Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146200.roa
File: AS146200.roa (raw, json)
Hash identifier: Ki2hSZMKf8PlCZ/Ryhy32ktkyRPa9vXobW4+TMDW5VY=
Subject key identifier: D8:E7:5C:6B:D8:61:14:04:11:DB:01:02:E7:AB:24:33:A4:81:CA:DB
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1F872A156413023BBF871BDA8B68D5C4936A8787
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146200.roa
Signing time: Mon 25 May 2026 01:20:02 +0000
ROA not before: Mon 25 May 2026 01:15:02 +0000
ROA not after: Mon 24 May 2027 01:20:02 +0000
asID: 146200
IP address blocks: 240a:adde::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:87:2a:15:64:13:02:3b:bf:87:1b:da:8b:68:d5:c4:93:6a:87:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:15:02 2026 GMT
Not After : May 24 01:20:02 2027 GMT
Subject: CN=D8E75C6BD861140411DB0102E7AB2433A481CADB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:cc:d3:93:a0:6a:18:89:cf:ec:1d:1e:5a:8f:
a3:42:44:d2:e8:42:0d:ff:4c:cb:a7:fa:a4:68:77:
c3:63:b7:27:2d:1b:a7:7b:d6:91:89:3f:5e:ea:5f:
06:0a:a9:47:bb:17:ea:53:a3:10:96:7b:6d:25:0b:
8d:0d:9a:65:08:35:75:8d:5a:2f:69:fd:3e:56:a6:
45:59:50:00:eb:69:d0:16:31:f1:02:4f:d6:b6:4f:
2b:fe:63:c9:93:3c:e9:bc:1c:b9:a1:fa:69:a8:f5:
76:26:cb:8c:eb:19:9a:03:aa:4b:a3:f0:75:1d:9d:
a6:d8:67:ad:b1:bd:4c:a7:2b:ab:e4:41:d7:70:f5:
ac:18:a2:d1:a4:04:fc:5d:e8:59:a4:76:28:3a:5e:
e5:43:f5:95:bd:70:ff:2b:bf:7a:97:c1:b2:8f:ab:
57:26:5e:31:bc:3b:77:67:20:0e:00:3e:de:f0:41:
69:b5:fd:14:c9:49:7f:20:4d:75:eb:2f:f1:60:57:
13:72:87:7a:d7:24:dc:bf:a2:a5:5f:f1:8b:1d:e2:
92:1b:43:df:0d:57:c4:17:f1:e6:82:e6:89:48:72:
fd:84:c6:41:6c:e2:cb:75:1c:84:4f:1a:34:c7:16:
46:66:25:8e:ae:59:45:93:49:65:24:a7:be:98:bf:
b7:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:E7:5C:6B:D8:61:14:04:11:DB:01:02:E7:AB:24:33:A4:81:CA:DB
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146200.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:adde::/32
Signature Algorithm: sha256WithRSAEncryption
23:51:c9:36:03:24:80:d5:58:08:87:ba:b2:3a:94:61:64:38:
25:d9:4f:56:44:44:89:5e:67:53:bb:4c:d1:16:b6:0e:cd:04:
74:5c:18:c1:d1:00:70:50:a5:26:05:0b:0e:31:72:4d:3b:73:
cb:45:f9:2a:97:9c:e6:34:b4:86:eb:db:0a:23:70:ec:82:a9:
78:d1:b1:08:bf:98:5c:5c:ac:45:7a:b3:10:d5:7e:a8:8f:ff:
8b:76:ac:24:d2:9c:e4:4c:78:7f:d4:08:ed:bc:e5:54:38:5f:
12:5d:68:f3:82:fd:9f:6f:7f:c3:c6:81:e5:10:54:bf:97:6f:
8f:32:c2:e8:3b:ca:2d:47:ba:ef:ee:e4:8a:16:4e:87:71:ba:
f1:42:0a:6b:e3:dd:78:4a:cd:0f:1d:55:ab:30:1e:ba:38:db:
b8:6f:6f:2f:dd:03:45:28:b8:6d:37:1c:8e:20:1d:c7:64:88:
56:6a:7d:fb:34:32:60:08:6f:2d:80:81:c8:4b:6e:70:2b:63:
a0:1f:59:f7:2f:73:c2:4f:76:e1:63:c4:7c:b0:c7:3d:0b:0b:
75:32:da:5c:34:74:09:3d:c3:54:06:bd:30:c1:4f:f8:33:66:
b4:e7:a2:a7:cc:77:1d:3a:0c:6d:28:27:ed:de:84:70:8f:e6:
53:4b:1e:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:09 2026 by rpki-client