Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146021.roa
File: AS146021.roa (raw, json)
Hash identifier: cMbD8TZ+/V5UQntzVllttJXpT1lX3BdHtM+9iVuhcO4=
Subject key identifier: CF:A2:99:26:70:CE:71:E1:03:ED:B4:EB:2A:02:CD:7B:F2:53:3F:4D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6B960E0866B9400A220C38EA7CD4682518EB3BF0
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146021.roa
Signing time: Mon 25 May 2026 01:51:03 +0000
ROA not before: Mon 25 May 2026 01:46:03 +0000
ROA not after: Mon 24 May 2027 01:51:03 +0000
asID: 146021
IP address blocks: 240a:ad2b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6b:96:0e:08:66:b9:40:0a:22:0c:38:ea:7c:d4:68:25:18:eb:3b:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:46:03 2026 GMT
Not After : May 24 01:51:03 2027 GMT
Subject: CN=CFA2992670CE71E103EDB4EB2A02CD7BF2533F4D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8d:da:57:d3:85:55:33:e1:28:95:c1:78:ca:
18:7c:a6:15:56:8f:c8:37:f4:05:26:2d:6e:ca:57:
3c:7a:76:3a:fd:a7:43:f3:a7:41:bb:6b:36:26:dd:
7c:af:a1:d3:f3:cf:37:aa:ae:5a:6d:f7:e7:4e:46:
b8:2d:88:85:4f:48:b4:2e:91:fa:49:2d:75:6e:fd:
fc:fd:b7:f9:35:9c:4e:5b:87:2a:9b:24:4a:49:7e:
05:8b:74:1d:df:19:8c:c0:c4:a3:aa:a2:ff:0e:e8:
cc:6b:ab:ab:aa:52:0f:bd:b1:2d:8c:c6:aa:ce:d7:
4b:9c:89:28:38:9f:2e:a7:78:46:1f:8c:15:cd:e2:
c9:69:4e:2a:6d:fa:31:34:93:0d:bf:5f:e6:11:1c:
b8:28:43:00:35:4e:ec:9f:e9:12:47:e4:6e:34:c6:
41:2b:58:67:87:f1:57:26:b3:d6:59:42:8d:dd:1e:
61:e4:2f:05:47:4b:c5:b1:7b:4b:f9:b1:ae:66:a2:
c5:49:03:f2:3d:b3:b4:13:d5:db:00:47:05:62:c9:
6c:4a:92:5d:60:73:a0:fb:41:05:c9:38:f9:14:aa:
1f:c5:c4:a3:35:46:2e:12:d7:06:54:a6:7b:1e:91:
ee:25:f9:a9:1f:ee:a6:bb:b5:e4:0b:60:78:8a:b1:
d3:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:A2:99:26:70:CE:71:E1:03:ED:B4:EB:2A:02:CD:7B:F2:53:3F:4D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146021.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ad2b::/32
Signature Algorithm: sha256WithRSAEncryption
82:cd:fd:f1:80:60:33:5a:8b:fe:a7:00:0d:f1:f1:fc:91:bf:
0d:fa:83:92:ac:7c:12:44:8a:f7:0f:2c:e8:f6:47:1e:b7:e5:
bf:9d:32:43:c6:89:72:cf:77:ab:72:98:eb:54:30:5a:bf:13:
ac:84:9c:6a:17:0a:30:85:9a:ed:b0:30:0d:c3:1d:af:4c:fa:
04:90:75:2b:86:82:82:15:c5:bd:80:8f:c0:00:f5:da:4a:67:
3d:68:10:eb:df:2a:44:0b:f8:49:e7:52:e9:be:34:b0:fe:e4:
eb:8c:b2:c7:f1:4c:75:d8:78:2a:d7:9e:b2:41:71:14:46:f6:
d6:4a:3c:fc:57:76:4c:69:e3:5c:0f:36:b2:90:ce:87:0a:1d:
3f:d7:a4:96:ff:38:2a:87:f7:57:88:38:5d:bb:e1:59:1a:04:
e5:a6:3e:41:5c:38:d8:6d:7d:c5:39:1c:22:ec:f6:85:e5:e7:
8c:8b:26:05:41:89:37:94:9e:ff:b6:03:7b:f3:a7:86:8a:50:
6e:b4:97:aa:79:b8:81:7a:c7:dc:ac:42:db:09:bf:32:94:5a:
34:69:8e:b3:91:53:b1:8d:71:6b:73:72:b9:a3:08:2d:ee:63:
ce:ec:5c:f7:11:e7:93:ff:bd:71:92:37:cd:07:45:40:39:67:
e0:f1:99:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 11:24:30 2026 by rpki-client