Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146009.roa
File: AS146009.roa (raw, json)
Hash identifier: r8zmIoI6aNBV7o3qX6uRtpEmPaUx1JSTogKLQuZcSuo=
Subject key identifier: 91:74:A7:06:84:FA:9C:CE:DB:F2:3C:45:DD:61:30:ED:D8:B4:B9:CF
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 34FEE598ECB9FD6682F2D0C449A4FEBDDED1F39A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146009.roa
Signing time: Tue 26 May 2026 06:12:53 +0000
ROA not before: Tue 26 May 2026 06:07:53 +0000
ROA not after: Tue 25 May 2027 06:12:53 +0000
asID: 146009
IP address blocks: 240a:ad1f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:fe:e5:98:ec:b9:fd:66:82:f2:d0:c4:49:a4:fe:bd:de:d1:f3:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:07:53 2026 GMT
Not After : May 25 06:12:53 2027 GMT
Subject: CN=9174A70684FA9CCEDBF23C45DD6130EDD8B4B9CF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d0:cb:c5:7d:2e:7e:08:8f:da:26:a4:8c:bd:
b7:21:c3:84:76:73:e7:2a:cf:7e:da:7b:7e:63:03:
bd:00:a1:4b:96:80:ab:5f:e7:78:6e:5d:17:a9:47:
54:d6:95:a5:bb:73:ed:5d:b7:57:68:a3:72:db:7a:
dc:b1:1e:85:b0:d0:65:ca:34:c1:ac:b9:92:8e:87:
fa:91:42:53:ce:2c:8c:8a:83:a1:00:42:56:2c:8a:
cf:35:b4:dd:b7:e8:6d:3d:21:ca:ca:4c:ad:74:8b:
f4:3d:91:b2:fb:50:db:02:59:5d:a6:f9:67:2e:86:
11:6d:46:5c:23:6c:da:8b:42:c1:10:9b:58:5f:7d:
ef:86:95:82:e0:f0:61:4a:a2:17:d3:51:e4:f7:f8:
22:a3:50:10:2e:80:fa:7c:19:81:ce:98:91:8b:c3:
44:e3:ee:6c:75:17:c5:2b:26:65:3c:86:39:71:43:
12:a5:fa:22:b0:c8:dc:a9:ab:60:53:4f:3a:d2:bc:
c7:b3:cd:b5:9c:85:79:03:fd:45:98:dc:5c:ea:a4:
82:20:ee:1a:52:a1:3e:78:74:16:73:17:43:47:00:
c1:f6:1e:de:20:c5:e8:0b:8f:33:f2:17:24:74:62:
d2:61:25:f2:99:2f:58:8d:1a:00:13:ef:8a:4f:8f:
36:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:74:A7:06:84:FA:9C:CE:DB:F2:3C:45:DD:61:30:ED:D8:B4:B9:CF
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146009.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ad1f::/32
Signature Algorithm: sha256WithRSAEncryption
38:88:4c:bc:28:d5:e1:b3:5b:55:c1:ee:3b:d9:01:fd:da:af:
23:6e:7f:d6:26:97:ef:39:29:68:df:53:1e:ac:94:cb:74:1f:
18:21:d3:bb:21:4e:2c:37:86:72:c6:0a:e4:17:04:86:9f:5c:
8d:09:78:c1:37:fb:12:1d:ff:4f:f3:83:93:c1:cc:77:b2:ee:
da:88:30:98:1e:c3:62:dd:d8:64:b1:3b:9e:08:a0:f7:8c:32:
c7:0b:7f:0b:11:40:67:da:d8:43:78:b4:30:23:09:ee:9d:f3:
ba:28:e6:cd:cd:1b:37:80:d5:80:67:b9:45:3a:8d:0d:4c:b6:
ed:3c:0d:b4:bd:38:4a:23:ba:36:33:40:a8:0a:3b:e5:c7:92:
42:ef:f5:1f:65:82:b0:c0:4b:a4:45:01:16:51:9d:a7:36:a3:
a0:2e:2e:c5:cc:4c:3a:83:0f:d9:c0:a0:be:83:55:5f:15:65:
15:90:b6:07:cf:c8:ad:c8:23:b5:3b:2f:15:f7:9f:02:24:e6:
fc:13:57:09:7f:8b:cd:0b:08:3b:89:5f:f3:36:ef:24:41:21:
00:55:05:be:cb:8d:53:43:c3:89:46:b5:d5:92:96:a7:fd:16:
62:79:3a:73:57:40:b5:f9:f6:fa:17:7a:39:9e:ed:91:59:aa:
78:ea:a0:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:15 2026 by rpki-client