Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS145936.roa
File: AS145936.roa (raw, json)
Hash identifier: 9IcRLrkz7Mr+9X3GKz3vHSbj5zjs4S+AoTmmxdrkuNs=
Subject key identifier: 29:CB:52:BD:38:B9:71:28:09:DD:CA:6E:13:F8:A5:81:B9:10:00:5C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 15F08823DC04C0E61F3B8D299079ABE996364E5C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145936.roa
Signing time: Fri 22 May 2026 07:08:53 +0000
ROA not before: Fri 22 May 2026 07:03:53 +0000
ROA not after: Fri 21 May 2027 07:08:53 +0000
asID: 145936
IP address blocks: 240a:acd6::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
15:f0:88:23:dc:04:c0:e6:1f:3b:8d:29:90:79:ab:e9:96:36:4e:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:03:53 2026 GMT
Not After : May 21 07:08:53 2027 GMT
Subject: CN=29CB52BD38B9712809DDCA6E13F8A581B910005C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ce:e3:c3:d9:68:bd:e6:b5:3a:77:f6:fa:8f:
80:b0:9a:48:75:00:5c:7f:16:b5:3c:c3:f1:7f:d9:
33:5b:11:64:f5:8f:6d:63:b3:aa:0e:bc:07:88:55:
74:ea:2d:ab:87:85:47:17:fc:6a:06:d3:22:3f:1a:
53:24:9a:ea:a0:be:d0:f7:9e:78:e8:d3:c6:bb:7b:
b6:ce:ec:ba:2f:14:3a:3c:46:cf:a9:6a:00:da:45:
15:2b:ba:47:f4:b4:f3:65:d5:62:ac:e7:fe:ca:a0:
d9:d8:ed:d1:8e:d7:8f:38:cb:09:29:6c:7b:2f:95:
a8:bc:ea:2a:aa:58:60:57:9c:81:e7:9d:ee:48:fd:
81:69:e9:00:50:cb:e4:7a:fb:25:c6:46:2b:f2:91:
34:41:b2:9d:11:f1:5e:2d:bd:2c:a7:3a:8a:0c:c9:
51:a8:4b:c9:52:d8:02:b0:6d:35:e7:cc:44:a4:6e:
73:e1:c4:37:20:ab:57:fd:1c:c6:cf:b8:76:ae:53:
e2:7b:74:ea:5d:69:d2:e5:c8:73:47:20:89:a4:3f:
c5:ad:d3:ab:8b:8e:b0:1d:da:b0:d1:c3:ab:23:40:
04:24:f8:51:97:8a:b5:f5:76:e8:7e:74:73:f7:c8:
72:25:40:9a:7d:d2:1a:f7:18:23:81:a7:ff:21:7d:
89:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:CB:52:BD:38:B9:71:28:09:DD:CA:6E:13:F8:A5:81:B9:10:00:5C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS145936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:acd6::/32
Signature Algorithm: sha256WithRSAEncryption
91:b0:b8:3e:51:f4:4e:41:11:5b:cf:bc:8d:b7:a9:32:5b:14:
9b:13:54:9a:e8:65:c2:24:d0:ba:c3:b7:43:ef:7c:85:dd:01:
bd:43:4b:a0:df:42:66:d3:5e:27:d5:a8:65:aa:7d:84:82:21:
8c:35:5e:ff:47:c7:8f:de:a1:ae:f6:65:06:9c:52:2c:78:6d:
07:d0:7a:84:2d:69:0a:20:d9:9d:0d:1c:e5:d0:5a:c4:41:14:
fa:d1:a7:93:23:07:f7:2e:a9:d2:b9:d6:68:14:a4:9c:52:79:
03:d8:ce:8b:bc:e0:0d:19:76:67:5b:84:d0:36:d4:80:06:18:
2d:b2:0b:e4:52:f2:b9:86:7e:35:03:97:b6:3f:91:b9:eb:22:
c6:76:c1:1e:62:08:e2:48:98:10:ee:eb:2a:c2:d5:87:35:4e:
e3:db:c5:39:9d:44:7c:47:35:66:cc:f4:43:c8:6e:8a:14:4a:
eb:fa:16:e4:ed:e8:4c:fa:41:f9:96:99:52:96:0e:8d:95:f5:
02:b3:94:82:a7:33:fb:e1:64:59:a9:85:69:a7:d8:4c:58:ee:
7a:ea:b1:13:1f:c2:23:86:9d:78:5f:21:ae:05:eb:25:86:96:
d9:48:90:55:e5:a9:0e:20:f3:46:1a:f0:df:e3:52:f6:5e:14:
e4:f1:64:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:17 2026 by rpki-client