Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146221.roa
File: AS146221.roa (raw, json)
Hash identifier: UTFI+MdsXXHIuGH2K5V7jIFLsY6zpDiVtj/hAcyBwEM=
Subject key identifier: B2:3A:CF:64:CB:23:32:B1:66:87:35:15:93:C8:B4:59:BF:05:82:CC
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 07F26D36015BA3EF5E66B810E1029FCF353783A1
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146221.roa
Signing time: Tue 26 May 2026 03:16:44 +0000
ROA not before: Tue 26 May 2026 03:11:44 +0000
ROA not after: Tue 25 May 2027 03:16:44 +0000
asID: 146221
IP address blocks: 240a:adf3::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:f2:6d:36:01:5b:a3:ef:5e:66:b8:10:e1:02:9f:cf:35:37:83:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:11:44 2026 GMT
Not After : May 25 03:16:44 2027 GMT
Subject: CN=B23ACF64CB2332B16687351593C8B459BF0582CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:54:2e:a4:7b:d1:65:cd:48:9c:66:51:3b:2c:
c4:e2:df:51:4f:cc:8a:63:2b:5b:29:eb:38:f1:12:
b3:62:b7:28:96:e5:cb:32:b0:da:13:6f:44:7d:1e:
91:0a:49:15:87:88:7e:2c:67:43:3f:e1:1b:64:5b:
a1:b8:19:ed:4c:cd:67:b4:65:48:27:1a:e9:a9:07:
96:c3:88:3a:23:a0:3e:d0:79:06:45:97:8b:79:10:
87:af:ab:37:d0:ea:9d:9d:90:e4:55:87:99:76:25:
49:f2:ab:b1:87:c7:80:78:31:d5:ac:9e:42:03:54:
f5:77:f5:5b:5f:4a:6c:38:e5:a9:2d:9c:ca:81:c7:
23:dc:46:b3:2a:b2:31:0e:d0:2e:b6:4a:ee:24:c7:
d5:60:60:1e:a0:44:71:ef:f6:89:58:a0:3f:21:5a:
30:a8:e5:b9:ec:f9:40:51:b8:5a:02:c3:3d:b7:67:
19:b8:78:b2:f1:4e:cf:d8:c2:ca:83:46:be:80:23:
64:0d:ba:42:32:64:44:62:53:73:f8:60:3e:18:3d:
48:88:50:6f:5a:f6:73:d7:8f:e7:36:a6:25:d3:53:
79:d2:e0:9d:26:87:ce:86:20:58:3a:42:62:32:7b:
53:b8:a3:66:5c:7e:fa:2c:3e:d3:e0:1d:66:42:55:
a0:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:3A:CF:64:CB:23:32:B1:66:87:35:15:93:C8:B4:59:BF:05:82:CC
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146221.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:adf3::/32
Signature Algorithm: sha256WithRSAEncryption
73:14:2f:77:6e:a4:b0:9b:ff:5f:22:a1:b1:12:2a:c6:e5:a0:
45:75:c7:e6:da:6c:7b:8d:e7:28:81:89:8b:88:fa:e9:fb:80:
65:22:1f:b9:e9:33:06:cb:bf:85:a0:f4:0d:29:d4:82:3c:42:
ef:8e:ca:72:21:9c:81:aa:3e:e3:88:87:77:80:00:41:00:1f:
c8:ef:71:23:fa:d9:86:e0:61:15:71:a9:52:77:c5:49:8b:2e:
ba:aa:31:3a:5f:4a:3a:b1:4f:57:8c:5a:ff:75:5b:7f:de:14:
be:03:f7:c3:09:54:9f:98:73:07:e1:9f:18:70:df:59:61:ef:
5d:ec:80:46:65:fa:4e:49:9d:f2:39:2b:c9:2b:39:54:c3:2e:
88:54:99:03:a1:66:a0:f3:86:d1:08:cb:54:3e:9b:1d:ca:dc:
81:0e:68:4c:a8:c5:9c:d4:27:6c:3e:54:dd:96:16:60:4a:a2:
64:19:6c:04:59:7d:f8:58:4b:89:f6:01:9e:09:84:c9:37:e8:
c8:b5:b4:2b:23:08:ce:ef:4d:d7:ca:29:dc:cf:2a:4f:2f:65:
87:7c:45:83:81:86:f0:6a:0f:81:76:40:87:06:93:58:ab:f9:
6f:77:f7:65:b1:66:c0:51:a4:89:e3:92:21:95:76:33:b3:26:
d1:68:ad:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:52 2026 by rpki-client