Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146237.roa
File: AS146237.roa (raw, json)
Hash identifier: bbhHtbnksnWmrhClRBvXKZHWdFByUE2Ul5i8sh3X75w=
Subject key identifier: 29:3E:E6:F6:0D:DF:C5:C0:B8:B0:67:6F:6B:18:DB:17:32:06:5A:4A
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 74C65DF0173A5AFD9C26A20245F65AF2479ED0DA
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146237.roa
Signing time: Tue 26 May 2026 06:12:59 +0000
ROA not before: Tue 26 May 2026 06:07:59 +0000
ROA not after: Tue 25 May 2027 06:12:59 +0000
asID: 146237
IP address blocks: 240a:ae03::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:c6:5d:f0:17:3a:5a:fd:9c:26:a2:02:45:f6:5a:f2:47:9e:d0:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:07:59 2026 GMT
Not After : May 25 06:12:59 2027 GMT
Subject: CN=293EE6F60DDFC5C0B8B0676F6B18DB1732065A4A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:da:7e:22:1f:3e:08:75:df:84:a6:51:72:05:
ae:81:4e:a9:94:9c:36:13:5e:93:28:86:9b:1d:b8:
c9:e7:d8:5e:22:70:20:d8:03:a6:f7:7a:22:93:39:
7b:54:10:28:ae:6e:2c:7b:e4:a5:ec:02:76:cf:11:
ef:6b:78:de:10:f5:06:6a:27:56:b7:a7:81:0f:cc:
0b:25:92:e6:33:27:03:bd:4b:c6:d9:34:17:c1:42:
d2:69:3a:14:71:19:7f:87:9c:bf:d1:23:c4:fb:b4:
76:99:1b:00:28:91:f4:c0:14:e6:57:3b:cc:1e:d1:
01:07:b0:74:f8:42:4f:5a:cc:e2:2e:05:99:3a:3b:
54:01:e7:b2:56:f6:43:28:c3:9c:e3:8d:5c:f2:12:
b1:3a:f7:a3:6d:c7:41:9b:33:d8:47:87:61:f7:f4:
a8:37:36:5f:8a:48:73:6c:1f:1e:cf:e0:d3:ad:38:
81:79:27:95:56:b2:0c:3e:61:9a:62:5f:2c:a7:b6:
60:82:d5:e2:73:cc:79:11:6b:e5:af:07:f7:f3:12:
10:21:fb:65:f0:ad:53:14:92:c6:0a:9d:58:1e:8a:
ad:fd:4a:34:24:65:45:af:74:5f:48:52:80:f8:66:
bd:d1:c2:82:c8:af:06:95:a5:73:08:86:da:22:ba:
65:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:3E:E6:F6:0D:DF:C5:C0:B8:B0:67:6F:6B:18:DB:17:32:06:5A:4A
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ae03::/32
Signature Algorithm: sha256WithRSAEncryption
9e:20:93:f7:b6:22:c5:d1:4f:8c:14:20:d7:64:d9:7b:e3:54:
30:14:cf:72:66:87:21:45:20:4c:ea:f4:0f:75:34:61:67:33:
a3:ec:ef:e3:4c:81:e0:21:14:c4:94:c9:ea:09:8f:a5:8a:40:
3a:d2:73:45:65:70:8c:7f:c7:9b:9c:58:53:b9:91:00:3b:d1:
8a:55:c6:0d:ca:8d:23:95:2c:72:36:3a:0c:7b:34:02:96:a7:
eb:8d:e2:17:1e:ae:4d:e8:d2:8d:fa:d8:e6:a1:c3:b6:36:15:
ff:55:b7:f7:0d:4b:34:20:7a:29:4c:69:a0:fb:13:d4:81:1d:
71:84:b1:15:42:fd:7e:ed:0f:77:89:61:a4:c9:66:c1:08:ad:
4f:c8:57:c6:6a:b7:4b:5e:cb:0b:8b:51:9e:0a:dd:d7:d7:82:
33:f3:8b:14:9b:9f:2b:31:1a:f3:14:73:3e:b2:95:55:41:5c:
e5:ca:6b:a4:07:07:1f:22:85:66:a0:31:da:00:f4:36:d1:e4:
d3:f9:ba:04:f4:a4:b0:82:c2:0c:70:ec:45:db:df:d6:6e:d4:
11:95:a8:21:bf:65:f5:70:40:ee:d1:52:4d:4b:d1:91:ec:29:
43:d0:ac:66:06:24:6c:9f:78:82:9d:c2:a7:6e:af:6a:60:76:
6e:06:f1:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:33 2026 by rpki-client