Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146032.roa
File: AS146032.roa (raw, json)
Hash identifier: QOZEGdSLm0DvLpYt+EjYPDHEO2IUo3OrH+YzLnFRSuQ=
Subject key identifier: 0E:78:0B:B7:69:A1:39:4D:0E:46:54:39:2A:E6:4E:03:E4:67:09:92
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 707562D63BCD347BCA7A556CED6AA1590217F238
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146032.roa
Signing time: Mon 25 May 2026 02:22:38 +0000
ROA not before: Mon 25 May 2026 02:17:38 +0000
ROA not after: Mon 24 May 2027 02:22:38 +0000
asID: 146032
IP address blocks: 240a:ad36::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:75:62:d6:3b:cd:34:7b:ca:7a:55:6c:ed:6a:a1:59:02:17:f2:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:38 2026 GMT
Not After : May 24 02:22:38 2027 GMT
Subject: CN=0E780BB769A1394D0E4654392AE64E03E4670992
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a8:4b:9b:9e:6e:4a:f5:ab:b1:0c:23:4d:f1:
c7:02:15:19:be:44:26:db:9d:7b:67:a0:98:f7:84:
a8:76:ad:40:c5:5a:a4:ea:56:fd:aa:06:ba:16:11:
f6:8f:88:00:f3:30:2d:9c:9a:b8:39:a1:48:f0:d4:
29:c3:3a:dc:52:80:99:76:50:ee:23:1d:47:1f:df:
62:f2:f3:28:b8:09:3c:87:00:0b:49:b4:05:0f:9b:
8c:e0:ff:dc:ab:08:72:fb:a5:d1:0b:b9:d4:95:e4:
de:66:c6:4c:b1:08:6e:6a:50:84:b5:3d:2a:aa:f5:
aa:78:08:79:7a:58:0b:d7:7c:2e:59:45:2e:a7:48:
3f:95:b5:d5:85:e4:c6:b1:08:a9:0b:71:08:5d:90:
87:43:9c:41:60:2c:bc:99:7d:16:6c:cf:5b:37:1c:
48:f7:17:fb:21:a3:9b:f7:08:81:52:94:09:75:99:
54:b3:43:a7:f3:82:e0:80:57:cd:be:5f:56:26:07:
36:27:7c:f0:ee:79:32:99:b8:2e:eb:07:9e:7c:ae:
e7:35:3e:67:df:54:35:5f:ff:26:a7:41:bf:15:61:
55:50:b6:93:10:43:b7:ae:23:12:77:fb:c3:df:53:
41:3b:a7:b4:d5:97:2e:86:9f:34:60:94:31:20:9f:
2e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:78:0B:B7:69:A1:39:4D:0E:46:54:39:2A:E6:4E:03:E4:67:09:92
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146032.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ad36::/32
Signature Algorithm: sha256WithRSAEncryption
5c:9b:c9:e1:e8:c6:93:1d:14:7f:42:c3:35:42:c5:01:ce:d4:
db:7f:ea:d3:3a:32:0b:1c:f1:14:5c:d7:ba:54:b2:f3:b9:27:
0b:56:bb:c2:d6:40:51:93:45:e4:86:ee:59:5a:cb:2c:15:10:
f8:56:c7:73:18:74:60:7b:80:c9:91:26:e0:b2:2b:0c:b1:9a:
4f:3d:5b:e9:a4:2f:d6:1c:85:a8:a9:19:69:56:76:95:1b:22:
db:e7:19:39:82:5c:27:42:1b:22:6f:33:04:49:9b:f2:44:83:
62:38:44:12:b0:4b:a3:85:3e:a9:27:6f:f1:4d:52:06:ec:89:
c1:72:6e:5e:77:57:4a:eb:ff:8d:02:8b:65:7f:a7:7f:65:48:
77:b8:80:ec:85:64:f7:2f:d0:a8:0d:18:a7:e3:7e:10:9e:c8:
be:24:bc:27:ac:62:04:3f:b1:c2:83:ba:13:7a:bc:dd:7e:f4:
eb:6b:68:45:fd:a4:43:b2:26:1d:50:20:09:96:e1:49:99:d5:
6e:9f:5e:ac:ff:6a:73:58:b0:16:77:a8:46:d6:c0:37:ef:9e:
65:fe:80:18:79:f1:fc:80:d8:62:8c:85:b3:76:1d:88:2a:00:
c1:a5:96:ca:1a:a8:f9:1c:c2:b3:93:3f:c3:68:c6:0e:4c:a3:
17:3b:7e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:21 2026 by rpki-client