Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146135.roa
File: AS146135.roa (raw, json)
Hash identifier: iiNuGpEq9Wd9m1GW203bcdW/k+4Bd6T0AoW9F3PuLrU=
Subject key identifier: BD:BF:65:CA:1A:A8:52:DA:33:2D:38:03:91:DE:FA:73:71:22:68:05
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5166C43DB7256F1FDAF87FBBBC00D1368600669F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146135.roa
Signing time: Fri 22 May 2026 06:58:48 +0000
ROA not before: Fri 22 May 2026 06:53:48 +0000
ROA not after: Fri 21 May 2027 06:58:48 +0000
asID: 146135
IP address blocks: 240a:ad9d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
51:66:c4:3d:b7:25:6f:1f:da:f8:7f:bb:bc:00:d1:36:86:00:66:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:48 2026 GMT
Not After : May 21 06:58:48 2027 GMT
Subject: CN=BDBF65CA1AA852DA332D380391DEFA7371226805
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f8:96:53:dc:25:4a:9b:91:62:b3:30:c5:f8:
9b:c4:50:ef:ce:3d:6a:2a:b5:d2:88:f1:0a:22:f5:
15:eb:2d:eb:9e:da:a4:05:c7:6d:0d:25:6e:ad:cf:
8b:cc:02:06:3c:b4:87:9e:a3:5c:81:1a:63:e9:b8:
13:1d:92:f7:71:45:74:c9:5e:19:56:13:7a:79:81:
e4:23:9f:84:91:60:39:35:90:5a:5d:4d:1f:cd:eb:
0c:d9:f1:5b:17:f9:10:28:8e:d3:72:f9:39:1e:26:
7c:c0:e7:74:3c:45:0e:0b:9d:28:b1:b9:85:44:40:
29:c2:0b:8b:cf:1d:f0:32:84:07:7c:f9:3b:24:2c:
5f:81:d0:9b:e9:7d:16:5b:77:25:1a:c6:c5:58:c9:
2b:09:e9:81:a4:ef:d4:aa:28:5c:6e:f4:25:99:23:
1a:5d:51:b0:ab:41:ae:9f:1c:0f:05:89:32:b9:3b:
0a:86:c4:d8:aa:7b:28:21:e8:f3:09:fa:30:73:5e:
46:af:ff:38:e8:a2:cb:8f:33:8c:3d:86:4f:fc:2b:
dc:7a:e3:fd:d2:56:b5:f0:f9:74:fa:9b:1f:9a:68:
dc:38:69:9a:cf:ca:10:ed:b6:fd:b1:ad:55:20:c3:
17:a4:7c:0f:0e:50:5b:cb:f3:44:a0:e7:b1:2f:61:
77:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:BF:65:CA:1A:A8:52:DA:33:2D:38:03:91:DE:FA:73:71:22:68:05
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ad9d::/32
Signature Algorithm: sha256WithRSAEncryption
12:9b:fd:19:d5:ec:8e:97:92:97:c8:2c:e2:52:7b:cd:d8:6a:
4e:18:80:0d:c6:70:d2:d2:d4:83:8e:50:4a:86:75:22:48:a0:
5a:af:b9:e9:f7:fd:7b:84:88:f3:70:e7:d0:4a:81:82:42:01:
ee:26:06:4d:c4:44:73:6c:d4:6e:c7:6d:dc:ba:69:c9:e8:76:
4b:02:5e:c1:81:08:a8:52:cc:c7:65:6f:ed:d5:3b:db:79:dd:
0d:e4:9b:ff:81:df:97:ba:9f:eb:28:46:8d:14:73:a8:32:f3:
63:dd:b7:9c:11:e0:8b:60:8a:ba:7b:c7:61:34:b3:84:aa:28:
c7:e8:d3:1c:b8:5a:d0:f8:03:33:86:61:9b:19:a3:ba:48:27:
c4:d1:d0:10:6c:ba:22:ea:70:dd:24:d4:d2:64:f2:16:f2:13:
31:a1:37:ce:b1:76:56:62:88:4a:05:eb:34:53:00:08:d2:ea:
8b:70:eb:14:28:b6:93:25:81:a9:df:ab:d3:24:b5:97:b0:ca:
99:00:d1:73:c3:22:7d:dc:0a:7a:1f:03:ed:10:93:2a:24:dd:
d6:5f:f6:78:9e:8c:d9:f6:33:7d:b8:ab:f2:42:bf:c4:cd:d4:
f3:f6:80:d6:a6:3e:4f:b8:8a:f2:03:bb:00:bc:02:af:61:ef:
e2:dd:4c:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:12 2026 by rpki-client