Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146217.roa
File: AS146217.roa (raw, json)
Hash identifier: kfm0KOmj3jQCudIx4lcLCs0gXr0vVh51GfT9eFQatTo=
Subject key identifier: 84:7C:5A:6F:E5:B3:FC:A1:BB:D1:F6:A3:32:BA:4B:6C:C4:5B:A2:58
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4F486378DB6A5BBC156DF752AC073F1427E5E8DF
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146217.roa
Signing time: Mon 25 May 2026 01:20:35 +0000
ROA not before: Mon 25 May 2026 01:15:35 +0000
ROA not after: Mon 24 May 2027 01:20:35 +0000
asID: 146217
IP address blocks: 240a:adef::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4f:48:63:78:db:6a:5b:bc:15:6d:f7:52:ac:07:3f:14:27:e5:e8:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:15:35 2026 GMT
Not After : May 24 01:20:35 2027 GMT
Subject: CN=847C5A6FE5B3FCA1BBD1F6A332BA4B6CC45BA258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ca:d4:a0:a1:a5:1a:3f:6e:eb:64:1a:65:47:
a2:dd:e0:ff:6a:2c:a0:1c:e2:0e:07:89:6b:b2:32:
b7:46:0c:99:51:cc:35:f0:9a:59:ed:08:92:b4:de:
d2:c6:a1:88:cc:f5:46:cf:24:39:0d:85:cd:8f:1f:
66:ac:2f:f5:99:56:c9:93:91:c1:80:bd:15:e6:a2:
82:f6:cf:4b:7e:97:6f:7a:bc:ef:34:6e:d8:f6:e0:
28:58:c9:cd:91:b8:cc:f9:22:b4:34:15:f7:1a:e9:
9f:b3:68:18:0c:ff:00:0b:40:bc:b0:dc:1c:1f:d9:
41:ed:08:e1:ca:f8:64:83:35:96:96:84:7b:e2:c8:
c6:b7:b9:8b:3e:b0:6f:45:a0:2a:9e:21:cd:99:95:
bc:84:1c:e9:69:69:79:88:80:e6:dc:76:b6:8c:dc:
01:b3:a5:33:8d:47:0e:9a:1c:22:05:33:cd:73:84:
d4:9e:d1:32:2d:2e:68:da:99:e6:66:2b:bb:8b:ac:
0a:b3:80:8d:44:21:0d:21:28:c1:0e:90:f2:1d:c4:
96:25:dc:5a:f3:10:c7:47:84:a4:0b:d2:89:44:c1:
e1:f3:06:26:f0:e4:b1:fe:99:83:25:7d:e3:14:26:
5a:13:47:66:5c:84:85:29:d2:62:3b:1b:e2:12:37:
3e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:7C:5A:6F:E5:B3:FC:A1:BB:D1:F6:A3:32:BA:4B:6C:C4:5B:A2:58
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146217.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:adef::/32
Signature Algorithm: sha256WithRSAEncryption
b5:2d:6c:c1:92:e5:97:af:69:b2:41:79:75:19:d4:67:49:70:
87:75:3a:df:bb:69:bf:e2:61:c2:6e:47:3c:51:1c:a9:67:b0:
22:3b:98:36:8b:55:09:f1:c4:e9:2d:6f:79:4f:78:f4:41:b0:
df:04:c5:7f:ae:e6:cf:ca:b0:57:9c:b0:f2:e4:d7:74:8b:14:
00:36:57:f5:0a:b0:d2:c2:3a:5d:e9:03:ba:8b:b8:a8:75:e5:
22:d6:17:39:60:2a:4d:72:4a:ce:5c:ce:aa:62:65:a9:ac:9c:
07:c2:14:24:25:a5:66:ef:8a:b7:10:66:3d:66:d9:8c:0f:ff:
8f:3a:78:d6:3a:4e:cd:81:ad:70:2a:3b:e1:4d:90:c4:a3:bc:
f5:0d:7d:37:91:ff:40:09:17:c4:68:05:dd:65:db:9d:84:f5:
97:0a:e1:cb:c6:7a:7d:f0:e3:e0:4b:a1:9e:eb:db:00:f7:12:
19:ae:f4:6c:8c:99:90:2b:9c:5f:e4:2e:ef:d6:f1:db:05:d0:
60:b7:b7:cc:87:7e:51:0e:05:e2:7c:08:d6:23:3e:64:8c:55:
29:81:8a:f4:e7:20:c6:cd:47:e8:e5:e8:cc:fe:be:d3:aa:8e:
ae:86:bc:14:8d:42:ca:e1:7d:91:37:e6:00:c7:c7:7e:d7:f5:
9a:35:20:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:08 2026 by rpki-client