Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146042.roa
File: AS146042.roa (raw, json)
Hash identifier: upc6r3M4nHQo6WCKN6cYOn2g3O07wXOF1lSZqESNpxk=
Subject key identifier: 1C:ED:87:30:9A:E7:9A:21:D1:9F:16:AF:E4:03:E6:78:41:9B:1C:C8
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6C870ACBA65CE3A81CFEB613936B46C1B4A431AA
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146042.roa
Signing time: Fri 22 May 2026 06:46:05 +0000
ROA not before: Fri 22 May 2026 06:41:05 +0000
ROA not after: Fri 21 May 2027 06:46:05 +0000
asID: 146042
IP address blocks: 240a:ad40::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:87:0a:cb:a6:5c:e3:a8:1c:fe:b6:13:93:6b:46:c1:b4:a4:31:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:41:05 2026 GMT
Not After : May 21 06:46:05 2027 GMT
Subject: CN=1CED87309AE79A21D19F16AFE403E678419B1CC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:ae:4d:48:61:82:42:ee:68:f3:5c:80:b3:c6:
60:84:fb:f3:4c:cf:a8:e6:4c:8d:90:df:9d:7e:a3:
ac:cf:bf:a0:a8:77:00:0c:db:0b:f0:33:ee:b5:d7:
03:dc:f1:99:8c:52:e9:5d:3a:62:ea:fe:c1:09:7c:
40:f8:f1:a5:2e:51:1e:d9:fe:32:f7:d1:10:bf:00:
ab:30:2c:95:11:dd:f4:06:86:2e:88:f7:53:e1:2a:
aa:d8:47:db:1e:d6:e6:fc:46:db:6e:f7:ba:34:51:
38:30:58:75:cd:0f:f6:c9:d9:a4:d2:6d:ea:a7:08:
74:bd:d1:5f:38:ef:55:bf:a2:07:9a:23:93:ae:16:
ae:2c:65:ee:bb:d6:1c:84:00:47:8b:64:80:88:9c:
a5:c5:c5:00:03:74:0c:fd:44:49:be:59:17:97:ae:
c6:65:f1:19:57:6b:9f:72:d0:13:9d:91:10:91:8d:
4e:9d:79:2e:9b:f9:aa:c3:44:72:d3:20:84:97:75:
0a:7f:ac:ad:1e:6a:1b:4a:bd:72:66:cf:75:fc:e1:
4f:6c:30:bd:20:81:0f:34:84:31:09:03:d0:f7:ea:
b6:22:4b:eb:ca:12:63:94:ac:bc:27:c5:87:68:45:
47:ff:d7:97:09:67:9a:d0:df:b7:8a:be:ea:f6:96:
f9:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:ED:87:30:9A:E7:9A:21:D1:9F:16:AF:E4:03:E6:78:41:9B:1C:C8
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146042.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ad40::/32
Signature Algorithm: sha256WithRSAEncryption
12:73:6b:db:87:a7:20:25:94:5e:ca:ea:9b:60:c6:51:21:41:
11:bf:e0:a3:ff:29:41:8a:05:3e:b2:dc:61:35:73:12:bf:82:
84:eb:3f:6a:c6:92:6a:d5:7e:e4:e0:78:c6:49:ec:36:78:90:
ff:f2:37:67:c0:83:87:90:d1:59:09:59:b2:02:22:a6:6e:26:
4d:1c:37:9b:59:b4:fd:ac:68:24:0a:04:0d:48:90:24:e5:3f:
ab:b4:df:e9:ad:23:ae:13:0d:dc:04:0b:d8:51:fa:75:4b:fa:
09:54:bd:04:2b:da:54:ec:a3:7e:5b:ee:23:86:5d:9f:ee:e3:
1c:ba:f8:ac:ec:79:97:ec:97:e4:80:bf:fa:6f:9b:cf:66:8b:
f2:64:eb:06:41:9c:31:e1:90:fd:50:3f:3e:b8:a9:5a:d2:fd:
9a:3c:b2:fb:6f:03:96:e2:4a:66:95:c0:69:c0:48:22:05:a8:
01:d6:7d:92:70:bc:cb:5a:c1:05:37:6f:1d:c7:71:5f:49:ad:
3f:3d:f0:b1:ab:a5:26:25:11:b8:54:eb:f8:e0:af:b2:1e:20:
01:b1:1b:33:3e:12:14:ab:60:3f:d9:90:88:9d:5e:1d:e1:9f:
0c:e3:42:b8:b3:36:a0:d7:fc:bb:b0:04:47:14:e8:5a:7d:86:
ec:ed:e9:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:02 2026 by rpki-client