Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146227.roa
File: AS146227.roa (raw, json)
Hash identifier: oucPb5uFDgs1e0B8x11aX7NjPOm35/tvDxfIYa5RQ7k=
Subject key identifier: 2B:23:B2:C2:80:AF:AC:21:0B:A5:9B:A5:6C:68:FA:4D:39:05:FC:51
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 570230B86DF06DF0FA2845C7CDC29291771A1B0F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146227.roa
Signing time: Fri 22 May 2026 04:08:16 +0000
ROA not before: Fri 22 May 2026 04:03:16 +0000
ROA not after: Fri 21 May 2027 04:08:16 +0000
asID: 146227
IP address blocks: 240a:adf9::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
57:02:30:b8:6d:f0:6d:f0:fa:28:45:c7:cd:c2:92:91:77:1a:1b:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:03:16 2026 GMT
Not After : May 21 04:08:16 2027 GMT
Subject: CN=2B23B2C280AFAC210BA59BA56C68FA4D3905FC51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ff:bb:96:b0:cd:ac:81:ed:eb:6b:db:a3:98:
10:75:04:4c:3d:36:56:2c:bf:79:64:8b:15:f1:25:
c2:93:3a:7a:9d:8c:81:c0:a9:34:f5:5d:08:c8:13:
66:53:0b:72:2b:01:3c:ed:43:62:cd:84:53:de:c3:
2e:31:9c:c3:80:94:35:fc:5a:31:80:9d:5e:b1:7d:
16:e2:ae:c9:af:90:e9:0a:df:ab:4e:ed:3d:35:05:
28:4e:e0:ff:a3:5b:0b:55:f2:78:e8:08:19:92:65:
5b:54:5f:9b:bb:02:14:73:be:38:9a:67:af:a0:18:
1e:5d:b2:64:99:1d:9b:09:27:e6:9e:5f:96:6c:ef:
9d:30:54:21:5d:e3:e6:63:88:39:55:6b:0d:ca:32:
e3:03:c8:3b:0b:ff:f5:10:52:fa:b5:50:21:72:97:
26:0d:51:1e:84:a8:ec:6e:d3:8d:9d:a9:c6:a9:64:
1a:be:17:fd:4b:e4:40:b2:3d:4b:ce:ba:a9:f2:26:
11:35:64:7e:f5:1c:46:49:eb:98:cf:d3:bf:12:ef:
16:1b:03:29:89:b5:12:7f:74:e8:f2:a4:de:fb:aa:
c0:5f:19:7e:cb:35:b5:30:9f:8c:63:b0:e9:eb:4e:
aa:d3:a7:b3:9f:ce:49:c9:1f:0f:61:a0:e5:0a:5b:
b9:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:23:B2:C2:80:AF:AC:21:0B:A5:9B:A5:6C:68:FA:4D:39:05:FC:51
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146227.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:adf9::/32
Signature Algorithm: sha256WithRSAEncryption
a1:e9:3a:a8:36:83:f5:f2:1b:b6:57:bc:98:22:b1:13:6a:b2:
69:2c:b0:a0:93:fb:68:b7:56:8c:a3:25:6d:de:5b:f7:05:75:
1f:8f:7a:82:a8:14:60:c0:49:53:58:23:66:a3:fb:bf:aa:ec:
b3:fd:14:00:6d:24:b7:1e:8b:51:2f:72:f1:a0:bc:81:4e:c0:
2b:60:e0:a2:1e:cd:80:79:f5:58:f5:63:ae:97:21:0b:55:84:
b4:cd:f8:74:b9:fe:02:39:83:a2:0b:36:14:49:16:8f:0a:2f:
d8:5d:4f:17:6f:67:20:7e:67:e1:17:2f:3e:4d:6b:a9:8d:86:
b4:c4:96:38:ff:57:64:c7:6f:5d:36:0c:de:6d:a0:3b:8b:9a:
54:d7:be:ed:e4:f0:a8:76:62:bb:8c:fd:a6:09:38:1a:c6:b5:
85:29:ee:2d:f4:56:61:44:dc:70:cd:fb:42:83:41:90:fb:ac:
6f:aa:77:fe:49:ab:93:70:a6:de:aa:8c:79:01:a2:fa:d7:50:
12:a0:c7:b3:85:e8:4b:8c:48:3e:2a:a8:db:d6:8d:86:c9:8d:
36:ee:6c:95:53:56:b0:4c:a2:ba:d2:f1:06:9e:6d:76:8e:36:
23:46:d5:25:38:98:d2:0a:de:c1:c2:38:10:be:c5:a3:70:de:
b0:87:28:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:19 2026 by rpki-client