Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146072.roa
File: AS146072.roa (raw, json)
Hash identifier: ylMpHoYuJOu+QK3adv7Vao3usqa5YwJtj+OxzX62Tfg=
Subject key identifier: 49:05:F2:A7:70:96:7E:EA:CB:1A:54:73:AA:F9:27:53:86:2D:1B:15
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 19696BFFC9AC6F40A680776903290C03EBB86965
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146072.roa
Signing time: Tue 26 May 2026 06:12:47 +0000
ROA not before: Tue 26 May 2026 06:07:47 +0000
ROA not after: Tue 25 May 2027 06:12:47 +0000
asID: 146072
IP address blocks: 240a:ad5e::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:69:6b:ff:c9:ac:6f:40:a6:80:77:69:03:29:0c:03:eb:b8:69:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:07:47 2026 GMT
Not After : May 25 06:12:47 2027 GMT
Subject: CN=4905F2A770967EEACB1A5473AAF92753862D1B15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:22:b6:7f:46:44:ef:a3:d8:f5:ba:05:ee:ff:
77:e3:5b:fd:5e:df:25:1a:4f:c7:22:84:af:61:f6:
b4:d9:cd:16:aa:df:62:04:16:c2:fd:be:13:75:a5:
56:ba:85:c1:24:0b:28:02:8c:f1:62:75:f9:f4:5c:
34:ae:47:6a:0b:74:62:5d:11:9d:20:19:8f:81:d0:
d5:1f:21:59:f9:0e:de:18:ba:55:3a:90:9f:64:7d:
e6:75:a9:cb:0c:a4:c3:a6:ca:9e:ec:f0:a1:bc:2f:
84:bb:37:e6:7f:64:ea:4a:0c:39:3e:69:01:a0:c1:
b2:d6:92:81:c6:88:d7:c2:e0:7a:a2:78:ad:20:55:
57:e2:cc:b5:10:0c:f9:81:7d:8e:25:7c:22:9d:af:
52:dd:53:2e:76:6b:e1:b4:b1:b8:82:e1:71:e4:09:
4c:ca:c0:e7:1e:fb:0f:a2:80:c1:e4:2b:b1:7b:25:
65:a2:01:63:4a:9e:45:ce:43:1a:5f:63:eb:b1:22:
2b:28:61:41:72:25:08:d5:a8:2e:f7:77:9a:76:94:
69:49:40:0d:1b:50:f5:65:cc:e4:3f:77:c2:09:f9:
d3:63:e2:0e:74:45:da:c8:19:7b:e5:47:e8:f6:78:
60:93:46:56:12:f7:1b:d2:d7:61:29:00:c8:e9:0d:
3c:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:05:F2:A7:70:96:7E:EA:CB:1A:54:73:AA:F9:27:53:86:2D:1B:15
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146072.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ad5e::/32
Signature Algorithm: sha256WithRSAEncryption
bc:02:f5:fb:89:59:f8:45:22:4b:fc:7d:1d:d3:f3:c1:eb:e4:
3e:bf:2e:8e:07:b3:9b:b5:b0:41:50:bd:ea:3d:1f:54:56:12:
d1:42:42:a1:7b:1b:9e:56:f1:ff:53:ab:bb:77:ee:52:13:7f:
e2:b5:ad:ca:2b:80:dc:f1:30:04:70:67:18:22:5f:3b:68:08:
99:21:2d:60:e6:f1:06:44:1f:26:5f:50:33:26:37:d2:3e:7a:
3d:9c:7e:14:39:91:2f:58:e8:fe:a1:a5:22:35:42:6c:2f:65:
3c:0f:36:1a:81:c9:7a:25:ec:0d:4f:b7:27:98:c2:7f:03:e6:
28:2c:a9:dc:ab:10:72:3c:72:57:49:88:6e:47:cc:c7:d4:df:
ed:85:c3:46:78:fc:2f:f6:02:ba:f8:ab:12:f7:a8:dd:e7:fd:
69:75:f4:bf:78:60:46:ce:b2:36:43:c2:bb:94:74:b5:d3:db:
35:83:e3:1d:e4:db:32:97:a7:6b:f5:8e:2c:b3:ef:59:d2:02:
28:0d:b2:ac:0d:99:99:9a:98:4d:5d:ef:61:a1:cd:59:ee:23:
88:c4:97:3a:c6:f7:2a:c0:b4:fe:54:b0:c8:9f:0d:41:01:ee:
0d:a4:d3:58:af:fb:cf:55:aa:d1:86:39:99:bf:a1:c2:90:0a:
c9:32:15:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:59 2026 by rpki-client