Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146188.roa
File: AS146188.roa (raw, json)
Hash identifier: x37Bmk3HaFESU39ErJZteQGLehdO5GzfNMWN7fD1d8Y=
Subject key identifier: 37:2D:15:F7:86:7A:F2:B9:A9:29:11:8E:46:AA:5E:03:66:B1:5C:3D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 61E84AA874C940FBA9978B1D920AAEFCFB80ABDB
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146188.roa
Signing time: Mon 25 May 2026 01:19:54 +0000
ROA not before: Mon 25 May 2026 01:14:54 +0000
ROA not after: Mon 24 May 2027 01:19:54 +0000
asID: 146188
IP address blocks: 240a:add2::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:e8:4a:a8:74:c9:40:fb:a9:97:8b:1d:92:0a:ae:fc:fb:80:ab:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:14:54 2026 GMT
Not After : May 24 01:19:54 2027 GMT
Subject: CN=372D15F7867AF2B9A929118E46AA5E0366B15C3D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:bc:63:3d:1d:7d:88:5a:c7:9d:c8:f0:be:32:
1d:91:5f:c1:46:6f:c1:28:a4:93:fb:92:30:2e:01:
02:06:71:a0:05:7c:21:34:f6:6f:f2:b4:88:2c:9a:
06:0a:c6:48:5e:87:84:fa:af:4e:85:3a:5b:fd:43:
d1:61:f8:62:35:a9:ba:58:0a:80:8c:62:39:27:2c:
76:85:43:26:1e:c1:fe:fa:7e:43:eb:03:ea:7a:48:
f8:7a:2b:5b:fe:17:15:de:67:ff:b7:ac:93:1e:56:
1d:71:3c:a7:1b:58:5a:ec:5d:4e:07:e0:5c:41:2b:
c9:78:2c:54:9f:c0:a1:30:63:b4:50:e7:74:0e:c5:
e3:35:83:e4:f7:c2:67:65:c1:b5:4a:07:43:e7:ed:
d0:42:b2:5a:34:f7:a4:b7:b0:0d:80:18:ac:a1:e4:
50:bc:d4:dc:94:ed:da:13:56:48:51:6a:bc:43:34:
29:cf:ee:82:eb:69:5c:92:e1:e4:22:02:d2:9f:15:
ce:0a:61:64:2e:83:ba:dc:47:38:e0:41:67:3f:29:
e8:aa:c5:1e:34:e0:09:10:7d:1d:8b:43:40:cd:3d:
8d:3e:b2:ba:16:c3:43:a9:ef:87:f5:8f:68:04:45:
26:54:7b:be:0b:95:ff:56:94:5a:b6:ea:7f:e6:b5:
48:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:2D:15:F7:86:7A:F2:B9:A9:29:11:8E:46:AA:5E:03:66:B1:5C:3D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146188.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:add2::/32
Signature Algorithm: sha256WithRSAEncryption
7f:44:f4:34:48:bb:a6:a4:2a:f3:38:7f:dc:30:b6:90:68:45:
4d:8e:38:61:f7:5c:d9:3d:f7:ff:61:4b:60:f6:f6:6f:a9:77:
40:4f:03:ff:02:b9:e2:5b:0c:7d:e9:a6:fd:06:d4:3e:ce:0d:
f2:fa:7d:e8:1e:9e:cc:78:84:ec:1d:4b:d1:38:3d:ba:37:55:
81:03:b9:f4:88:e7:5d:a9:fd:08:7c:07:b3:73:70:76:02:68:
d2:5a:85:f4:49:ad:f2:df:31:d4:9f:04:36:4a:09:9d:d9:8d:
77:72:5e:f3:95:1c:c2:02:f9:43:fe:50:c0:16:20:34:ee:c7:
d7:e3:f1:01:25:28:e8:47:30:98:88:0c:0b:8a:3b:dc:ee:7b:
3b:d2:7d:d0:03:d1:06:08:c9:a2:08:84:51:32:0f:98:f8:a5:
49:76:99:1b:0c:c0:12:0d:8a:13:bf:93:1d:50:2e:a4:db:86:
b6:e3:06:27:03:35:fb:65:a2:2e:04:36:9c:88:3d:0d:05:3f:
11:38:91:7d:24:df:04:73:b6:8c:1b:56:0c:79:0c:d7:c1:5e:
09:88:5f:4b:39:bf:a7:11:eb:fb:20:a2:bc:6b:3c:a0:5e:98:
74:08:67:cb:82:33:60:65:aa:b5:36:2b:15:58:db:99:f1:e1:
33:ee:41:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:07 2026 by rpki-client