Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146017.roa
File: AS146017.roa (raw, json)
Hash identifier: BTuOm038p7U7wqglPq+6S06/LIBZqHRsl54yL+P0EYk=
Subject key identifier: D7:69:37:8D:62:09:F0:CE:92:5A:7D:94:16:17:CF:9B:C0:D6:42:D7
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4B8CE5A2E1F72EF2E40570F9A2A0770325EE4194
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146017.roa
Signing time: Fri 22 May 2026 07:32:07 +0000
ROA not before: Fri 22 May 2026 07:27:07 +0000
ROA not after: Fri 21 May 2027 07:32:07 +0000
asID: 146017
IP address blocks: 240a:ad27::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:8c:e5:a2:e1:f7:2e:f2:e4:05:70:f9:a2:a0:77:03:25:ee:41:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:27:07 2026 GMT
Not After : May 21 07:32:07 2027 GMT
Subject: CN=D769378D6209F0CE925A7D941617CF9BC0D642D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:6c:43:90:e7:c4:02:03:30:3a:e1:df:fe:50:
74:ae:59:bc:11:dc:24:5d:d8:4a:1c:03:dd:36:73:
cb:c6:7e:c2:82:25:e0:b3:2b:56:f7:f9:51:55:7f:
b0:ea:a8:b4:cc:5d:20:8f:d4:eb:43:f8:22:b5:d0:
1e:55:74:67:2c:91:f6:a3:48:77:9f:fd:6e:48:98:
7c:11:f1:86:cb:91:57:22:9d:5d:35:5b:8a:a9:a4:
dc:cc:1a:5d:df:bf:1b:e1:be:6d:3b:8c:10:42:f8:
8e:25:06:40:ac:01:28:ee:5b:51:1a:1c:2f:5f:f1:
5c:ea:65:b4:ad:93:ea:ee:e5:de:61:b6:bd:85:b0:
4f:d9:ef:0b:de:96:28:74:33:c8:d4:56:7b:20:b6:
4c:11:97:b3:43:86:5d:28:d2:f6:af:ed:8b:86:7c:
e8:d1:52:21:3c:aa:57:9c:06:90:6b:66:bd:fc:02:
fa:d5:95:ec:ef:30:af:00:cb:ef:ef:b9:f1:83:05:
f5:56:d3:91:88:c8:fb:c9:8a:47:3c:f7:da:23:45:
16:49:a6:e1:1d:ce:92:8a:89:ed:d7:9b:30:d8:0c:
ee:88:db:aa:0c:a8:65:75:56:47:98:dc:9f:1e:97:
5a:79:aa:0e:20:ea:5c:87:67:9c:5c:84:a8:4f:a1:
49:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:69:37:8D:62:09:F0:CE:92:5A:7D:94:16:17:CF:9B:C0:D6:42:D7
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146017.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ad27::/32
Signature Algorithm: sha256WithRSAEncryption
55:36:28:7e:2e:6a:bd:24:9c:68:3a:e6:73:4e:b2:36:ba:3e:
ec:ed:68:d6:8c:a7:34:f2:10:8c:74:53:73:a5:5e:24:73:29:
0a:1c:ea:9f:76:55:3c:25:40:d6:6d:ac:90:7e:bc:48:55:42:
ae:d1:44:8e:f5:9e:5c:63:a9:e5:43:ad:07:8d:33:24:40:77:
f5:db:c6:e3:0e:3f:67:73:e5:59:c4:a0:6f:a2:72:d6:27:fd:
7d:c8:a2:fd:42:2a:38:f3:56:d6:26:93:d1:8b:40:ca:44:f7:
71:24:16:59:ea:b0:2e:a6:cb:77:fe:d9:12:9f:c7:b6:7b:cb:
03:a5:34:21:35:29:9d:40:a5:ce:9f:2a:24:09:51:83:09:17:
4c:12:de:81:c7:b8:a9:c9:94:92:5b:64:19:90:d0:c3:7c:d0:
c2:f4:f1:b8:87:0e:8d:10:b4:14:2a:3c:67:3d:05:f6:7e:75:
ef:f1:1d:8e:f7:a8:c1:32:db:d6:0c:21:a5:e5:86:08:18:a7:
03:71:f4:f2:36:a2:7f:1a:79:64:25:10:af:aa:4d:89:3f:57:
a7:3e:3d:fe:f3:f7:04:01:e6:bf:d8:13:2f:96:e7:d7:e5:07:
f7:e7:fa:e0:b5:80:d1:ac:54:c4:7a:80:37:76:72:aa:0e:52:
6e:52:79:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:13 2026 by rpki-client