Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146090.roa
File: AS146090.roa (raw, json)
Hash identifier: SIqqIzsTF9wijIVqt685p63efXoNCRyKIiP4vyIOmTg=
Subject key identifier: 88:8D:96:72:17:C1:A1:44:50:02:71:52:D8:FE:CE:62:94:A4:AB:B0
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 284F30539B6BD4637C68963C244EB8484E7CDC8C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146090.roa
Signing time: Fri 22 May 2026 07:08:53 +0000
ROA not before: Fri 22 May 2026 07:03:53 +0000
ROA not after: Fri 21 May 2027 07:08:53 +0000
asID: 146090
IP address blocks: 240a:ad70::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:4f:30:53:9b:6b:d4:63:7c:68:96:3c:24:4e:b8:48:4e:7c:dc:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:03:53 2026 GMT
Not After : May 21 07:08:53 2027 GMT
Subject: CN=888D967217C1A14450027152D8FECE6294A4ABB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:21:86:8e:00:90:fb:e1:77:9f:75:14:d3:e6:
7b:53:63:1e:40:ca:97:6f:52:76:e3:53:21:1f:98:
9d:14:ab:5d:f5:90:42:17:46:5b:9a:0d:f5:46:f7:
19:87:e9:c4:b2:48:90:0d:73:47:a5:66:c7:62:f5:
36:cf:63:74:59:6a:64:6e:1c:9b:57:38:9a:96:21:
76:20:36:cc:2e:a3:d8:b2:87:85:61:e7:e4:ab:b8:
81:16:81:3a:d0:19:1a:27:68:53:f4:67:63:1d:06:
e2:06:b3:3e:93:66:4e:67:d7:bb:0b:3d:5e:ce:29:
1c:13:c8:c6:44:f0:d4:99:e5:fe:b1:28:77:91:1d:
8b:16:40:ce:5f:66:79:f3:08:8d:8e:89:21:b6:57:
35:c3:7c:ad:97:9a:c2:e3:99:e5:a7:67:f4:57:12:
41:1e:be:41:13:fd:9e:59:94:ab:19:b4:80:9b:8b:
a6:43:ba:ae:e0:16:88:5b:93:16:c9:81:a8:36:52:
d6:af:00:fc:fe:46:c9:eb:e5:38:42:24:2c:dc:6b:
bc:89:29:a9:09:fa:26:02:03:64:f2:c3:b0:c0:40:
e8:0c:50:a4:0b:c5:9c:75:9e:46:63:8a:e6:e5:e4:
a7:c6:d1:a1:78:53:5d:0d:14:9b:83:7f:ba:95:c7:
72:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:8D:96:72:17:C1:A1:44:50:02:71:52:D8:FE:CE:62:94:A4:AB:B0
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146090.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ad70::/32
Signature Algorithm: sha256WithRSAEncryption
5d:e3:4e:7c:56:e7:6c:9f:bf:8d:44:f1:35:ab:6c:03:c3:a3:
55:8e:da:52:f3:b2:36:d1:bd:c3:1f:30:b8:0c:a5:29:f2:3c:
f0:1e:86:48:b9:a1:dd:5c:53:93:a6:9f:ba:7f:8f:92:a2:9b:
38:5a:46:3e:5f:40:64:d1:a7:51:73:b3:a4:d0:bc:a6:f5:9b:
9c:56:08:58:29:3a:37:a3:67:a4:9e:05:79:52:b3:8c:1a:1b:
8e:19:2d:2a:a1:e7:ad:48:36:8b:a5:4b:49:85:0d:06:7c:61:
7e:54:65:25:6e:29:a8:2d:8b:73:2f:ee:b6:a7:47:2a:e0:da:
9b:4d:54:c5:e9:c3:ab:92:d5:2e:9e:76:eb:26:fd:69:3b:cf:
45:53:9c:78:f1:a0:97:39:c9:a9:ce:00:13:b1:03:f7:93:97:
f7:e6:af:73:e7:79:c7:c8:43:d3:a8:43:6d:52:de:f7:70:5e:
9c:32:e3:32:68:13:8f:d4:6d:d4:dc:12:3b:7c:3e:b3:f0:d7:
43:7b:72:c8:c5:11:41:24:d0:5e:85:db:01:a3:42:96:0e:eb:
db:d5:17:69:5d:b1:20:2f:4a:c9:a8:a2:08:0e:ce:8f:b0:df:
0a:f2:9c:ae:5b:d6:ff:78:a2:a8:89:75:a2:5e:fa:33:2b:8d:
1d:6a:5f:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:37 2026 by rpki-client