Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146122.roa
File: AS146122.roa (raw, json)
Hash identifier: e44QVsl9u2sJtpOQSq0C78qU+jSaMP8F0ppducwWbqY=
Subject key identifier: 91:DF:CD:86:EC:B2:A9:E9:E1:28:A1:55:59:22:35:36:52:02:50:0B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 09ED37AB32B6179968A89249696834F1E64462F9
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146122.roa
Signing time: Mon 25 May 2026 01:38:12 +0000
ROA not before: Mon 25 May 2026 01:33:12 +0000
ROA not after: Mon 24 May 2027 01:38:12 +0000
asID: 146122
IP address blocks: 240a:ad90::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:ed:37:ab:32:b6:17:99:68:a8:92:49:69:68:34:f1:e6:44:62:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:12 2026 GMT
Not After : May 24 01:38:12 2027 GMT
Subject: CN=91DFCD86ECB2A9E9E128A155592235365202500B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:8d:f0:74:ba:dd:28:eb:4b:69:4c:0a:3b:cc:
92:d0:c4:c4:35:7a:f8:45:a5:1f:04:2c:0e:7e:29:
0f:84:6c:e8:00:29:2f:1a:b2:09:67:04:b6:c6:6c:
9d:00:5e:39:d4:32:6d:0d:b2:7a:41:e1:ed:69:2c:
73:83:55:d1:4b:d3:9f:86:a6:23:e9:08:dd:d4:27:
d7:b6:16:a2:b2:7b:79:be:08:65:69:96:43:96:7b:
14:7c:5c:bd:cf:43:f5:ed:14:02:03:82:e7:41:63:
a3:3b:74:6e:22:cf:e8:35:c6:2c:d9:d3:4d:88:63:
a7:b4:48:d4:02:5f:ff:48:41:74:2b:2e:b8:e5:0a:
ae:f6:89:74:05:50:2f:4e:17:fd:18:39:0f:9d:ef:
80:12:01:29:68:ca:89:98:29:10:3d:e0:42:74:db:
89:57:d6:fa:d1:cb:76:cd:d0:a7:13:ea:dd:c9:50:
1d:48:56:e8:af:fc:29:29:1c:d6:1c:2b:1a:cc:89:
6e:c3:90:ec:18:45:18:6d:bf:18:8e:c0:33:a4:1c:
31:0e:02:34:f1:b7:31:3d:d1:09:83:19:3b:79:ba:
1d:dd:42:3e:a3:1a:f5:d6:f7:e7:57:8a:d6:32:45:
83:a1:31:eb:98:9b:9e:b5:ec:28:1a:40:64:8a:8c:
a5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:DF:CD:86:EC:B2:A9:E9:E1:28:A1:55:59:22:35:36:52:02:50:0B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146122.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ad90::/32
Signature Algorithm: sha256WithRSAEncryption
65:76:b1:3d:b0:ad:96:c1:f2:a7:f0:b8:26:8e:f3:67:dd:3c:
21:e7:a0:8f:b4:2a:5a:e8:b6:63:95:c2:02:86:11:86:d7:65:
c6:8e:2e:8a:3e:cb:1d:c1:32:ab:5a:93:e4:89:94:be:69:15:
c0:76:6e:fd:ad:2c:6c:aa:25:8b:94:d6:05:f0:32:19:ac:c6:
b1:47:47:b5:7b:a1:14:8a:0b:99:b5:30:ae:e1:86:46:92:ba:
47:73:a1:23:2f:4e:82:5c:d8:fe:66:2a:59:90:4b:05:7e:57:
e4:3b:87:cd:04:ce:2f:11:ec:ed:e0:2b:30:77:a5:0b:7b:d1:
e6:7a:e8:0d:94:f4:22:76:80:8e:a0:3a:40:35:fe:ea:fd:de:
3d:0e:8d:0f:fa:a2:b0:d5:81:ff:9c:d4:67:1f:4a:12:37:6f:
e7:cd:f4:16:df:84:8b:97:ba:b1:18:ea:61:26:43:e7:5a:bc:
a4:22:48:3d:49:d9:ee:30:93:d9:36:93:b8:b8:6d:77:ef:23:
79:12:19:dd:2d:50:ac:e7:57:13:c4:de:04:22:c1:d9:60:1b:
df:80:ea:9b:69:64:b0:41:d0:53:c2:4b:24:2d:18:6e:31:d2:
48:6a:5d:5c:e3:c8:5b:9e:8a:8b:8d:94:c2:fb:83:61:2e:45:
3b:2e:2b:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:46 2026 by rpki-client