Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146131.roa
File: AS146131.roa (raw, json)
Hash identifier: m7zCB60/kzEecKVegWDs3WvI646MxcVtgSbJCbSlYaM=
Subject key identifier: 66:CE:44:94:8D:D7:7A:06:C5:05:91:3D:B1:31:63:78:C7:35:DD:E2
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 34832005196E65AB709EC74DBFE7F06D28B87D4D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146131.roa
Signing time: Fri 22 May 2026 06:27:40 +0000
ROA not before: Fri 22 May 2026 06:22:40 +0000
ROA not after: Fri 21 May 2027 06:27:40 +0000
asID: 146131
IP address blocks: 240a:ad99::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:83:20:05:19:6e:65:ab:70:9e:c7:4d:bf:e7:f0:6d:28:b8:7d:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:22:40 2026 GMT
Not After : May 21 06:27:40 2027 GMT
Subject: CN=66CE44948DD77A06C505913DB1316378C735DDE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:6a:cb:e9:ff:ee:9d:6f:f1:83:53:e1:ff:a3:
f0:76:f0:c5:da:fd:fd:c5:e4:66:f6:0a:da:b4:7f:
38:c3:93:9b:07:b8:72:34:6b:99:ee:ad:c4:f7:19:
12:d3:4b:04:11:77:ba:5f:e1:84:00:a3:9e:b5:b6:
44:dc:c6:7f:17:57:6b:c2:a8:ee:4d:c9:16:93:0b:
30:25:40:90:da:ca:d9:43:86:c0:4e:37:ce:75:ef:
bf:62:f4:25:d3:7a:be:5c:ce:2c:e4:b0:d3:3a:1a:
cc:60:9c:4d:7b:04:d0:e0:09:25:c0:aa:0d:e1:bb:
f5:7c:ef:6b:9a:07:2b:b2:66:34:9a:70:60:af:06:
75:39:f4:bf:f4:43:31:f5:9d:61:f7:ec:af:fc:82:
8d:7b:33:43:26:2c:c8:04:25:a4:58:22:a0:24:b6:
df:c0:18:c6:7d:c7:12:bd:12:9c:35:31:c5:36:57:
14:7f:a2:ea:8c:e8:8f:f0:3e:3f:f0:51:46:4e:fb:
b6:6b:4e:fa:2e:01:50:5f:2e:b9:19:77:23:00:50:
57:61:d8:c2:bc:c7:73:d0:44:7f:5f:85:bb:8c:c2:
74:de:90:b4:c9:e6:8b:26:f1:bd:d0:0f:02:51:0d:
c9:a9:77:e2:f4:49:0e:8c:3b:d5:cb:59:ec:d3:e3:
f9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:CE:44:94:8D:D7:7A:06:C5:05:91:3D:B1:31:63:78:C7:35:DD:E2
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ad99::/32
Signature Algorithm: sha256WithRSAEncryption
81:3e:e2:9d:f3:2e:2c:54:58:d2:e6:e5:ba:f0:eb:09:f6:3f:
b8:2e:92:85:06:43:21:49:bf:ac:4b:38:9b:c1:5a:b7:d8:6f:
32:e1:12:11:8d:57:1d:8e:84:ad:ae:14:db:a5:4e:12:79:3e:
e8:0e:53:08:42:00:a8:0a:a1:c3:8b:40:da:a5:dc:0e:04:24:
9d:3e:0e:d3:88:40:d0:4c:4a:4a:87:83:78:9a:c2:90:59:50:
f6:c9:83:f4:60:95:ee:27:2c:9d:92:bb:2a:63:ac:1d:3c:63:
36:a5:4d:90:20:33:de:49:26:66:e1:e7:c0:29:ca:eb:49:76:
16:04:0d:2d:69:45:6a:13:c2:4e:e7:8e:ab:a5:9f:34:7a:f3:
2b:6d:d6:f1:89:73:32:94:9c:42:99:b8:eb:91:21:36:87:11:
a8:58:bf:7e:b2:2d:74:53:f5:89:0a:26:fb:85:4f:df:db:70:
d1:7c:f6:ad:72:15:96:52:15:4a:e4:ae:78:79:e6:00:cf:9f:
e9:41:bc:ec:07:f1:00:d8:f2:9b:20:2f:06:b4:4c:40:3c:80:
7f:fd:e1:b3:6c:3a:34:e2:c4:40:a3:f8:8d:19:41:01:29:62:
d4:e4:df:83:b4:e1:a6:d6:9d:c7:3d:e1:76:e3:0d:bd:21:dd:
d9:79:e8:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:55 2026 by rpki-client