Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146053.roa
File: AS146053.roa (raw, json)
Hash identifier: tCryuEXWk78JWKkcSMR2uR7Gzd+sadvbs2CyjVVj1+k=
Subject key identifier: 42:12:4C:7D:C7:F9:BA:96:13:22:15:F3:D0:58:E9:00:C6:34:95:6C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 408D865C9C723B4273FB8D720385CE0B37435827
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146053.roa
Signing time: Fri 22 May 2026 02:47:52 +0000
ROA not before: Fri 22 May 2026 02:42:52 +0000
ROA not after: Fri 21 May 2027 02:47:52 +0000
asID: 146053
IP address blocks: 240a:ad4b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:8d:86:5c:9c:72:3b:42:73:fb:8d:72:03:85:ce:0b:37:43:58:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:42:52 2026 GMT
Not After : May 21 02:47:52 2027 GMT
Subject: CN=42124C7DC7F9BA96132215F3D058E900C634956C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:43:1c:58:ed:23:7f:f7:86:36:e3:64:cc:18:
e4:a0:26:f5:49:02:bf:a4:40:44:3d:e6:0a:46:d0:
54:8e:49:de:0f:53:a9:cb:70:ab:4e:b3:6f:58:d0:
4c:1b:ba:c6:be:49:0d:1f:ff:d8:87:0e:e1:3a:13:
10:0e:75:db:13:1c:7b:41:c1:b7:61:0d:f8:f4:dd:
7b:75:9b:2b:9d:7c:5d:44:f6:17:01:59:ad:bf:24:
73:2a:34:23:70:0a:dc:c5:2c:53:14:50:82:7e:fd:
7b:cd:97:fd:15:be:c3:08:50:53:37:ca:ec:4c:80:
62:0b:9d:c0:7d:55:ff:6d:31:2a:86:b3:1b:80:b3:
3e:aa:d8:35:9e:af:0f:00:f0:6a:a0:b8:98:f9:b6:
78:2c:26:72:14:a3:a8:ee:1c:82:61:6d:89:4d:0c:
26:7a:30:3a:83:b3:ed:7e:b2:e1:66:0d:cd:65:3f:
b9:10:ba:9d:ab:c8:9c:75:4e:2d:19:e6:bf:30:30:
cc:dc:b1:10:8a:84:b9:49:c9:d9:88:e1:02:a4:a5:
2d:ff:30:e6:53:da:9f:0c:15:40:3e:3e:1a:ee:0b:
77:1e:63:cd:c3:ab:b2:09:31:15:0b:41:6e:93:fb:
37:1f:6b:ec:72:26:41:f4:6f:ff:f9:89:8e:a0:11:
09:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:12:4C:7D:C7:F9:BA:96:13:22:15:F3:D0:58:E9:00:C6:34:95:6C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146053.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ad4b::/32
Signature Algorithm: sha256WithRSAEncryption
af:a2:bb:92:6c:b5:f3:62:43:9c:d5:4a:73:96:97:69:68:fb:
4f:0a:6d:f8:b3:eb:63:9f:e8:3e:22:ce:7f:ca:14:1f:27:18:
ea:6a:6a:22:56:93:c1:66:a7:6f:95:97:af:73:ba:05:b4:63:
4d:1e:d5:10:a5:56:92:8f:3d:76:8a:49:53:f7:02:16:e3:d9:
7a:86:14:12:ec:71:5c:ae:f7:21:c8:87:ba:26:e5:a5:1d:f0:
8e:c4:82:c4:5d:b0:c0:24:21:86:a2:b2:91:69:cb:92:4c:2d:
b0:fb:0b:52:0d:24:47:f7:e6:c0:ef:ff:ad:19:d5:93:a8:d7:
ad:64:4c:24:bd:71:e0:92:3c:ea:51:23:97:db:8a:ca:9c:c2:
15:ac:98:f8:ed:af:99:2e:3e:07:26:e2:f0:18:e5:6a:f8:78:
33:25:6d:2b:ca:e3:fb:c4:03:e4:55:c5:de:7c:62:92:6a:8b:
4d:ce:37:cc:97:36:fb:cf:5d:71:bc:28:d4:77:24:91:1d:d9:
06:91:de:6e:95:d5:c6:75:fe:ce:41:2c:95:48:9f:99:cc:e1:
54:ca:57:bd:92:73:90:18:38:d3:e3:72:97:e6:24:cf:8a:32:
3a:71:bb:8d:3b:34:ac:7d:04:2e:be:a8:f8:3f:a3:f0:35:be:
62:77:15:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:21 2026 by rpki-client