Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146240.roa
File: AS146240.roa (raw, json)
Hash identifier: 5TVz/BnXrfDc4SATowCzitHhrhr287UOvD6RNWlRZ0s=
Subject key identifier: 1D:66:AE:45:90:66:12:3B:D6:B3:7B:53:D4:11:32:FE:36:0B:F5:16
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0739BECB544F05326E289E2E413FC72C051B4B0D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146240.roa
Signing time: Fri 22 May 2026 06:58:52 +0000
ROA not before: Fri 22 May 2026 06:53:52 +0000
ROA not after: Fri 21 May 2027 06:58:52 +0000
asID: 146240
IP address blocks: 240a:ae06::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:39:be:cb:54:4f:05:32:6e:28:9e:2e:41:3f:c7:2c:05:1b:4b:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:53:52 2026 GMT
Not After : May 21 06:58:52 2027 GMT
Subject: CN=1D66AE459066123BD6B37B53D41132FE360BF516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:7f:0e:1a:c9:dd:02:1b:5a:8c:75:bc:3f:3b:
41:73:6e:85:77:e2:1f:a8:cf:ee:09:3f:87:86:2d:
4f:d5:11:3e:a4:81:d8:cc:a4:13:07:9e:7a:ac:f0:
b8:21:da:dc:43:01:16:43:5c:ce:83:6d:2f:17:df:
76:37:d4:13:03:7d:2c:25:e2:2d:4a:8d:cf:ea:d3:
00:60:af:d7:ff:f1:10:47:d5:e7:a6:42:c5:70:68:
cf:ac:a3:6e:41:bb:b5:7e:cc:45:20:3d:03:5a:00:
ed:39:d7:d9:b5:ef:f2:cf:38:1a:26:1c:a7:82:f8:
69:3b:33:bd:45:e0:e4:6d:30:e1:6a:e1:d3:c4:25:
89:67:ee:28:b9:55:e8:ba:05:e9:77:13:d6:ae:47:
80:38:ad:fd:47:e1:4b:41:80:2f:0a:a9:34:f6:3d:
35:7b:6d:4f:25:53:3d:29:0a:49:85:98:af:15:da:
c0:a0:65:0b:ed:91:7d:fb:d9:ab:1d:02:fc:6c:6e:
89:99:23:c8:57:c0:64:5e:42:6a:c3:c9:da:60:1a:
55:6f:75:4c:e0:f5:4d:20:84:d6:3d:82:4e:54:bd:
e1:44:bd:cb:7e:af:9d:79:54:54:13:8f:3e:58:7b:
cb:27:fb:45:3a:c5:f8:c7:a3:76:89:a9:b9:92:cb:
9c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:66:AE:45:90:66:12:3B:D6:B3:7B:53:D4:11:32:FE:36:0B:F5:16
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146240.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ae06::/32
Signature Algorithm: sha256WithRSAEncryption
7b:6f:1b:eb:cc:2d:7a:51:4f:8c:48:81:a9:83:4b:18:53:b7:
1a:e3:f2:22:49:6f:23:3a:46:70:cd:f4:0c:39:e5:e0:6d:1e:
64:fa:da:05:a2:a5:4b:03:cc:7e:99:e4:37:cd:0f:90:0a:f8:
80:77:6f:94:ed:8b:79:b2:d9:cd:d2:c8:ef:c1:54:57:10:84:
96:c3:46:6a:e1:80:89:40:1e:12:5b:99:40:e0:0f:62:d0:5c:
38:e8:26:3e:f8:88:d9:75:c6:48:d0:b0:63:25:4e:bb:f1:c3:
07:09:41:86:ad:c9:35:3b:b0:24:30:1d:ec:71:93:2f:6f:5e:
11:40:b6:65:8e:ed:19:bf:28:75:e9:76:e6:be:ed:1d:82:ea:
f7:52:03:ce:2d:83:15:ab:96:d2:ec:74:da:d0:54:dd:94:74:
2b:f3:4a:fb:81:13:0d:12:c1:b8:17:65:50:9c:6e:78:18:6a:
ed:54:7f:60:a1:45:6a:24:40:b5:0f:36:1c:0c:95:8e:88:5d:
53:99:90:41:cd:24:1f:72:d0:6e:a5:5a:ac:01:d5:3c:2b:71:
37:87:18:9b:f6:e4:58:98:a7:1d:22:7c:19:0a:a2:56:fc:97:
dc:d8:cc:9b:96:96:49:d4:0c:0f:c7:ad:a6:cb:3f:33:d1:ae:
bc:de:56:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:54 2026 by rpki-client