Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146128.roa
File: AS146128.roa (raw, json)
Hash identifier: JCQRUwZJ50BfU8Ug9VNKbEkISsTWuhFAvux7IB36800=
Subject key identifier: C5:D9:A9:17:EC:23:00:24:13:FC:33:27:63:1B:2F:8B:6A:69:D9:BD
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 331B7DD50771A57401969683A91A39D3A535E2AF
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146128.roa
Signing time: Mon 25 May 2026 02:22:31 +0000
ROA not before: Mon 25 May 2026 02:17:31 +0000
ROA not after: Mon 24 May 2027 02:22:31 +0000
asID: 146128
IP address blocks: 240a:ad96::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:1b:7d:d5:07:71:a5:74:01:96:96:83:a9:1a:39:d3:a5:35:e2:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:31 2026 GMT
Not After : May 24 02:22:31 2027 GMT
Subject: CN=C5D9A917EC23002413FC3327631B2F8B6A69D9BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:68:cb:04:0f:82:d7:90:1b:ee:13:6d:eb:cd:
e2:9f:62:08:88:1b:0d:3b:5c:4a:67:19:54:c4:13:
48:54:be:4e:92:b3:ee:e0:73:91:b8:be:ed:dd:4a:
99:3b:6f:7d:5b:ed:a3:13:f9:dc:fb:f9:8d:fd:91:
71:39:5f:26:14:bf:40:18:d4:98:23:d7:1d:53:bf:
ea:f1:20:c0:11:ff:cf:8e:34:23:98:f1:c2:84:96:
c8:89:86:59:96:af:e9:25:7f:02:ed:6b:6d:24:54:
5c:a6:0a:5c:fe:2b:4c:e7:c6:0e:72:a5:e4:5e:f0:
e7:33:8e:95:94:ea:83:b2:07:e4:ca:af:5c:c6:c4:
95:be:90:fd:44:1e:70:fb:12:75:34:df:43:1e:14:
ea:5b:12:fd:b2:1b:e2:1e:a9:2b:b2:fe:dc:1c:24:
40:6d:cb:96:e2:53:a2:d8:e2:3b:fc:82:7f:5b:cb:
b7:ce:f9:4d:9c:61:a5:2c:c6:e3:df:6d:7f:f1:1d:
be:a3:41:1f:84:df:5c:e1:98:46:48:2c:00:34:22:
54:de:d5:53:18:dd:5d:2e:f8:04:69:59:9e:ad:6c:
82:37:f4:36:f3:32:55:1f:b5:87:99:b7:08:3f:48:
3c:ad:71:2c:fb:6e:92:71:0d:17:7e:8f:f6:ce:6f:
e7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:D9:A9:17:EC:23:00:24:13:FC:33:27:63:1B:2F:8B:6A:69:D9:BD
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146128.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ad96::/32
Signature Algorithm: sha256WithRSAEncryption
72:5a:b0:35:94:c1:75:84:29:d4:f0:51:f1:c1:27:99:66:73:
19:bd:3a:9d:4a:f5:3f:84:f4:21:37:08:df:67:e6:f7:03:f5:
cf:0d:95:4d:a0:15:e6:63:5d:61:77:71:ee:7e:a4:3a:b6:de:
f2:15:49:2e:02:31:a3:d5:de:61:fb:16:53:30:ce:4f:b6:4b:
67:8f:da:7c:1e:5e:40:cb:f1:05:ff:6c:d2:36:89:6f:dc:e6:
63:b2:d8:f5:cd:f7:58:66:c7:57:8d:c3:67:e3:be:89:23:cd:
b3:ff:9b:dc:ba:7d:e5:ce:d7:8b:10:8b:bc:c0:1d:89:1b:a5:
39:8c:d3:6c:54:5a:95:82:22:8f:44:56:25:13:bc:5c:c5:59:
86:0b:ff:09:a5:3d:6d:b3:a8:e7:a3:85:f8:11:24:90:68:4b:
e7:ae:4e:d9:6f:d5:e7:09:0e:b2:35:2d:80:86:8d:cc:20:ca:
e8:0f:9c:8a:84:6b:77:e4:6c:c4:72:ec:eb:b1:c8:4d:d2:ec:
d9:b4:1a:8f:14:b3:fa:03:bf:f7:36:21:a1:22:7a:76:ee:85:
07:ca:74:cf:a9:f8:7a:08:ae:91:0d:38:c6:37:3d:82:32:8f:
e4:3a:2b:35:4b:e2:59:c3:99:44:57:4d:7e:f4:26:72:91:cb:
79:0b:28:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:35 2026 by rpki-client