Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146213.roa
File: AS146213.roa (raw, json)
Hash identifier: Sn2Xf2ouMw1gBZFhwofyu5Noh4gkQhJVq7QuUiL6Etg=
Subject key identifier: 50:B8:2F:D7:5D:5E:9C:6C:B3:77:B8:20:21:AC:D5:AB:69:48:E9:94
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1D2BA19ECBE2F3376CFE1BEB5AA185DE4D36F540
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146213.roa
Signing time: Mon 25 May 2026 01:20:06 +0000
ROA not before: Mon 25 May 2026 01:15:06 +0000
ROA not after: Mon 24 May 2027 01:20:06 +0000
asID: 146213
IP address blocks: 240a:adeb::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1d:2b:a1:9e:cb:e2:f3:37:6c:fe:1b:eb:5a:a1:85:de:4d:36:f5:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:15:06 2026 GMT
Not After : May 24 01:20:06 2027 GMT
Subject: CN=50B82FD75D5E9C6CB377B82021ACD5AB6948E994
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5f:e0:b4:52:51:8c:3a:f3:1c:0f:b2:25:14:
b9:e6:f3:10:b8:7f:ac:1e:52:a7:c7:6d:5a:51:2b:
06:0b:e4:b1:78:87:ab:e5:f8:fb:65:cb:32:b0:f6:
0d:7e:91:05:67:3a:67:de:43:73:4d:5c:7b:3f:04:
47:9c:a3:a1:e2:5e:db:02:9e:78:55:14:71:d8:c9:
f6:30:ba:b4:1e:c0:56:8e:f0:b5:33:69:5b:91:e5:
ff:97:67:07:50:d0:17:6a:f8:1b:17:84:9e:8e:66:
42:a1:8e:3d:94:e9:da:c7:a6:71:c0:6a:0d:00:90:
4a:66:7e:04:2f:95:4e:56:3e:d0:16:af:ee:e6:16:
49:80:f1:8b:df:30:3c:6d:b2:a8:29:a0:1c:67:01:
db:4b:a1:d2:dc:a2:ff:2c:52:53:8a:98:ed:3f:50:
c6:5a:4f:c0:e1:c6:1b:2b:61:23:2b:be:db:24:46:
d5:68:d9:4d:a6:c2:ec:b2:0f:13:11:1c:7b:07:7e:
2f:f3:df:26:bd:d2:6f:67:12:f3:98:1e:7b:09:d0:
46:22:ab:73:0d:e4:35:48:84:94:b2:30:22:1c:37:
e8:88:b5:05:3f:4d:85:ad:01:2b:b4:bd:45:96:c4:
0a:53:bf:e1:80:99:eb:0f:7e:ab:1b:7c:cd:b2:02:
f7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:B8:2F:D7:5D:5E:9C:6C:B3:77:B8:20:21:AC:D5:AB:69:48:E9:94
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146213.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:adeb::/32
Signature Algorithm: sha256WithRSAEncryption
bb:3b:cd:2f:1e:53:c2:47:03:b9:d5:3c:f2:5c:e6:89:c5:5b:
49:b9:ad:dc:56:c4:d4:d5:60:c4:10:41:ba:7d:23:ec:71:80:
20:ef:67:34:85:9a:7f:7f:3b:ae:f1:5e:c9:53:d7:93:ad:e3:
99:1f:60:a2:44:bd:5f:1c:bb:27:db:c9:e4:67:c7:20:54:af:
85:c4:52:4c:90:2b:fc:31:5a:a4:75:a0:69:ab:ac:0c:9c:e2:
ae:77:2d:98:21:7a:c2:26:d9:82:68:5a:d7:3b:67:e9:a4:19:
47:fc:fc:1d:5a:22:09:5d:42:4a:66:bd:17:f3:8c:23:13:80:
7c:93:e2:bf:6d:a8:b7:1c:4f:38:37:fe:47:84:49:7a:90:07:
a3:41:23:7e:12:f8:59:99:3e:b4:df:07:9c:e7:cc:b7:65:c9:
89:5a:41:03:e6:bc:56:05:83:7c:30:13:d1:c9:5e:ef:ab:09:
ae:76:c2:52:be:1b:f4:1f:01:4e:1d:69:3a:96:73:47:da:5b:
3c:e0:92:e3:89:4b:e9:a8:a3:ed:78:92:ae:f1:fd:1a:ee:61:
8d:70:9a:eb:3e:29:85:ea:73:a3:d0:23:39:90:63:9f:64:f7:
cc:41:82:52:6b:22:44:20:4d:60:01:3c:e4:ea:88:7b:54:5f:
8f:cb:7f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:02 2026 by rpki-client