Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146175.roa
File: AS146175.roa (raw, json)
Hash identifier: LmTAk9sX6ksbtUKTe2aecfBqpxlMN10laHFvM3aide8=
Subject key identifier: D0:7A:BC:C8:A6:72:0B:4C:79:74:EB:04:FE:B7:D6:42:E6:BE:51:BD
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 68F13D0ACA4FF8C9FC7E08FC6DAECC1F3BA1CBE3
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146175.roa
Signing time: Fri 22 May 2026 06:05:34 +0000
ROA not before: Fri 22 May 2026 06:00:34 +0000
ROA not after: Fri 21 May 2027 06:05:34 +0000
asID: 146175
IP address blocks: 240a:adc5::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:f1:3d:0a:ca:4f:f8:c9:fc:7e:08:fc:6d:ae:cc:1f:3b:a1:cb:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:34 2026 GMT
Not After : May 21 06:05:34 2027 GMT
Subject: CN=D07ABCC8A6720B4C7974EB04FEB7D642E6BE51BD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:17:fb:f3:89:eb:95:1a:83:6b:c6:bc:69:08:
3b:e8:fa:7b:8e:d7:95:37:65:d6:9e:7b:be:70:3c:
92:2b:72:6c:8a:29:0a:8b:44:73:d1:21:9e:b7:89:
77:ad:4a:22:da:e5:09:17:05:5a:42:6a:4d:ff:70:
48:43:c0:fe:38:8c:3d:6e:a8:25:7f:3b:51:d7:f3:
11:b2:41:f5:52:ac:c7:57:a0:57:25:40:8d:fb:bf:
81:6d:36:58:2d:be:00:65:61:cf:6d:57:78:45:e4:
e6:75:37:22:43:27:54:6f:27:31:eb:1d:c9:85:c4:
19:f2:e2:85:2f:68:9f:0a:be:27:4d:b4:09:95:d8:
20:cf:25:9c:fb:1b:08:7c:93:d6:b5:ee:65:b9:c4:
c1:da:22:cf:16:09:b9:2c:13:22:f7:e9:45:98:79:
be:86:13:a0:e8:17:0c:7a:83:c9:41:c7:1b:a4:9c:
ed:aa:67:5a:f9:92:37:4e:50:c9:5a:d2:f6:73:cd:
fb:67:ab:29:d3:f5:c8:b7:f3:80:85:30:e3:8c:cf:
51:4e:d3:6c:3d:cd:e8:50:a5:fd:12:d8:c0:57:dc:
74:5e:65:94:d5:ea:24:10:16:80:35:d5:8f:de:6b:
16:4c:d7:17:5f:b1:78:d7:a7:99:f5:16:ce:c3:05:
66:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:7A:BC:C8:A6:72:0B:4C:79:74:EB:04:FE:B7:D6:42:E6:BE:51:BD
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146175.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:adc5::/32
Signature Algorithm: sha256WithRSAEncryption
ac:07:ad:8a:b4:a2:c6:ab:ab:68:e4:f5:0c:f5:e8:fe:9d:1d:
c8:91:5a:fa:52:d4:53:c5:70:47:69:06:af:c7:09:cb:ed:95:
06:78:83:03:01:8c:9c:7b:28:d3:09:aa:f9:a0:cc:02:71:5f:
7b:52:93:03:1e:00:15:0b:ad:69:79:b6:c4:45:1e:74:a9:9a:
e6:cc:ff:da:b4:be:e6:37:f6:26:13:13:0e:09:10:93:4a:0c:
ee:1d:55:4e:eb:1f:bd:29:03:e6:db:30:32:7b:ba:70:de:fb:
d5:bc:12:8d:42:1c:4e:5d:67:ae:a7:bc:cd:5c:bf:89:42:a9:
e4:37:a9:e3:5c:d2:22:b3:8c:db:af:af:0f:d3:c2:67:22:f6:
84:12:2d:b3:b2:6e:95:71:c5:ae:8d:bc:d8:84:3d:6f:d4:6d:
e0:a6:fe:6a:b4:41:d0:f0:ea:25:a4:7f:b8:58:fc:43:af:e5:
dd:5a:e4:ec:29:dd:87:d0:79:91:f7:b8:26:98:f7:80:61:2e:
73:f6:62:c2:af:41:fb:41:0d:90:50:e3:b8:b9:94:2a:ec:e8:
5a:bd:b8:b7:c2:b3:7b:ed:01:a6:60:db:47:70:df:1f:33:24:
cd:f0:ed:14:ee:4a:42:0c:c9:81:8b:0b:aa:06:78:aa:a1:b9:
ec:67:3f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:48 2026 by rpki-client