Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146238.roa
File: AS146238.roa (raw, json)
Hash identifier: 16us2kXiaEy2hfIlX4XVvdN0RiIuA58o10zePtR6pxE=
Subject key identifier: 72:AD:B0:C1:5C:6D:CE:00:30:9D:C2:45:EC:3A:4F:BA:91:26:B2:2A
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4A1B556C009823DE81F227F879E709E2E8DD87E0
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146238.roa
Signing time: Tue 26 May 2026 02:35:03 +0000
ROA not before: Tue 26 May 2026 02:30:03 +0000
ROA not after: Tue 25 May 2027 02:35:03 +0000
asID: 146238
IP address blocks: 240a:ae04::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:1b:55:6c:00:98:23:de:81:f2:27:f8:79:e7:09:e2:e8:dd:87:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:30:03 2026 GMT
Not After : May 25 02:35:03 2027 GMT
Subject: CN=72ADB0C15C6DCE00309DC245EC3A4FBA9126B22A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e9:18:ab:de:74:af:9d:df:72:e3:10:7c:0c:
b0:21:7f:47:ef:55:50:ca:23:29:f0:7a:27:d4:bc:
75:1e:4f:91:87:af:79:2a:77:09:5b:36:d1:8d:08:
08:1c:27:8d:2b:19:c9:67:59:69:cb:40:15:4d:3b:
e5:46:14:a4:1c:11:89:49:70:7c:fc:d7:8e:eb:2e:
95:aa:aa:f8:84:13:df:7b:8e:78:30:4f:05:55:1d:
fa:85:f9:f6:26:01:de:e3:88:d7:d0:d2:e1:dd:07:
ef:0a:da:41:63:82:1a:42:0e:fc:38:0e:66:aa:17:
a3:e2:14:ce:5c:86:6e:6a:32:e9:f4:04:84:d7:d0:
b1:d9:b3:f4:0c:b1:f1:60:2d:40:03:c0:11:54:b2:
e0:cc:b2:d4:83:0b:58:b0:75:46:7c:e3:47:b9:5e:
28:90:ce:43:12:52:5c:eb:79:b4:6a:c0:e5:a7:89:
9d:1d:3c:0a:ff:5e:4d:d1:cc:69:04:34:f1:b6:3a:
7a:ea:11:fa:8d:ff:96:db:8b:53:db:09:0f:99:1a:
f7:9b:96:ae:17:02:f9:49:99:ce:36:65:7c:d9:ed:
65:1c:6d:54:e3:ed:24:e3:76:f1:b0:9c:2a:10:2f:
2d:6f:41:cb:1a:78:ea:81:1c:8a:8a:b6:ca:f5:ca:
76:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:AD:B0:C1:5C:6D:CE:00:30:9D:C2:45:EC:3A:4F:BA:91:26:B2:2A
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146238.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ae04::/32
Signature Algorithm: sha256WithRSAEncryption
80:d1:6c:ee:13:27:37:f6:f2:ac:93:c4:9e:4e:97:da:e0:6a:
52:b8:4d:5d:68:de:af:0d:da:1b:ca:2f:12:f9:09:69:65:49:
74:e2:d5:7e:cf:43:e8:5b:ca:1d:b0:3d:59:b6:00:73:6e:7c:
4e:5d:7f:d1:8e:df:97:f9:82:95:e3:75:c6:d2:2f:dc:27:db:
e6:fa:b2:97:74:b0:b3:91:db:3e:b7:5c:ef:4f:31:68:b5:ac:
ea:bd:98:d5:a0:c8:90:11:41:0a:11:b5:25:cc:1c:c7:f5:b0:
5c:43:76:6e:2d:4b:29:25:39:ab:1f:67:5f:4f:2d:ca:e1:c3:
f0:4d:9e:b4:bb:af:0d:d0:4e:ca:64:40:01:37:7f:5b:a1:14:
80:01:99:c1:df:41:e1:f9:74:84:4d:ed:c2:59:21:bc:25:5a:
57:d6:d8:f3:09:f8:95:9e:26:3a:11:7d:ed:01:0f:54:46:2f:
44:cb:4e:6c:c5:fd:a7:2a:c4:07:d6:da:f0:1e:d9:9f:cd:34:
94:f8:2b:be:52:31:bb:03:fa:42:7e:9b:08:fc:6d:a8:2b:6e:
8a:ad:7b:95:87:28:9f:2c:ed:55:10:e3:72:e7:01:a7:77:b1:
26:9c:c3:e6:59:47:17:ba:3f:cd:92:65:72:c9:ff:f1:e6:04:
4f:db:c9:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:07 2026 by rpki-client