Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146052.roa
File: AS146052.roa (raw, json)
Hash identifier: q6V7Ud81T8+WGnvoLtuCj8fMKBwjAoisT+jWSAKSqCg=
Subject key identifier: 10:25:3C:93:88:71:22:63:BD:07:EF:C1:C2:87:2F:E9:4B:AF:08:2B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 09810E53ABEF4BA5337CC2AB5FAFD3B0DBC0E795
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146052.roa
Signing time: Mon 25 May 2026 01:20:17 +0000
ROA not before: Mon 25 May 2026 01:15:17 +0000
ROA not after: Mon 24 May 2027 01:20:17 +0000
asID: 146052
IP address blocks: 240a:ad4a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:81:0e:53:ab:ef:4b:a5:33:7c:c2:ab:5f:af:d3:b0:db:c0:e7:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:15:17 2026 GMT
Not After : May 24 01:20:17 2027 GMT
Subject: CN=10253C9388712263BD07EFC1C2872FE94BAF082B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3a:2a:61:a0:15:ed:7f:6e:4c:9e:25:23:e4:
04:c7:f7:f5:6f:06:8c:7d:df:cd:35:ae:c2:ea:07:
83:06:bc:d3:e3:8a:27:6c:9f:a2:02:b5:ff:a9:22:
c4:8f:66:4a:b0:93:ca:eb:29:46:9d:fa:a4:fa:b7:
f4:67:9f:39:3b:01:bb:16:f9:63:ae:f8:a6:3c:6b:
63:7b:c8:9d:18:54:30:db:22:b9:ca:13:d4:43:94:
ef:95:a4:c7:ee:cc:6f:e1:ff:2c:8b:16:fb:50:d9:
12:28:7d:ae:8d:47:fe:86:13:e4:3c:6b:be:c9:7a:
6d:f6:79:fd:24:cc:92:a6:3f:43:c7:24:5f:7a:1c:
c0:59:47:9c:36:b2:41:16:ea:4e:72:44:9c:73:de:
f2:87:c6:3b:fc:db:0e:e6:80:c1:3a:0b:bb:14:51:
a3:1e:15:da:20:32:d3:73:b3:04:9b:82:56:fa:8a:
5c:01:94:66:ae:94:6c:d5:3d:f3:a7:a0:c6:c0:4f:
62:05:b8:25:d1:32:bf:9c:8e:ba:60:4a:fc:19:58:
9e:63:0b:fe:92:ce:ac:d9:bb:d0:8d:a3:b2:c7:94:
5d:d9:6a:ba:ad:00:bf:93:84:34:e8:46:76:57:76:
bf:f6:06:79:f3:9e:15:a5:f1:fd:95:13:d3:b1:d9:
b0:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:25:3C:93:88:71:22:63:BD:07:EF:C1:C2:87:2F:E9:4B:AF:08:2B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146052.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ad4a::/32
Signature Algorithm: sha256WithRSAEncryption
09:05:a0:d9:92:a3:08:b4:8a:1f:78:f7:76:d8:ec:77:a2:1f:
8e:96:40:16:a8:ce:d4:2f:b2:41:0e:9e:75:b6:4b:71:13:fd:
73:72:9c:65:c7:70:a9:b8:0d:8b:d2:5a:78:cf:55:d7:8d:fe:
d7:63:f3:ec:26:59:2f:44:9f:f0:e2:12:79:e9:87:4d:91:2c:
4b:6f:2e:3f:cc:56:9a:68:db:dc:07:73:31:e1:d1:34:6c:cf:
d4:e4:3d:63:99:3b:a4:44:68:f9:c6:0f:4c:00:bb:62:91:7e:
8e:69:82:80:29:62:21:75:c9:cd:a4:cb:09:33:60:92:6e:57:
9d:89:3c:42:9c:82:7a:62:e6:bc:02:dd:40:ee:7d:c4:f4:46:
64:cc:2b:f1:fc:bf:10:68:96:1d:51:10:a6:f1:90:32:84:df:
c8:37:bb:98:12:23:18:ef:33:f4:16:cf:56:0d:2f:a6:c1:ae:
c3:a3:8c:d0:3e:c1:72:ca:e3:f0:f7:2c:26:59:cc:21:ec:56:
7e:62:a6:ab:f6:58:4e:d3:b5:2d:ac:d8:0a:2a:bb:1b:1a:b2:
e1:94:a3:ee:52:71:01:bd:ef:59:a9:37:c7:62:77:7f:26:1d:
bb:1d:46:80:53:ce:c7:50:b8:52:f2:6e:d3:61:ef:1c:e5:6b:
b5:be:7c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:13 2026 by rpki-client