Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146011.roa
File: AS146011.roa (raw, json)
Hash identifier: P8E9LejeyCriuWNxr7+gfRWZY64qWno8h6vBHjC/bLw=
Subject key identifier: FC:A5:B5:B3:88:DF:88:49:93:6E:46:25:8A:C9:A7:CE:34:6F:AB:15
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3ABBB1611729A1ECD07F9765338FCE4C88355588
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146011.roa
Signing time: Fri 22 May 2026 06:58:17 +0000
ROA not before: Fri 22 May 2026 06:53:17 +0000
ROA not after: Fri 21 May 2027 06:58:17 +0000
asID: 146011
IP address blocks: 240a:ad21::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:bb:b1:61:17:29:a1:ec:d0:7f:97:65:33:8f:ce:4c:88:35:55:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:17 2026 GMT
Not After : May 21 06:58:17 2027 GMT
Subject: CN=FCA5B5B388DF8849936E46258AC9A7CE346FAB15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:10:96:37:91:83:5c:a9:ca:46:b2:d8:ac:52:
3b:59:59:9a:55:ae:68:c9:af:ca:96:99:a8:65:c4:
a9:da:67:98:f9:f7:c2:04:6e:cd:81:d8:70:c2:0d:
0b:41:14:3d:ae:99:03:4d:1d:1b:85:39:ce:f4:da:
92:6a:60:1d:a4:90:b8:1c:de:70:01:05:ab:f2:25:
31:a8:32:92:f2:65:76:13:70:bf:43:34:ac:75:d4:
3b:eb:d1:ba:7f:bc:c5:32:45:1f:70:0c:0d:8e:e1:
c1:b4:64:5f:bb:14:22:c6:89:50:ba:97:f6:b7:21:
7b:0e:08:a0:1a:50:07:1d:1c:4d:04:4d:a4:73:26:
e0:5b:f5:e1:67:7a:2d:d3:d4:b8:86:1e:8c:c7:e5:
c2:26:df:f2:6d:f5:bb:83:31:c7:62:1b:70:f8:dd:
6d:c5:7f:d9:22:d5:fb:f6:68:da:58:ab:e0:11:cb:
c8:e0:99:9b:75:35:49:65:94:1e:35:b8:90:f9:b6:
92:55:f2:4b:5e:55:a6:86:38:0c:34:f8:a5:61:e9:
33:6f:8b:e5:41:e2:01:ee:ec:fb:5d:48:3a:a6:5f:
6b:2b:02:8f:e5:de:36:2d:ed:a9:7c:13:ce:87:5f:
d2:ab:6a:db:cc:4e:c5:01:1b:bf:de:7b:55:e5:85:
b9:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:A5:B5:B3:88:DF:88:49:93:6E:46:25:8A:C9:A7:CE:34:6F:AB:15
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146011.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ad21::/32
Signature Algorithm: sha256WithRSAEncryption
8f:9e:c9:62:1d:f0:8f:a7:d8:43:21:31:34:96:c7:a0:f2:90:
6a:46:66:59:e5:c0:03:54:fa:6e:a6:12:ed:40:68:9b:d3:89:
88:5f:8f:2d:c1:20:ea:6e:83:2d:a5:72:b8:7c:d4:81:80:64:
db:5c:d5:8e:e1:41:da:c1:f9:03:b3:70:93:5b:d6:29:49:be:
b0:dd:ea:3a:e3:a0:37:ed:f7:29:c2:19:8b:36:41:35:56:71:
c4:67:4c:e8:b8:08:59:fc:94:90:9b:1d:1f:7f:5d:83:03:a7:
b8:d4:b4:35:09:99:34:7e:9e:4a:64:b2:22:5b:85:71:29:a5:
7d:dc:2e:c7:56:49:f6:34:18:43:60:e1:49:b4:d2:49:f2:4d:
fe:47:eb:ed:91:16:45:72:0d:6c:3c:02:62:fa:45:b5:bd:d3:
e3:b5:90:87:12:dc:49:d0:fc:e3:eb:12:5d:b9:88:ae:94:1e:
78:37:fc:e8:67:1e:41:11:3f:57:94:f1:fc:98:36:dd:77:e8:
4b:d0:9d:5c:4f:75:4c:5e:d8:2c:84:58:e8:7f:5e:8b:74:dc:
49:05:3d:26:e6:27:3a:0c:66:26:66:98:6a:27:e6:d4:ac:27:
12:63:13:ff:36:d1:83:59:bc:47:c0:5c:55:7b:47:2e:d4:ce:
63:54:b3:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:22 2026 by rpki-client