Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146209.roa
File: AS146209.roa (raw, json)
Hash identifier: 1/3xJXIicoAUEFdt4IAOVkNiJFz2f6sW/XYHZ47OiU4=
Subject key identifier: F8:64:C9:C4:C0:27:A2:68:7D:2E:97:0D:2C:62:9A:C7:2C:2C:CE:DE
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4F8E79EBFE0ABADEF6516697EEB74819241428D9
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146209.roa
Signing time: Fri 22 May 2026 07:41:04 +0000
ROA not before: Fri 22 May 2026 07:36:04 +0000
ROA not after: Fri 21 May 2027 07:41:04 +0000
asID: 146209
IP address blocks: 240a:ade7::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:8e:79:eb:fe:0a:ba:de:f6:51:66:97:ee:b7:48:19:24:14:28:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:36:04 2026 GMT
Not After : May 21 07:41:04 2027 GMT
Subject: CN=F864C9C4C027A2687D2E970D2C629AC72C2CCEDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:ba:1e:50:b3:27:6a:4e:19:83:f9:f8:16:89:
4f:6f:0f:c5:c0:99:77:91:4e:76:7f:d7:1b:eb:7a:
5a:e0:91:7a:04:cf:56:3b:f9:45:7e:d2:ab:29:aa:
c4:cb:15:bd:16:64:ea:38:c2:2d:b3:2e:37:68:c3:
b7:a0:bc:b5:f4:e8:97:7b:fa:26:7b:46:6b:28:0c:
d0:bf:ff:d4:77:11:76:7a:fc:62:2c:c7:1f:5e:7c:
5e:6b:44:60:b0:6b:b6:cd:f8:78:7c:79:57:b9:d8:
e0:c8:8d:36:de:e0:c7:dd:40:e3:40:bb:ba:af:b2:
e9:18:d7:ed:41:fc:dd:8c:b1:0b:02:8f:4f:f3:ae:
84:0d:5b:0d:af:a7:2c:10:ac:ed:45:fa:ba:24:2d:
63:e2:6b:aa:6a:bc:b8:b0:09:b0:fb:cf:9d:e8:49:
b5:9c:23:83:03:80:86:6c:0e:cf:c5:79:01:db:ed:
c7:bf:1e:c7:cf:2c:1c:28:7b:cb:7f:0c:86:c2:a6:
dc:5f:03:2c:48:5e:47:5c:4d:5a:63:e9:40:0a:3b:
3a:88:73:41:29:f7:41:46:1c:c4:ae:e0:23:70:0e:
04:89:4b:a1:e4:34:9c:f7:e6:9c:2a:35:4d:b6:b2:
70:be:8e:26:83:ba:36:cc:ae:98:a8:76:36:ef:02:
e2:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:64:C9:C4:C0:27:A2:68:7D:2E:97:0D:2C:62:9A:C7:2C:2C:CE:DE
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146209.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ade7::/32
Signature Algorithm: sha256WithRSAEncryption
6e:0a:7a:00:6e:a3:9b:d8:66:63:58:12:b7:32:a8:6c:19:25:
23:89:19:87:31:2a:bb:bb:bb:4a:de:f4:81:16:b9:6d:02:da:
de:46:41:d8:7f:bf:4e:f0:21:ee:05:f9:ee:78:ea:3e:7c:fa:
b5:fe:63:9c:78:72:e7:56:02:a8:0d:bd:f7:29:e0:b5:45:c2:
35:43:50:d2:de:44:cc:53:4b:a3:ea:86:ae:71:fc:00:5e:5f:
4c:fa:18:6e:14:44:5b:b6:ac:22:93:6d:a0:c7:c7:cb:27:45:
fb:c8:42:bf:3f:08:e3:02:3f:c3:f0:a2:af:23:01:30:dd:bc:
e1:6f:c9:52:05:37:60:1e:5b:ea:2b:18:d2:d9:17:9a:dc:d1:
71:14:85:a2:c3:bd:ed:6b:51:b3:fc:c7:4a:dc:67:78:dc:c2:
ea:93:8b:76:2e:c7:45:f6:94:0b:a6:54:95:4a:71:c8:5e:27:
a0:eb:1b:5f:95:88:70:e1:80:81:0b:58:12:d8:05:a0:7c:33:
67:4c:61:e3:af:c0:0d:3a:cc:d3:fd:d4:1d:e2:14:fc:74:cc:
88:1c:26:c0:ef:c5:89:7d:d9:9a:64:40:4e:ed:47:4d:ae:b3:
9f:78:eb:19:be:4c:97:55:14:72:f4:49:24:ff:4f:b7:23:0b:
0f:b0:32:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:59 2026 by rpki-client