Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146020.roa
File: AS146020.roa (raw, json)
Hash identifier: aPeizJ3j2x3/GoOf8dND+twFeNJ+m+gVyDiv/39TuK8=
Subject key identifier: FA:04:16:B6:19:FA:BE:0E:B8:FB:FB:0D:3B:D0:21:70:CE:F1:5A:4E
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7BDEFC2445AEF229E7395703C9A65EC6EAF5E7C4
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146020.roa
Signing time: Fri 22 May 2026 04:27:18 +0000
ROA not before: Fri 22 May 2026 04:22:18 +0000
ROA not after: Fri 21 May 2027 04:27:18 +0000
asID: 146020
IP address blocks: 240a:ad2a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:de:fc:24:45:ae:f2:29:e7:39:57:03:c9:a6:5e:c6:ea:f5:e7:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:22:18 2026 GMT
Not After : May 21 04:27:18 2027 GMT
Subject: CN=FA0416B619FABE0EB8FBFB0D3BD02170CEF15A4E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:14:58:66:9c:5f:2b:76:e0:af:a4:23:f3:68:
56:bc:0a:d3:bf:82:cc:59:2b:fe:2f:df:b1:6a:e8:
e1:c9:e0:eb:bd:5c:c1:f3:68:71:74:38:5d:eb:c3:
6a:b1:83:1d:8d:8c:3c:be:2f:0d:b5:fe:49:fc:17:
a6:ea:64:4e:cc:74:e6:14:29:af:9a:62:ad:3b:42:
68:a1:05:b7:d8:ca:27:2f:8c:4c:65:30:c0:74:2a:
a6:fc:10:92:02:6d:a4:35:cf:59:2c:35:f4:25:e8:
2f:50:0e:87:5a:b6:c0:23:1f:a5:13:a4:be:f7:87:
1f:d7:a0:6d:b2:1f:d4:73:6d:0c:30:d5:79:0d:4d:
3a:e8:e8:16:2f:dd:ea:fa:51:a4:2b:fe:aa:c2:b9:
d9:29:f9:e9:f5:3d:08:16:bb:05:7b:9e:da:e4:cd:
01:dc:cc:45:79:bb:05:28:54:5e:e2:eb:35:07:e5:
07:48:5d:0f:68:87:43:2e:f0:10:b8:51:1e:7e:4a:
47:c7:72:b6:c3:1f:e3:6b:13:50:13:2e:99:80:84:
dd:0e:b4:c8:64:11:7a:0e:b0:d7:06:34:3c:61:ee:
f8:d9:81:25:6d:01:8d:8c:23:40:2a:91:e7:a8:1d:
f3:31:a6:4f:03:ac:83:e2:d5:07:e4:fd:15:ef:7b:
35:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:04:16:B6:19:FA:BE:0E:B8:FB:FB:0D:3B:D0:21:70:CE:F1:5A:4E
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146020.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ad2a::/32
Signature Algorithm: sha256WithRSAEncryption
36:73:34:ad:b5:e3:36:35:95:d9:6d:06:51:63:24:cc:9f:83:
90:e5:26:84:d2:ea:7e:f9:e4:12:ae:48:b1:a2:9d:58:dc:f1:
4c:af:91:37:23:fb:76:17:73:4b:a4:02:83:54:80:5e:37:f3:
2a:cb:9f:df:70:b1:3a:c9:ec:20:c7:44:49:cb:e4:53:73:77:
ba:a8:d2:5d:57:55:b8:b9:9a:51:69:2f:43:06:a4:73:d0:02:
b6:b9:28:c8:01:79:40:18:76:40:71:82:7e:73:72:31:95:fc:
1e:ea:4e:0a:da:de:bd:d8:a4:a9:1b:6a:21:26:7f:4a:37:72:
ae:92:ca:0a:f1:b9:10:33:40:45:73:62:0d:bc:c3:d7:5c:d7:
3e:3f:99:a3:45:c8:56:d6:c2:93:29:65:49:65:2d:89:df:24:
10:e8:a7:60:4c:bf:6c:53:76:03:90:93:35:62:f5:cb:ab:bf:
38:31:dc:c1:15:45:94:6a:31:57:c7:c1:c6:90:e1:75:c6:56:
fb:8e:c2:e2:af:b7:1d:5b:c0:db:ee:48:a6:95:28:be:ec:ec:
97:3b:f1:cf:6f:da:95:ff:34:d3:a4:16:82:fb:20:08:72:e5:
3a:63:b3:bb:ef:15:f0:ad:ba:18:b2:6f:2f:e9:36:cc:db:2d:
e1:19:60:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:35 2026 by rpki-client