Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146235.roa
File: AS146235.roa (raw, json)
Hash identifier: iBLaIgmuaku8fzYaThMb/NsdDnKIJ97OtQv0AKUWFrg=
Subject key identifier: 09:BB:BD:0C:DE:E5:37:26:CD:DA:5B:D5:C1:80:14:66:D8:53:7D:85
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1EA951EB553885D34373C261652BFE89E63CD49F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146235.roa
Signing time: Tue 26 May 2026 01:13:00 +0000
ROA not before: Tue 26 May 2026 01:08:00 +0000
ROA not after: Tue 25 May 2027 01:13:00 +0000
asID: 146235
IP address blocks: 240a:ae01::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:a9:51:eb:55:38:85:d3:43:73:c2:61:65:2b:fe:89:e6:3c:d4:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:08:00 2026 GMT
Not After : May 25 01:13:00 2027 GMT
Subject: CN=09BBBD0CDEE53726CDDA5BD5C1801466D8537D85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:5a:c9:e5:a9:0b:0e:e7:86:9c:6c:8b:69:a4:
81:03:c0:cf:1c:c7:34:50:1d:3d:38:f1:1a:67:f6:
9a:08:58:3e:d3:14:1d:ad:bf:3b:69:ff:98:31:cb:
9c:cd:3a:1d:7c:d8:03:f9:1f:a3:49:e3:ed:76:54:
4c:6d:1a:4a:0b:08:07:8e:c4:31:bf:6e:28:a8:fa:
e7:a8:db:d9:05:3e:33:b1:08:69:fa:91:81:41:f3:
f3:f8:0c:54:d7:41:01:3d:36:1e:06:6f:81:be:71:
0c:3a:e3:f7:e4:46:15:97:f5:b1:d1:6d:c7:01:08:
04:16:5b:3e:9a:9c:cf:65:67:4f:47:c1:0a:0a:98:
f4:f7:4f:b5:b3:86:21:32:9d:6e:b6:8c:c6:fa:4d:
77:df:e9:61:f2:2e:24:15:07:68:8d:c1:71:61:69:
4b:12:c8:bc:22:3d:78:19:0e:0b:19:b5:64:42:ca:
0f:0f:58:e6:d3:9c:e7:d7:b6:37:3d:6e:d4:65:ef:
df:6d:f8:63:64:a5:f4:f0:fd:43:3d:ea:c0:bc:c3:
ff:b3:4e:6f:c9:21:73:66:fe:65:36:39:75:f7:76:
3c:3f:7c:77:4a:7e:88:e5:94:e1:02:f7:3c:e2:99:
47:30:64:91:9b:43:1a:b0:c6:37:02:ce:ea:c1:77:
02:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:BB:BD:0C:DE:E5:37:26:CD:DA:5B:D5:C1:80:14:66:D8:53:7D:85
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ae01::/32
Signature Algorithm: sha256WithRSAEncryption
46:56:62:bf:6a:a3:7a:43:73:dd:1a:a5:55:55:70:01:ff:08:
e9:48:63:b5:91:f5:1e:ee:1d:ba:e0:2e:59:4f:dc:05:7c:61:
eb:36:35:d4:50:aa:9d:0f:6c:36:7b:2b:ec:dc:d7:36:4c:77:
95:3c:8c:c0:46:6e:74:6e:10:f1:ea:58:d0:e2:b6:c9:dd:2f:
52:6b:57:5a:b6:d4:77:c2:2c:38:06:ab:f5:85:d8:ce:54:b8:
48:a4:92:bd:c7:43:3f:5d:96:a5:df:a7:e0:2d:2c:66:83:e8:
9a:61:74:18:1b:20:04:4c:e4:18:2b:3a:f4:fc:85:f2:6a:03:
d2:b8:cc:32:3d:bc:c2:0d:0a:4c:50:29:ba:68:0e:be:86:69:
da:6f:28:78:c8:ca:23:8e:97:5f:a7:e5:3e:38:11:b4:02:59:
74:cf:74:a6:81:89:b5:66:ca:2f:90:b5:aa:52:5c:f2:47:3a:
a9:46:c5:dd:f0:82:19:de:49:75:44:05:90:40:03:36:dd:7b:
45:79:51:17:ee:3f:72:57:40:8c:4e:6a:5c:17:9d:0c:f7:42:
62:4d:16:72:78:03:83:a8:71:28:41:48:82:d0:67:6e:7b:16:
01:62:a1:a9:36:97:ee:6a:31:bd:35:8d:eb:0f:0f:33:18:ac:
a1:fd:89:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:10 2026 by rpki-client