Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145129.roa
File: AS145129.roa (raw, json)
Hash identifier: nSJfQEY/l1SbUOvGxuYKLGJHnmIUfw35qvqFRZwCZms=
Subject key identifier: 60:31:24:41:E0:54:EA:F2:AF:A3:69:27:9D:A5:EF:F1:FD:4F:74:C2
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 74A93103137C6988FC140ECDA6F352268EDF1D25
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145129.roa
Signing time: Mon 25 May 2026 03:19:16 +0000
ROA not before: Mon 25 May 2026 03:14:16 +0000
ROA not after: Mon 24 May 2027 03:19:16 +0000
asID: 145129
IP address blocks: 240a:a9af::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:a9:31:03:13:7c:69:88:fc:14:0e:cd:a6:f3:52:26:8e:df:1d:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:16 2026 GMT
Not After : May 24 03:19:16 2027 GMT
Subject: CN=60312441E054EAF2AFA369279DA5EFF1FD4F74C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:28:67:e7:76:a7:ae:9e:88:63:30:99:25:d1:
32:c0:99:db:12:ff:ee:a4:09:a2:12:0c:08:f5:39:
25:45:9a:53:d7:6a:52:18:51:e6:19:81:b2:d1:55:
dd:9d:50:fb:64:40:69:a5:b5:29:bd:3e:dc:61:44:
39:d0:36:24:20:97:76:3b:32:56:d5:44:df:6f:ab:
0e:30:43:63:a8:f2:14:a9:2c:34:f7:be:3d:53:68:
c3:f5:c3:4b:9c:76:65:6b:58:96:92:b9:04:83:da:
e9:dd:b8:b7:27:54:da:d1:30:0a:43:cb:f9:0f:c8:
10:4f:9f:69:b5:ad:62:46:37:10:9c:db:0c:40:ea:
ae:44:41:e4:72:51:e2:e9:4c:21:8f:1f:60:d4:e6:
e0:de:22:89:1e:e7:2c:6f:81:ca:d0:2e:fa:9f:c9:
77:e4:2b:6a:d2:53:c5:71:9a:d7:a2:06:93:c9:f0:
dc:3c:51:7c:07:bb:d2:f3:3c:15:05:cd:c1:e5:c1:
49:0e:c0:01:9a:9e:62:10:08:52:9b:07:28:35:9f:
f5:4b:7e:48:f4:8f:c9:a1:5a:91:cd:0a:d8:1a:b8:
d2:3e:1d:66:f2:5d:7a:5d:8e:dd:8e:07:b2:1c:3e:
28:15:07:ae:83:1e:97:9c:c4:60:02:3b:9b:1a:2b:
8e:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:31:24:41:E0:54:EA:F2:AF:A3:69:27:9D:A5:EF:F1:FD:4F:74:C2
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145129.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:a9af::/32
Signature Algorithm: sha256WithRSAEncryption
84:33:43:73:23:a0:5a:5b:64:d3:cf:bc:d0:21:22:97:e4:c3:
dc:f2:9d:1c:ab:d8:8b:30:8e:9d:2c:4d:20:f5:34:8b:d4:e6:
60:a1:7c:c8:be:31:e3:4c:cc:16:d2:d4:a2:15:a5:54:ef:11:
e9:5d:38:27:45:97:de:6d:dd:35:4d:85:be:d2:6d:e6:c7:5f:
9e:41:73:31:a9:ac:7d:a2:af:e6:a8:47:d5:c2:c8:f5:01:46:
69:92:72:73:1b:7c:3a:1a:fc:ec:1a:71:7d:68:23:76:86:cd:
50:1c:01:35:d9:d7:60:df:c6:6a:cd:f8:09:05:0c:63:37:65:
2f:c1:90:a3:73:bb:ae:9b:b8:22:c3:5d:42:01:be:29:dc:5a:
bc:5a:f0:ee:a7:25:64:e5:f7:b2:fa:fe:62:5d:68:22:2b:3e:
c3:4c:cb:a8:7d:18:17:81:dd:6d:98:fe:d9:dd:8c:3d:a5:82:
a1:b7:bd:15:37:a5:9c:8a:a4:39:87:90:8d:00:e8:14:19:83:
e7:d5:bd:b8:fc:c7:49:81:6f:6f:01:54:eb:7b:0b:bf:15:05:
08:bf:20:be:fb:c4:fa:33:f0:fa:62:fb:b7:36:f8:00:70:d1:
5c:80:fa:e4:14:d1:cd:a1:47:b3:00:ff:cc:7c:6b:c6:22:c9:
28:47:f1:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:42:03 2026 by rpki-client