Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146166.roa
File: AS146166.roa (raw, json)
Hash identifier: f22I+dXd+JVtkPCIcI51He2OKbzVkCohsHI0YjfBBT0=
Subject key identifier: 72:E5:E1:D7:95:DC:9B:FC:4C:80:F2:BC:3F:8C:06:8B:64:F9:8B:34
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3B39A6CA1E2FDFA408C78EDF7A0711E4F5978251
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146166.roa
Signing time: Tue 26 May 2026 02:34:53 +0000
ROA not before: Tue 26 May 2026 02:29:53 +0000
ROA not after: Tue 25 May 2027 02:34:53 +0000
asID: 146166
IP address blocks: 240a:adbc::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:39:a6:ca:1e:2f:df:a4:08:c7:8e:df:7a:07:11:e4:f5:97:82:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:29:53 2026 GMT
Not After : May 25 02:34:53 2027 GMT
Subject: CN=72E5E1D795DC9BFC4C80F2BC3F8C068B64F98B34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1b:65:4d:63:19:05:8f:13:6a:87:64:e1:66:
e8:c0:2d:a0:00:7e:cd:5c:58:33:b0:2c:a2:8a:84:
16:f5:ab:c3:9a:cb:a5:e8:f3:1f:49:f5:0f:c4:2d:
9e:31:e7:67:89:98:bc:13:9d:7f:1d:eb:9b:21:92:
d5:18:01:e5:ba:c2:4b:42:4d:e0:99:8a:cd:06:1d:
c6:cf:3e:86:bd:aa:4c:e8:fc:4d:43:4d:35:5b:6c:
18:ac:0e:cf:96:5e:ed:59:a5:48:12:19:7c:53:32:
90:a9:08:12:b5:15:5a:2e:5e:8d:d3:2b:6d:f7:9b:
ec:12:3c:59:ee:a4:e3:01:cd:35:aa:5f:9b:c9:07:
b7:9d:71:d0:86:ad:d1:a0:8b:0f:6b:b5:ff:ec:ce:
e8:75:b8:b7:7b:17:2d:ba:a8:46:a6:d0:4b:30:2e:
b6:9d:d9:a5:52:81:a4:f3:c5:e8:1b:93:80:e1:77:
75:c3:07:27:00:a6:78:71:a3:f9:11:9b:f3:ec:e5:
a1:f4:7d:8a:47:41:27:1b:15:2a:a0:21:39:cc:5f:
d6:e4:f3:6e:e8:d7:89:39:1c:25:59:b5:d7:5a:26:
74:58:a6:13:bd:b4:7b:36:db:44:97:eb:e1:6d:77:
d3:fa:4e:f8:91:8c:22:e6:86:b2:2d:71:51:fa:e3:
df:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:E5:E1:D7:95:DC:9B:FC:4C:80:F2:BC:3F:8C:06:8B:64:F9:8B:34
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146166.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:adbc::/32
Signature Algorithm: sha256WithRSAEncryption
5f:61:37:0b:a2:92:bd:b9:ca:68:59:63:04:6f:12:57:f7:78:
e1:5a:96:3a:c8:d5:da:d3:56:7a:c7:09:50:3a:4b:ce:87:4c:
33:40:12:b9:42:59:cb:78:13:9a:44:e1:2e:16:ed:fc:84:63:
ca:f0:e7:19:41:ef:49:c3:85:c8:53:8d:5d:52:6f:17:89:97:
16:70:4c:10:5f:01:4a:74:38:29:be:fd:80:fd:47:2d:cc:f9:
fe:3d:7a:af:66:64:3f:fc:22:8d:49:bb:55:f6:a9:6c:4d:b8:
eb:e4:72:62:89:a6:62:fe:d3:75:c8:b4:88:d3:d8:29:c1:84:
f2:58:e7:3e:a5:d0:bd:89:7d:22:d1:f4:bd:71:fe:86:da:fe:
3a:21:15:bf:ed:c8:60:4b:9c:ad:4a:44:58:b4:c6:c4:6b:6c:
24:73:94:5b:47:b1:37:d5:ad:2e:aa:80:9a:04:e7:99:e0:76:
0a:44:52:41:b1:9d:e3:8b:4d:6c:40:6f:86:be:17:a3:3f:1e:
79:47:91:39:14:b4:2e:a1:1b:be:52:8b:0b:2c:b4:d6:fe:4b:
79:45:72:7d:c0:ca:78:19:21:a9:cf:0e:f3:1f:aa:f0:99:c0:
19:5d:6a:6a:96:dd:d0:af:8f:8f:1c:db:30:e3:13:73:c5:49:
7b:99:e6:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:50 2026 by rpki-client