Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146046.roa
File: AS146046.roa (raw, json)
Hash identifier: CNLZUrm5gTOwymRX9Zn9wxp9+LQYuftacTsWCXBr3E8=
Subject key identifier: 86:ED:BA:09:3F:B3:95:0A:D7:73:D9:83:D0:31:35:7D:BF:C7:20:5C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2A6F7D1EF70EF3E67F79FCF30C04D1500FA794C4
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146046.roa
Signing time: Mon 25 May 2026 01:51:15 +0000
ROA not before: Mon 25 May 2026 01:46:15 +0000
ROA not after: Mon 24 May 2027 01:51:15 +0000
asID: 146046
IP address blocks: 240a:ad44::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:6f:7d:1e:f7:0e:f3:e6:7f:79:fc:f3:0c:04:d1:50:0f:a7:94:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:46:15 2026 GMT
Not After : May 24 01:51:15 2027 GMT
Subject: CN=86EDBA093FB3950AD773D983D031357DBFC7205C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:d5:92:20:db:7c:78:1e:d1:31:bc:ef:75:55:
64:05:b1:81:4e:aa:75:b7:ad:b1:91:f8:06:52:5b:
78:fe:5b:3a:19:d4:74:ce:8e:3d:7f:02:17:e5:b2:
e5:54:76:f8:79:da:69:a7:60:48:b4:60:5b:f4:1f:
e7:27:a6:52:0d:c3:2b:41:31:cb:c4:66:a8:c5:42:
70:69:32:b0:ce:33:40:b4:8c:7b:65:b8:ba:6e:1e:
aa:17:0d:13:39:e0:07:2d:fa:f8:8d:0e:fe:fc:d1:
03:18:81:04:01:2c:96:b1:81:3f:65:51:68:0b:65:
ab:99:10:93:01:b0:1d:f1:c6:31:86:76:bd:1e:e9:
35:38:db:19:c2:8f:48:5c:df:22:a2:d8:51:c6:e5:
48:3f:73:92:3d:81:12:90:b7:04:fa:d1:64:b4:f0:
1f:5c:3b:26:d3:ab:b8:56:b4:ed:27:d2:62:1b:b5:
3f:85:b0:d9:2c:ce:12:b1:5f:95:86:8e:c5:95:99:
f3:7f:18:a6:e8:74:e0:cc:7e:e8:16:5e:aa:21:52:
a5:79:4e:57:5c:6a:56:3c:ad:c2:d8:57:22:25:9c:
fd:e2:6a:e0:6f:90:c8:57:2f:22:a8:89:4d:66:4e:
12:40:cb:c7:37:06:1a:f3:bf:fd:1f:5e:79:45:bc:
77:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:ED:BA:09:3F:B3:95:0A:D7:73:D9:83:D0:31:35:7D:BF:C7:20:5C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146046.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ad44::/32
Signature Algorithm: sha256WithRSAEncryption
38:57:35:7e:6e:38:15:b7:cc:dc:9e:6c:8b:31:35:72:ce:f9:
15:45:2a:e7:9b:57:03:02:11:ad:7c:48:cd:4e:5d:2a:ee:29:
7a:41:63:f8:88:cd:38:ec:b0:1c:f1:9c:03:ec:2a:a9:45:94:
d3:8b:9d:19:c7:ce:61:38:f5:1d:e9:2c:3f:07:b7:2c:52:5b:
da:b4:0a:7c:f2:f9:84:37:94:d9:95:1f:db:3b:40:5d:4e:21:
b5:06:da:1e:fe:2a:9d:48:d2:54:53:b2:d9:8d:c7:4a:b0:fa:
8b:05:cc:25:5b:ab:b6:40:cf:9c:93:b0:b4:ff:11:b8:02:a9:
a2:a3:0a:15:ff:10:47:0b:5d:92:7b:2f:0d:27:8f:a8:05:dd:
91:04:39:e1:f2:1b:b8:b0:92:82:18:e7:34:f8:e9:bc:06:d4:
de:b0:fb:94:79:79:06:f1:9a:48:01:7e:67:c0:02:48:d3:e7:
10:2c:cc:b7:7d:67:5a:21:dc:b2:32:f8:aa:14:45:3b:d3:36:
a2:5c:47:66:bc:cf:73:c1:1c:6c:5a:bb:b6:d8:d9:3e:f3:5c:
1e:a5:48:43:c2:47:7e:a2:80:87:79:2e:d8:d9:80:2f:07:be:
02:76:eb:f4:e7:e1:8e:4c:bb:8a:5c:3d:7e:56:40:06:d2:f4:
cc:ad:d9:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:36 2026 by rpki-client