Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146000.roa
File: AS146000.roa (raw, json)
Hash identifier: /4iIGAgrHQ6LYwLClBi6sRkI7Dgi9in+c1FN9BSuzk0=
Subject key identifier: D6:C8:26:F6:3E:5D:D1:85:27:DB:3A:67:12:C7:22:49:4F:EF:BD:10
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4ABDB01ADD310229249C04F9CA70AF2194B6D814
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146000.roa
Signing time: Fri 22 May 2026 07:40:45 +0000
ROA not before: Fri 22 May 2026 07:35:45 +0000
ROA not after: Fri 21 May 2027 07:40:45 +0000
asID: 146000
IP address blocks: 240a:ad16::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:bd:b0:1a:dd:31:02:29:24:9c:04:f9:ca:70:af:21:94:b6:d8:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:35:45 2026 GMT
Not After : May 21 07:40:45 2027 GMT
Subject: CN=D6C826F63E5DD18527DB3A6712C722494FEFBD10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:d5:9e:15:f7:58:75:10:e6:ff:1b:64:13:c4:
b1:5d:4c:e9:ca:20:18:5c:2c:b8:ef:32:f4:92:28:
47:2f:05:90:c0:8e:a8:6f:79:f0:61:dc:45:40:94:
29:bd:93:e6:72:25:36:18:5e:8e:f7:f8:e2:24:61:
18:33:f6:4c:fa:99:51:af:b8:81:55:61:87:3e:ff:
b0:f2:15:4e:f8:15:24:ba:29:61:0d:4d:3c:6f:6f:
e2:a7:93:ba:ed:0f:6f:1b:ea:d8:42:bb:c4:12:3d:
00:80:ac:4e:65:37:1e:d3:7a:d2:4b:26:99:8e:65:
82:68:0b:cc:03:82:53:b7:cc:94:4e:be:ba:46:38:
aa:35:16:50:29:07:d4:d2:bc:b3:7a:f0:af:b6:1b:
86:88:26:77:dd:8e:3b:fe:19:8d:0f:d8:f6:87:89:
4a:26:15:19:30:e5:80:93:c7:f6:0b:40:20:07:fd:
7b:90:6c:25:49:e3:20:e3:41:2f:b8:0a:f6:c8:86:
86:42:55:0e:63:59:b0:73:9f:d9:6c:c8:59:a9:25:
92:12:b9:39:e9:ba:04:3f:a8:71:06:78:fe:24:17:
01:5e:0b:cb:d3:ee:43:c1:da:09:ac:e2:16:9a:8d:
9c:44:c2:bd:9c:1f:c5:74:fa:ef:f6:24:47:ee:fd:
47:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:C8:26:F6:3E:5D:D1:85:27:DB:3A:67:12:C7:22:49:4F:EF:BD:10
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146000.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ad16::/32
Signature Algorithm: sha256WithRSAEncryption
2d:40:85:81:03:0f:8e:15:68:d3:c2:85:f4:a4:0c:60:49:b5:
64:f5:8c:61:0c:db:83:ee:e7:7d:6a:f9:bc:d9:bf:f3:b8:22:
15:a1:92:cf:c4:97:14:f1:85:35:7b:3e:08:40:f4:82:97:3f:
b0:ec:b0:26:20:08:68:1a:0f:0b:a5:12:86:ae:f5:9f:90:d9:
5a:be:8d:90:67:a2:d8:d4:18:98:b1:73:52:2a:9c:e9:3d:70:
5d:39:05:43:1d:18:2a:1d:e5:4f:83:c3:3b:e2:ef:95:18:f3:
1e:06:9d:c9:37:1c:41:a2:b7:64:08:f4:1e:1c:e0:c3:cb:89:
18:a0:b1:89:e1:82:f4:8c:0a:76:54:d6:10:c5:98:9e:5c:e2:
c2:e1:e8:34:46:96:81:6a:e5:fe:2b:51:85:e4:27:5a:7b:c0:
e0:59:e1:25:cd:21:34:fe:2d:33:f1:cc:08:ce:50:4e:fa:c1:
fb:fb:9c:a3:a8:87:44:35:fd:ca:88:b6:4d:8a:9b:5f:bf:21:
08:d1:27:1d:57:de:6d:21:57:d6:e4:2c:17:e1:16:99:65:51:
0a:4b:5a:57:95:26:aa:f7:31:3b:b6:4d:43:34:92:cc:91:91:
5e:6a:13:fc:6b:6c:33:27:9a:30:4c:90:79:84:74:a1:19:83:
df:e8:5e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:11 2026 by rpki-client