Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146231.roa
File: AS146231.roa (raw, json)
Hash identifier: KuNukwDBacDRaPdw2WRbBP1SLgycHJgzGH+puuvtNg8=
Subject key identifier: D2:13:A1:A6:C9:C6:86:80:0F:54:E0:99:12:7A:37:D4:14:E7:6F:E0
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 52B127F47968352EF715459121C5913117A875D6
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146231.roa
Signing time: Mon 25 May 2026 06:48:49 +0000
ROA not before: Mon 25 May 2026 06:43:49 +0000
ROA not after: Mon 24 May 2027 06:48:49 +0000
asID: 146231
IP address blocks: 240a:adfd::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:b1:27:f4:79:68:35:2e:f7:15:45:91:21:c5:91:31:17:a8:75:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:43:49 2026 GMT
Not After : May 24 06:48:49 2027 GMT
Subject: CN=D213A1A6C9C686800F54E099127A37D414E76FE0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:50:1c:ac:64:d0:8e:32:35:ca:9c:4d:5c:92:
a0:7f:43:5a:71:77:1c:c0:58:43:59:fb:ea:a9:2e:
82:1f:75:50:76:90:31:18:53:95:86:7d:cd:1b:2d:
aa:02:51:98:bc:d6:89:22:e8:3a:bb:5e:6c:a8:c3:
de:60:69:30:c6:80:a0:61:a3:b8:77:68:03:88:47:
42:f8:58:8c:42:a4:17:35:8e:f8:2a:f3:d6:60:f1:
d5:62:a4:00:d9:6d:47:29:55:f2:a8:41:15:12:be:
85:f5:4e:44:5d:a7:6d:b8:6b:9f:e1:da:45:a5:43:
83:e7:73:b7:a3:ff:1b:c3:ed:90:aa:b9:14:b5:3b:
87:ff:23:0e:15:6a:19:27:af:8a:e0:fe:94:ec:3b:
a2:d0:46:09:bb:a1:bd:6e:57:c7:37:a5:82:76:c0:
81:e5:a0:fb:67:6e:9e:44:95:da:f5:6b:ae:b4:a5:
83:83:ed:55:d4:1e:e6:56:23:a4:46:f7:48:57:88:
62:fc:37:4b:5f:0b:0a:63:a8:58:4e:15:94:b0:f1:
3f:76:91:35:6b:6a:a6:c2:38:b9:7a:c3:50:41:be:
ee:f9:a5:c9:58:ab:84:52:99:80:e7:f3:72:4c:fb:
26:fd:39:23:f7:77:bf:c9:25:0f:84:2e:92:eb:1f:
f3:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:13:A1:A6:C9:C6:86:80:0F:54:E0:99:12:7A:37:D4:14:E7:6F:E0
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:adfd::/32
Signature Algorithm: sha256WithRSAEncryption
8e:6b:47:34:c4:49:8c:46:ed:04:3a:7f:59:3d:5a:a6:17:85:
a0:a2:7b:8a:5d:18:a1:a1:94:cb:ec:a6:14:71:2b:cf:59:3a:
3f:9b:e1:10:84:29:01:de:89:0b:c9:19:22:ea:4e:90:63:5e:
3a:11:10:62:d9:04:d7:99:49:e5:74:94:fd:77:d9:0d:b6:49:
4f:87:be:3d:be:7a:13:ac:ff:40:1d:64:0b:ab:39:3b:cf:10:
88:20:33:12:10:1a:25:de:e3:dc:5a:08:07:a4:54:97:67:1e:
1f:f6:d2:af:ff:23:a5:a6:7b:26:a2:ce:ce:f9:24:d4:c6:78:
d0:e5:20:65:3f:7b:d1:36:73:2e:9a:de:e2:59:ea:d0:75:26:
6d:9a:80:36:a6:af:95:28:2f:85:b3:05:14:a1:ea:b1:ff:ec:
1f:b1:92:00:de:11:84:f4:fd:d3:33:60:9b:ac:8d:2c:65:7e:
c1:a9:e7:df:75:7e:60:68:74:36:93:29:04:e4:1f:85:5b:6c:
10:bd:76:f9:61:a4:f2:01:73:24:92:5b:ec:b6:7d:c2:ce:a3:
cb:d1:56:e0:a2:0c:2b:9d:18:6d:2f:3c:ff:2d:be:8e:d5:b6:
fe:0e:ff:83:b5:1f:20:16:48:72:c2:74:0a:f0:c6:06:35:03:
99:89:1f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:49 2026 by rpki-client