Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146036.roa
File: AS146036.roa (raw, json)
Hash identifier: jg7knT12HdX863rj2dSxgOFEfFWnRFurP7L/bWL5w3E=
Subject key identifier: D9:7A:43:7F:53:A9:66:50:BD:A2:EB:54:9F:AC:A1:1A:4C:1E:75:B2
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 658FF55E07C6D91EBF7EA7E4FDA405899F51D072
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146036.roa
Signing time: Mon 25 May 2026 01:51:00 +0000
ROA not before: Mon 25 May 2026 01:46:00 +0000
ROA not after: Mon 24 May 2027 01:51:00 +0000
asID: 146036
IP address blocks: 240a:ad3a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:8f:f5:5e:07:c6:d9:1e:bf:7e:a7:e4:fd:a4:05:89:9f:51:d0:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:46:00 2026 GMT
Not After : May 24 01:51:00 2027 GMT
Subject: CN=D97A437F53A96650BDA2EB549FACA11A4C1E75B2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:86:36:39:21:2f:be:35:51:bc:25:54:f4:67:
74:e9:3b:53:4a:2f:1e:93:d5:2c:e7:64:6e:6e:84:
15:29:2e:d9:b1:44:e2:f4:ac:60:48:75:c6:24:5e:
02:a7:68:5c:24:91:43:c8:1c:40:88:9e:e4:b5:78:
13:b6:f2:90:16:af:02:04:e1:95:2e:f5:5c:58:06:
c6:83:7d:23:57:de:b8:94:e5:ea:05:41:69:5e:bf:
82:c8:66:ec:d9:a9:80:ba:c5:d5:8c:61:fd:c2:57:
af:17:7f:2a:d2:7a:32:e4:f6:31:ac:19:08:48:a9:
33:cb:b2:35:ef:ca:09:a2:eb:84:1c:d9:5f:a4:db:
93:49:27:30:ad:4b:80:6f:2b:61:c5:49:7a:7b:4a:
d0:63:3d:ca:36:7b:88:32:9b:48:cf:3d:a4:77:e5:
a2:ac:4c:69:78:8a:a5:e7:5b:3f:b8:dc:7f:c1:39:
31:11:9c:da:07:a3:4f:12:df:6c:fe:b5:2a:8e:bf:
b7:86:63:62:a3:49:8a:07:1d:f2:45:ba:4d:a6:27:
51:9d:1f:18:e5:9d:92:02:5c:08:16:91:cd:6c:89:
00:ec:a4:a1:7f:35:3c:2d:c4:4f:07:6a:84:d8:bf:
b0:2d:05:c8:9d:17:2b:59:d2:74:3c:89:fe:5e:90:
70:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:7A:43:7F:53:A9:66:50:BD:A2:EB:54:9F:AC:A1:1A:4C:1E:75:B2
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ad3a::/32
Signature Algorithm: sha256WithRSAEncryption
0f:9a:b6:fb:1a:17:cc:f5:f1:20:58:ef:10:2d:d0:bd:9a:ec:
76:b9:5f:42:92:f4:b9:9b:ba:d1:81:ca:a5:96:6a:56:97:c6:
f9:66:e3:5f:8d:7d:ef:ec:08:c5:bb:20:1c:7b:ea:da:69:89:
65:24:54:16:95:62:68:42:a8:d8:ec:fc:dc:31:51:43:3c:5b:
29:16:f0:d5:bc:7d:75:22:46:90:8c:2b:07:2d:be:d1:da:70:
b7:51:1e:03:b4:3f:70:59:60:ce:42:41:0b:a5:30:21:6a:84:
41:88:16:68:ae:3b:d1:8e:37:c1:98:55:76:a3:48:90:26:7e:
03:40:01:13:9f:43:b7:d9:15:58:47:e3:39:ee:05:59:1b:bc:
a2:b1:58:9f:6a:23:ea:04:c5:57:3a:71:7a:aa:58:83:cc:07:
3d:43:2b:5d:9c:89:aa:c3:ac:de:63:04:e6:8e:73:5a:61:a6:
7d:7c:d0:82:5d:f9:00:c0:9f:ea:2a:f1:b8:78:1a:e4:57:f3:
ba:1c:b6:e2:6e:e7:bf:3c:99:07:a7:d6:3e:a8:f9:10:51:31:
d4:e0:48:0d:0a:8c:99:9e:91:5c:c9:f3:28:0a:cd:7e:c0:c0:
5e:c3:8c:e6:a5:53:47:4c:05:10:c4:ab:72:42:6f:d0:93:53:
9b:9d:14:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:43 2026 by rpki-client