Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146113.roa
File: AS146113.roa (raw, json)
Hash identifier: Ndp2agDFZOyhIWGucxD/OfqiVy2Pj8yUsrEveM67NkU=
Subject key identifier: 3B:A2:95:6A:29:46:60:78:4E:7D:0E:12:79:64:B5:24:4C:DD:A2:E3
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 6C6843655AEC88DD6A59016C11E9573EA99E3EDE
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146113.roa
Signing time: Tue 26 May 2026 01:13:32 +0000
ROA not before: Tue 26 May 2026 01:08:32 +0000
ROA not after: Tue 25 May 2027 01:13:32 +0000
asID: 146113
IP address blocks: 240a:ad87::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:68:43:65:5a:ec:88:dd:6a:59:01:6c:11:e9:57:3e:a9:9e:3e:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:08:32 2026 GMT
Not After : May 25 01:13:32 2027 GMT
Subject: CN=3BA2956A294660784E7D0E127964B5244CDDA2E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:21:93:88:05:f5:93:fb:07:31:fd:2d:b2:d5:
90:3e:7c:b9:a1:08:00:a2:48:98:7e:79:f9:d2:ae:
ec:b0:34:0a:7b:0d:ad:dd:a0:c0:b2:f9:33:be:1a:
f9:3d:10:cf:db:58:7c:41:2b:eb:e1:af:6a:65:2b:
ed:6a:ef:17:01:a1:80:ce:92:a7:55:23:56:8a:c2:
13:ca:83:89:d6:7d:41:7f:39:1b:2a:1f:03:52:98:
17:81:a8:ac:6d:cf:c3:75:d0:87:80:48:53:e9:7c:
10:40:cc:b7:e5:e6:9d:38:6d:d6:68:aa:8e:dd:51:
f2:09:c0:45:3f:5d:86:1b:43:af:22:6e:fb:a9:e1:
00:5a:93:32:60:da:7f:2a:4a:be:2f:6c:16:61:74:
0a:86:9f:75:aa:ab:f2:e4:08:4e:be:3a:26:22:92:
6a:75:14:50:e1:22:c6:16:fd:eb:fa:6b:15:dc:b5:
74:01:db:dc:5a:45:34:c4:72:b3:4a:97:98:49:8e:
98:1b:a4:18:85:d3:5f:c3:1e:b3:35:8d:ec:2d:12:
86:e2:65:5c:e0:55:89:de:a8:8a:77:55:36:d4:e8:
d7:78:62:59:6c:81:85:ed:d1:b8:5c:69:f0:7c:2f:
84:c4:75:05:52:19:ff:d6:40:eb:ec:c6:19:2a:7f:
88:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A2:95:6A:29:46:60:78:4E:7D:0E:12:79:64:B5:24:4C:DD:A2:E3
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146113.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ad87::/32
Signature Algorithm: sha256WithRSAEncryption
02:cc:15:f9:83:39:49:ec:32:cd:fa:35:9e:fe:3b:fd:fa:a0:
9c:1c:48:61:c9:73:0d:15:e6:5b:67:60:6a:c3:9f:fa:32:a4:
0e:46:3d:ab:43:63:7a:ce:04:76:55:c7:82:eb:44:92:f0:d6:
a4:11:f3:ad:22:ff:43:7d:0f:2b:ae:e5:94:95:95:93:b4:d0:
f7:76:3d:3f:81:42:90:aa:33:bd:cd:f8:43:61:34:a0:d6:cf:
92:2f:f2:5f:39:d5:bc:9c:6f:a5:94:60:6e:83:5c:df:fb:63:
22:00:77:d8:27:e6:9e:3a:62:5e:ca:4e:0a:3b:76:d2:d9:d5:
f1:cd:34:59:d6:4d:72:0b:dd:cb:2f:5c:e5:82:15:81:46:34:
24:21:eb:74:bc:db:2e:43:a4:bf:84:40:60:7c:cd:c3:e5:45:
8c:9e:33:08:57:ae:e7:56:44:8c:77:b6:36:06:8c:7f:ee:60:
f5:96:c0:d3:e6:99:8b:54:d0:4d:8d:6a:de:34:df:bb:33:d8:
eb:a1:28:c6:d8:ef:91:1f:87:e8:49:ae:b2:56:62:88:dd:67:
23:54:c5:bf:8d:b5:73:45:74:7d:5a:28:94:3e:3f:0a:ed:fb:
79:b2:b9:00:2d:af:03:c4:f4:be:2c:f4:8d:1a:19:56:a4:f6:
75:47:01:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:35 2026 by rpki-client