Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146065.roa
File: AS146065.roa (raw, json)
Hash identifier: 8Fyw1YpK3/NillK/nTJFzILOFYAVDxQPGCeLQCSXlG4=
Subject key identifier: 21:F7:6C:D4:88:49:67:21:75:A9:99:EC:4E:B4:56:E4:81:86:B7:38
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 490C4342F76EB5352A99175D42C9DBCB592FDC79
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146065.roa
Signing time: Fri 22 May 2026 07:41:18 +0000
ROA not before: Fri 22 May 2026 07:36:18 +0000
ROA not after: Fri 21 May 2027 07:41:18 +0000
asID: 146065
IP address blocks: 240a:ad57::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:0c:43:42:f7:6e:b5:35:2a:99:17:5d:42:c9:db:cb:59:2f:dc:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:36:18 2026 GMT
Not After : May 21 07:41:18 2027 GMT
Subject: CN=21F76CD48849672175A999EC4EB456E48186B738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:96:86:1f:59:00:02:ea:ac:65:4a:9f:b8:b9:
39:3d:3f:a6:86:63:88:33:dd:7a:00:f5:c5:ad:8f:
16:1e:88:14:78:ff:21:b9:7e:4d:e1:f2:24:52:10:
33:54:30:56:6c:f6:81:ef:21:d8:bf:36:a9:82:ca:
37:2b:92:ee:4a:28:bf:87:49:f4:b0:31:9a:94:d5:
82:1f:3b:48:ae:7f:4e:93:5d:f8:72:55:d2:25:92:
bb:e3:85:2a:32:8d:90:7e:6d:06:a4:b6:d9:00:50:
1e:90:02:bb:00:02:79:ec:a7:49:65:7a:e7:23:ce:
f9:28:bf:3a:3e:ac:74:8e:62:f5:8e:5f:b9:55:f6:
a9:9a:59:dc:75:ac:b3:df:fd:8f:f7:19:50:8f:ad:
a8:cf:3f:cd:f4:b4:50:8a:b0:73:cd:ae:52:3c:67:
26:82:c0:0d:f9:0c:09:ae:8d:0e:18:14:49:c5:ef:
ae:84:1f:81:0d:14:d2:35:a6:a3:0e:1c:bf:79:58:
62:0c:ed:c7:52:f7:1a:20:21:80:ae:37:d7:b1:e4:
34:bd:06:02:9e:d5:81:03:9b:76:03:27:db:f0:6d:
18:1c:28:9a:d3:ca:7b:78:99:bc:7a:e1:11:a6:86:
69:ac:16:41:64:c9:59:2e:fd:80:16:62:52:7b:3a:
2e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:F7:6C:D4:88:49:67:21:75:A9:99:EC:4E:B4:56:E4:81:86:B7:38
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146065.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ad57::/32
Signature Algorithm: sha256WithRSAEncryption
72:ca:98:0f:1a:21:9f:34:3f:cf:b0:99:b2:30:13:b5:22:4f:
bc:66:f5:74:d0:47:4b:fb:f2:24:ae:ba:42:33:77:cf:0d:ab:
0f:81:1b:fa:6d:81:4a:11:44:07:05:6c:9b:1d:98:53:fd:22:
04:43:06:03:f8:0d:f6:e3:14:54:42:ec:06:89:ad:f7:70:f3:
dc:d6:61:96:3d:22:5a:26:9b:fa:b6:19:de:2f:32:e4:9a:5d:
16:e3:1e:d4:9f:b7:e9:9a:fa:57:25:e6:52:c9:77:d3:80:b6:
a7:85:61:12:9b:20:6a:03:c4:0e:f8:5f:ec:c1:44:cb:da:b9:
90:ab:e3:97:ad:10:6e:b4:c3:6a:44:7a:0c:12:9a:78:86:f6:
aa:67:97:80:9e:88:f7:c0:97:f5:0c:c3:8e:99:b6:30:61:19:
bb:24:25:20:5e:33:7f:ec:cf:57:f0:50:3a:62:27:42:5e:52:
60:00:3e:7d:af:85:27:5c:d4:6f:e6:63:1c:d8:28:a2:e8:65:
59:8a:81:13:a5:9c:23:a5:d8:80:ef:de:a0:c9:24:3c:7f:02:
13:1e:54:be:36:71:69:ac:02:2f:8a:01:2a:f4:c6:f1:ae:6e:
c6:5b:1e:61:bd:52:a4:73:e1:3f:1f:da:98:54:94:89:53:81:
4c:e1:08:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:37 2026 by rpki-client