Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146087.roa
File: AS146087.roa (raw, json)
Hash identifier: 1dOo4eI90fB441Mf6WNTNTuJm0XduwoX0lIppZwV30k=
Subject key identifier: B2:CB:2C:A2:12:91:73:50:E8:98:30:7B:6F:1A:03:5E:57:3E:9D:D5
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 524335251F460D7BD51435024E2BF837F3655070
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146087.roa
Signing time: Tue 26 May 2026 06:12:26 +0000
ROA not before: Tue 26 May 2026 06:07:26 +0000
ROA not after: Tue 25 May 2027 06:12:26 +0000
asID: 146087
IP address blocks: 240a:ad6d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:43:35:25:1f:46:0d:7b:d5:14:35:02:4e:2b:f8:37:f3:65:50:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:07:26 2026 GMT
Not After : May 25 06:12:26 2027 GMT
Subject: CN=B2CB2CA212917350E898307B6F1A035E573E9DD5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:67:d1:3b:63:03:1b:e8:7d:ae:26:fe:fb:7b:
df:eb:05:1a:8a:84:3c:7a:b7:24:eb:b3:f2:01:63:
08:5c:7e:1c:29:a4:5d:45:f5:14:00:45:c1:bb:52:
a7:6f:af:23:b5:87:2c:16:83:a2:cb:82:b2:62:01:
67:73:b5:c2:87:91:64:20:96:36:a9:0e:0e:2e:9c:
e0:e3:46:fc:06:55:f3:78:36:39:1a:2f:76:81:93:
dc:3d:04:78:d7:1d:7d:10:23:b4:9a:d4:90:a3:60:
04:d4:c1:08:a4:5b:f5:df:d6:2f:c6:98:2c:2a:ab:
43:20:5c:a1:99:12:68:fe:66:8b:ce:ef:f2:d3:dd:
70:24:86:45:72:3c:95:bd:91:8e:56:9a:ca:8d:15:
be:bc:6b:49:d6:77:c8:bf:29:46:de:5e:d8:03:2f:
08:e9:bc:3e:80:8b:d5:9e:a3:85:6f:55:b1:f3:d8:
b9:d6:fa:97:aa:66:a7:87:06:7e:0b:40:ba:fe:0c:
5a:da:ae:3b:83:bd:3b:ef:39:64:26:40:8e:70:b8:
16:a7:de:94:d5:e4:11:20:c6:ee:06:ed:34:40:ef:
66:be:74:b5:58:4a:1a:eb:a4:b2:5b:0f:4f:fe:e0:
19:00:ce:45:62:6c:34:56:89:54:d2:5f:39:fe:a5:
13:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:CB:2C:A2:12:91:73:50:E8:98:30:7B:6F:1A:03:5E:57:3E:9D:D5
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146087.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ad6d::/32
Signature Algorithm: sha256WithRSAEncryption
57:4a:a9:ce:32:45:e2:93:c5:f8:c2:19:62:b2:eb:8d:51:f0:
cc:09:69:59:e4:c3:38:fb:f3:5b:26:96:be:72:7d:5e:3e:2d:
99:49:5f:4b:75:a8:27:19:6d:2e:bc:a4:9c:b3:66:aa:cf:fd:
53:e7:eb:a1:b5:1d:a2:52:a9:a0:e0:86:da:cd:fc:50:40:7b:
36:37:d3:33:ec:ac:fb:63:5b:5f:da:67:16:26:c8:25:dc:26:
e5:bf:70:cf:3f:20:dd:0d:3d:dc:09:30:e5:b1:eb:a4:fc:20:
6c:1d:2a:25:85:32:20:6a:87:1a:28:7b:73:18:56:5b:83:fd:
09:33:b1:36:7b:df:8c:a5:b9:b5:89:30:38:63:f7:79:7e:4f:
7d:31:a0:64:d9:1c:13:c2:fd:0f:a6:c8:e3:bd:da:5e:0f:18:
df:56:b3:e0:4e:b5:5d:58:38:82:1b:bf:33:f7:5e:19:dd:c7:
cf:fe:8a:b2:d0:f4:0b:2e:ef:1e:e5:5d:85:67:7e:6e:ba:e0:
df:18:46:bb:92:1f:ef:46:c9:a0:48:e9:ee:29:9a:9a:70:de:
74:03:ca:84:0e:d8:fd:6b:57:c0:da:24:60:8b:08:7b:04:f1:
f8:5f:6d:48:04:df:17:1a:f6:27:cc:86:a7:19:84:24:4c:67:
95:a3:a2:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:25 2026 by rpki-client