c:4e:3f:c5:02:
87:36:33:5a:ad:bb:8d:0c:f5:3f:ca:84:6b:2e:67:13:e1:2f:
21:a1:4e:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:17 2026 by rpki-client