Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146155.roa
File: AS146155.roa (raw, json)
Hash identifier: kupwm3NtcaTnz2A7CdeKxD4mNR5DZNJl3uo0a+T5ZT4=
Subject key identifier: 22:AF:0D:31:E8:E0:15:6F:E4:3C:4B:2D:21:7E:F4:D2:A9:9F:05:6F
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3A69703DCFC57BFC447855F861E1FB9A04BB5BE3
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146155.roa
Signing time: Mon 25 May 2026 01:19:57 +0000
ROA not before: Mon 25 May 2026 01:14:57 +0000
ROA not after: Mon 24 May 2027 01:19:57 +0000
asID: 146155
IP address blocks: 240a:adb1::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:69:70:3d:cf:c5:7b:fc:44:78:55:f8:61:e1:fb:9a:04:bb:5b:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:14:57 2026 GMT
Not After : May 24 01:19:57 2027 GMT
Subject: CN=22AF0D31E8E0156FE43C4B2D217EF4D2A99F056F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:1b:44:74:bd:d6:c8:8c:55:8a:8c:a3:0a:aa:
c8:1d:51:e9:70:27:8c:4e:23:39:7b:ca:08:e1:9c:
01:3a:40:75:9c:c5:be:26:c3:7b:ad:1f:fb:75:6b:
b2:50:c1:d7:3a:9f:c7:b3:85:5e:cf:28:45:b4:9e:
87:18:ca:76:c6:76:ab:79:34:44:31:63:ee:6e:38:
f2:95:67:c0:12:1b:f1:d5:8d:d4:cc:b4:d0:bf:35:
b8:c4:46:49:84:a6:04:e0:eb:25:d5:1a:96:51:f7:
8d:be:54:ea:5d:85:95:33:15:dc:dd:59:4e:49:6e:
43:ac:81:bd:57:a4:44:82:dd:32:cd:5f:a5:fc:0d:
d6:27:a7:18:b0:87:04:b6:44:44:f3:2c:0b:f6:63:
da:d8:59:5d:8e:c3:5d:1b:c8:b9:72:04:98:e9:50:
82:8f:f8:ab:e9:39:a3:ad:84:f5:c6:46:ae:15:90:
0c:4d:dc:44:55:05:46:ba:b3:ed:06:3a:7b:0b:1e:
23:c3:b2:37:a2:c6:ec:c6:f6:ef:f0:28:00:6a:1a:
bc:14:a4:84:10:6e:68:81:e1:d5:4f:12:d7:c6:f8:
2a:a1:82:7a:3e:9c:22:d6:88:c3:8c:5a:25:af:81:
35:9f:08:55:3f:4d:85:60:8b:7d:9c:27:c6:17:d0:
a1:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:AF:0D:31:E8:E0:15:6F:E4:3C:4B:2D:21:7E:F4:D2:A9:9F:05:6F
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146155.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:adb1::/32
Signature Algorithm: sha256WithRSAEncryption
a2:95:8d:4c:62:d3:f7:27:99:7f:68:ab:94:4d:33:d6:74:04:
f5:2b:f5:bf:de:65:75:51:0c:fc:21:61:3c:a6:c5:0c:14:28:
98:6d:00:10:52:50:6c:1b:23:d3:ad:92:3a:dc:2a:a0:16:07:
4e:f2:9d:ee:7b:14:f8:c4:cd:3a:b8:26:79:8d:c1:6a:86:38:
a0:46:69:66:27:49:8d:01:e7:37:f5:35:96:42:f9:7f:ee:a8:
b9:65:dc:02:a5:4d:31:60:49:20:a8:8f:30:ed:60:33:f4:d1:
59:bd:37:a3:8e:4a:0a:47:42:4b:98:99:ce:66:04:67:45:95:
45:1f:81:0e:b0:00:cb:84:e1:cd:a6:c2:fe:e0:34:27:79:ef:
87:f7:88:d3:c5:22:c7:67:52:4c:7a:5d:34:d3:e7:b9:d1:ce:
25:09:69:82:9f:8d:6c:ca:d6:f5:1a:36:f5:5a:f5:d9:11:68:
02:93:1d:de:d7:ae:84:65:84:fc:13:5d:58:cd:75:8f:d1:f0:
f6:c0:87:ef:0b:5f:e6:66:17:57:a3:90:d0:50:db:8f:88:b2:
c4:6e:6f:6a:a3:66:9b:fe:76:38:ae:a4:f4:64:4e:47:f6:6c:
ec:45:a4:90:16:66:3c:b7:7f:2f:45:88:e8:3f:66:4b:45:a8:
fa:05:46:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:31 2026 by rpki-client