Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146139.roa
File: AS146139.roa (raw, json)
Hash identifier: 9OzFbCVYZFJHjUEnrtmNGn7TeGZCF7Ehh7hRtT7rkeI=
Subject key identifier: 45:1C:C2:6A:C5:01:56:45:0F:1E:BB:43:D8:DC:47:09:85:24:7B:4F
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7D99D2F22ADE5AA44F276829EDAAACD8F7386D5D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146139.roa
Signing time: Fri 22 May 2026 04:27:14 +0000
ROA not before: Fri 22 May 2026 04:22:14 +0000
ROA not after: Fri 21 May 2027 04:27:14 +0000
asID: 146139
IP address blocks: 240a:ada1::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:99:d2:f2:2a:de:5a:a4:4f:27:68:29:ed:aa:ac:d8:f7:38:6d:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:22:14 2026 GMT
Not After : May 21 04:27:14 2027 GMT
Subject: CN=451CC26AC50156450F1EBB43D8DC470985247B4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:cd:51:40:a4:81:b1:22:67:a2:bd:de:17:45:
71:af:b6:62:de:4c:08:bb:cc:b8:13:ab:98:cb:aa:
a2:e2:b1:b0:08:1c:5c:0d:95:4b:77:87:e2:b6:15:
14:59:ca:d4:b0:00:91:3c:7f:53:ee:a4:be:18:ec:
ac:8c:1c:30:4a:57:d8:be:1b:79:33:60:67:43:2d:
9c:d5:74:2e:e6:1c:af:e2:f7:33:f6:92:79:1a:eb:
a0:1d:22:77:b7:28:30:dc:88:33:62:30:ad:46:9a:
03:77:62:b2:3c:8a:93:37:b4:47:e8:5f:eb:0c:32:
65:e8:35:06:c3:20:ea:62:fd:5a:b5:4a:ff:cc:06:
51:0f:0e:84:8b:f2:e1:94:7c:ed:b8:57:a2:d4:7a:
3c:1e:76:c3:7f:e6:47:ce:c8:e7:64:9c:b8:4b:90:
fd:66:3e:e8:d6:ee:c2:b4:62:b1:40:ea:26:e4:9c:
f4:f6:04:aa:30:68:b1:8d:fa:23:12:db:c2:db:7a:
60:bc:b7:d7:2b:e3:6a:c6:41:8e:35:16:c9:f6:59:
60:0a:64:fc:f4:bb:f3:6d:e4:1f:4b:07:db:87:9e:
b3:67:7d:3c:37:1a:ff:c7:52:3f:0e:ae:ee:ea:7e:
bc:c4:95:23:c4:84:12:1c:30:cb:88:27:b0:54:d5:
9f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:1C:C2:6A:C5:01:56:45:0F:1E:BB:43:D8:DC:47:09:85:24:7B:4F
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146139.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ada1::/32
Signature Algorithm: sha256WithRSAEncryption
46:f6:20:3e:61:1c:0e:d7:82:7e:e5:46:60:4c:dc:27:41:57:
f1:cc:b1:6a:50:68:f5:91:97:39:ad:24:ac:66:43:c3:72:67:
3a:5b:d0:b7:ac:98:8e:82:05:76:a4:33:79:bb:49:e2:ca:6c:
78:6b:a9:68:20:39:7e:aa:3a:d9:39:f3:79:0b:45:17:16:7b:
b9:72:59:a0:64:22:9c:e2:3e:9f:b4:49:e6:f2:b1:6b:0f:1a:
54:16:6e:91:45:50:da:47:04:93:ed:89:d6:79:a6:16:71:24:
8f:5b:b6:05:cb:af:d0:3f:0d:a6:fe:ac:8c:79:9e:db:72:f2:
db:6a:76:05:61:ff:bb:a8:bf:aa:bc:72:66:e2:1a:cc:8c:1f:
87:63:b0:5e:a1:ac:6d:b1:be:cc:b2:36:a3:ac:e2:8e:64:1e:
67:11:80:51:12:b2:5e:1b:38:0c:15:8f:2a:02:3e:06:1a:77:
b5:3a:a7:53:49:97:5c:ba:99:80:19:d5:9f:34:0f:0c:13:8a:
02:37:f4:0c:01:78:e5:bf:fd:ec:3b:7c:9a:fb:28:0a:f3:e7:
23:f5:87:e5:7a:1f:7e:f1:e6:3b:f2:b3:b9:47:81:b5:05:c0:
c7:68:59:8a:3f:08:29:43:7d:d0:31:53:42:17:73:9d:0d:ff:
67:6b:d0:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:36 2026 by rpki-client