Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146037.roa
File: AS146037.roa (raw, json)
Hash identifier: yZbHWz/VwqPec7iwIfJ2M5RMZG4YbXXZWEj1fbNTFWs=
Subject key identifier: E1:BD:82:BE:EA:E6:93:F9:9C:82:B9:52:21:DA:85:11:58:E0:2F:74
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 66ACFC800D98BDD3F84FF8C8903CD331755E5E6D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146037.roa
Signing time: Fri 22 May 2026 06:58:41 +0000
ROA not before: Fri 22 May 2026 06:53:41 +0000
ROA not after: Fri 21 May 2027 06:58:41 +0000
asID: 146037
IP address blocks: 240a:ad3b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:ac:fc:80:0d:98:bd:d3:f8:4f:f8:c8:90:3c:d3:31:75:5e:5e:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:41 2026 GMT
Not After : May 21 06:58:41 2027 GMT
Subject: CN=E1BD82BEEAE693F99C82B95221DA851158E02F74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f1:b2:cf:5e:59:50:32:d1:f8:96:40:8a:ef:
8a:d5:03:ba:cf:7a:5b:cf:c1:9e:4f:59:6e:2a:9f:
59:32:38:92:95:58:c2:67:f6:3c:ce:3e:a5:c1:73:
b8:fe:90:a5:e4:03:b5:4f:a3:55:54:9e:00:e9:89:
8b:ad:e3:7a:04:76:f5:e9:27:14:2f:ef:94:81:47:
f1:67:75:af:a5:90:f9:1c:9c:28:d8:02:97:cd:6e:
ad:af:e4:d4:38:34:ff:34:4b:d6:00:4c:ec:9a:6a:
ab:84:69:e2:1d:f4:a7:6c:14:42:0c:f2:fc:3b:cc:
89:69:4b:38:e4:9e:dd:ca:62:eb:09:f1:7f:44:9b:
2c:9f:39:b0:11:7a:ed:b5:8d:93:ab:d6:e2:92:08:
20:1c:a7:58:c7:d5:32:33:20:58:3f:1d:59:ce:9d:
0e:9c:b8:ca:6a:6a:59:c2:17:76:f5:c8:e3:da:24:
66:67:e5:62:7e:ed:ee:c3:ed:a6:d8:17:80:90:13:
be:7a:e0:4c:28:2d:34:23:ab:c3:cc:a4:73:41:ee:
45:fe:7d:f0:46:aa:c0:ee:8e:0c:f1:bd:31:f6:9a:
3a:e4:78:6c:d5:bf:bf:9b:28:b7:f0:67:64:a1:f8:
3e:c8:f1:1b:35:b8:0f:3c:4a:6b:cc:39:13:4b:f3:
36:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:BD:82:BE:EA:E6:93:F9:9C:82:B9:52:21:DA:85:11:58:E0:2F:74
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146037.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ad3b::/32
Signature Algorithm: sha256WithRSAEncryption
68:b0:73:11:47:0e:a9:3d:f0:05:bb:b6:be:84:58:02:f3:15:
a4:46:2c:63:dc:a5:c4:57:fa:3b:9e:28:af:c6:25:37:32:86:
14:ac:04:24:8f:e2:49:78:36:b0:74:44:f4:2c:62:6e:39:e8:
14:4e:4f:7e:a9:e2:50:46:70:67:51:03:17:38:7b:d2:8a:8c:
cc:e4:6e:1b:6b:fe:45:25:a4:c3:18:a1:0a:8f:ea:c5:54:f6:
01:bd:63:98:f2:91:dd:88:4b:e5:fd:b0:b7:af:fe:f0:6c:41:
2c:87:6f:4d:41:bd:ac:b0:74:b4:32:09:9f:08:6e:80:09:d9:
6a:c4:ea:66:b4:56:de:10:f9:86:4b:3c:73:4a:4d:3c:5e:4d:
70:40:47:ee:83:29:b6:30:c0:6a:37:82:13:a6:83:ea:9c:a7:
50:b6:16:d4:e1:fc:a3:b9:6b:d2:a3:b8:ee:33:2a:bd:33:10:
43:b0:60:0a:d9:3d:8a:b0:f8:2e:af:21:47:3e:8a:f5:c6:a6:
47:2b:e9:68:ab:65:37:62:3c:7e:38:6f:4a:41:ae:ed:50:dd:
d7:29:bc:1c:95:70:15:67:2c:cc:4b:34:9d:73:64:0c:72:0d:
b1:9c:2e:c5:99:09:9b:27:07:8d:75:78:0d:a9:59:6c:cf:37:
03:6f:0d:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:07 2026 by rpki-client