Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146095.roa
File: AS146095.roa (raw, json)
Hash identifier: HKl2ZElAScdrDk3bKeexQ5yU+99NAkrTI1GyrQDaMBw=
Subject key identifier: BB:3F:8A:B1:95:3A:DF:BC:B7:C4:D0:5C:9E:F7:D9:8A:DC:61:47:39
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0A2D075B4F37AAE2AFBC1B5B4AFF41E96B10944E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146095.roa
Signing time: Fri 22 May 2026 04:27:11 +0000
ROA not before: Fri 22 May 2026 04:22:11 +0000
ROA not after: Fri 21 May 2027 04:27:11 +0000
asID: 146095
IP address blocks: 240a:ad75::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:2d:07:5b:4f:37:aa:e2:af:bc:1b:5b:4a:ff:41:e9:6b:10:94:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:22:11 2026 GMT
Not After : May 21 04:27:11 2027 GMT
Subject: CN=BB3F8AB1953ADFBCB7C4D05C9EF7D98ADC614739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:82:8e:e3:a9:24:38:27:de:a1:0b:16:75:f6:
77:0a:3f:42:15:56:f2:6d:cb:e2:68:54:ac:2e:ae:
42:02:b4:af:74:1c:ec:7e:4a:fd:d7:0a:d4:f7:a8:
6d:68:bf:ea:f5:a2:79:8d:47:89:64:b7:ba:ce:98:
30:cb:57:20:17:de:01:42:7f:71:30:02:93:74:98:
d2:73:ce:d4:09:6e:59:bb:a7:77:d0:4c:04:84:23:
a7:58:35:98:c5:64:34:03:e1:46:5c:9a:2b:18:0b:
aa:a4:d8:32:32:84:11:c2:e3:4e:f7:0d:35:90:ff:
5a:8d:20:72:88:c0:9f:59:af:65:f4:59:97:7f:a0:
0f:3b:85:bc:4c:5b:00:9d:29:c8:18:fd:b9:58:c9:
22:83:67:06:4d:85:f2:96:cc:5d:b2:32:f9:0d:97:
16:85:54:a5:3c:28:39:db:97:13:5c:ff:90:93:ea:
80:1b:f4:28:31:86:24:9e:e7:58:b3:f5:df:d4:64:
e5:59:d5:16:cf:31:58:11:0b:5c:21:0f:59:90:a7:
2c:90:28:bd:f8:e5:e9:98:06:51:0a:f2:0f:fd:0b:
7d:99:84:ea:5c:a5:5b:d2:62:a6:c9:21:7c:ac:71:
89:33:a6:04:24:20:50:3c:e3:28:07:af:1f:d7:39:
32:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:3F:8A:B1:95:3A:DF:BC:B7:C4:D0:5C:9E:F7:D9:8A:DC:61:47:39
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146095.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ad75::/32
Signature Algorithm: sha256WithRSAEncryption
73:8b:44:65:cc:e6:8f:8e:90:11:75:8a:16:10:22:67:9d:53:
8a:cb:d4:a6:12:55:cf:4b:fd:92:b3:24:a7:d4:56:53:1f:6f:
9c:3e:ff:95:bc:74:67:3b:c1:52:eb:c6:08:30:79:67:9c:dc:
75:f2:05:c9:65:9b:b0:06:b5:2e:2a:ac:0e:05:d7:bb:97:d3:
ef:bb:12:b8:b6:a2:71:a1:e8:8a:58:df:0e:73:93:f7:3b:5c:
cb:ab:ed:55:58:40:00:55:c1:95:b1:a1:cd:d5:b0:78:d8:a4:
7f:38:7f:00:f3:bf:3f:30:96:66:d4:c8:9e:cd:c1:10:29:81:
52:21:83:bf:51:19:20:6b:2d:76:80:a5:d5:0d:4d:c3:bc:d3:
0c:54:22:8a:60:7a:74:37:e6:db:24:81:a7:8f:66:9c:cb:83:
bf:28:7c:4e:59:88:87:5a:f1:7e:69:46:c8:7f:95:be:24:d1:
0e:55:b5:d4:2f:b7:5c:d7:b3:21:50:cd:5a:3b:4e:b8:a0:e7:
d9:63:12:f1:2b:e9:4f:61:20:ef:82:55:36:d0:6a:58:a4:45:
c8:83:69:87:2f:dd:85:67:52:68:18:da:ff:af:8a:30:5d:54:
b8:65:e2:83:4d:b6:9c:78:46:e1:79:c6:88:60:6c:1c:8c:aa:
0c:f7:dd:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:03 2026 by rpki-client