Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146075.roa
File: AS146075.roa (raw, json)
Hash identifier: f+hF9KG5LwQdO6NRtGrtaydTbiGT0c7ZOOPay9h5Eg4=
Subject key identifier: 7F:0F:32:D4:8F:CA:36:73:ED:01:A2:06:95:C5:F4:72:28:E6:92:C3
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2CCAE3A685402B0C57CC1F0F346A162630869A77
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146075.roa
Signing time: Fri 22 May 2026 06:58:14 +0000
ROA not before: Fri 22 May 2026 06:53:14 +0000
ROA not after: Fri 21 May 2027 06:58:14 +0000
asID: 146075
IP address blocks: 240a:ad61::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:ca:e3:a6:85:40:2b:0c:57:cc:1f:0f:34:6a:16:26:30:86:9a:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:14 2026 GMT
Not After : May 21 06:58:14 2027 GMT
Subject: CN=7F0F32D48FCA3673ED01A20695C5F47228E692C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5a:85:a2:49:fd:7c:5f:a0:20:b2:6f:3b:36:
2a:9d:b2:eb:6e:99:1d:49:17:42:c7:0d:f0:b7:64:
dc:7a:89:b8:c7:40:10:ae:f9:a5:4e:7d:af:50:63:
d5:8a:8f:ed:4e:99:fe:bb:d1:e5:c9:09:4d:03:30:
bd:46:b3:d0:9e:4b:22:95:af:18:a7:88:e3:35:08:
56:2b:11:80:05:5b:81:1f:13:43:e2:d6:17:33:87:
df:2f:cd:4f:b2:18:88:18:95:4e:9d:66:54:12:a9:
93:df:b5:8a:ed:3a:25:fa:f3:45:b2:33:81:9a:c6:
82:6b:52:08:01:0c:86:c6:91:e1:09:e0:7e:63:69:
63:54:59:58:0e:c0:ca:e3:02:1b:7c:77:46:56:32:
b4:90:69:e7:10:b6:cf:ab:96:05:be:99:67:fb:dd:
ef:c8:6c:e3:2f:3e:36:21:71:65:a0:26:da:dd:d7:
01:53:47:39:44:c1:88:7d:9e:70:86:15:f8:96:e3:
6c:7b:7c:d3:63:65:82:b6:c6:42:6a:a5:0e:16:47:
3c:f2:db:8c:b8:56:12:03:08:02:09:b8:27:0a:e3:
96:4f:5b:82:f3:d2:fb:bb:2c:62:2c:de:09:20:9e:
6f:8d:67:3e:33:3f:0f:51:99:8c:cb:8d:4d:9d:5e:
4f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:0F:32:D4:8F:CA:36:73:ED:01:A2:06:95:C5:F4:72:28:E6:92:C3
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146075.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ad61::/32
Signature Algorithm: sha256WithRSAEncryption
17:70:e9:27:e7:f1:eb:b6:d0:4d:19:96:c2:8a:e9:e3:4d:40:
01:24:25:ed:64:41:c4:dd:f3:64:d4:46:51:c9:10:bb:64:93:
9b:35:c3:b1:06:39:90:9e:dd:87:e8:fd:c0:ad:d8:0b:c7:b3:
80:21:6c:4b:ee:8f:74:60:27:27:ed:fa:a8:06:93:55:a8:bb:
4b:de:a9:43:a0:ae:2c:02:78:dd:41:ce:b5:b6:d4:84:95:6d:
af:3b:5b:10:d2:9d:b9:38:3d:3a:47:fd:8d:36:c2:7b:fe:eb:
98:18:b5:27:79:79:8c:af:9e:f7:50:95:1b:fb:8c:86:5f:10:
5f:65:d8:99:85:17:63:e2:24:bd:6d:e6:23:d8:1a:41:cd:f9:
a8:54:60:4a:18:95:db:79:ee:5e:18:02:b0:16:60:57:61:e0:
20:92:df:66:a0:70:86:ea:98:57:75:24:30:ec:2d:be:72:a1:
20:16:4c:3c:53:4e:7a:5e:0b:df:cf:91:13:39:c2:64:6f:65:
e3:2f:69:f0:99:d7:38:c2:69:9f:a3:51:8c:c4:43:9e:2c:04:
9b:96:3a:78:2b:e1:8b:34:57:54:99:1b:8b:aa:6d:72:8d:6c:
50:38:c2:07:3d:38:52:08:7f:3a:56:31:8d:fe:db:a3:43:d5:
47:06:12:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:57 2026 by rpki-client