Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146244.roa
File: AS146244.roa (raw, json)
Hash identifier: Gc1J4kY4zdp6WqryvqFRxZ0KsqqaBhDTB/upECoONDc=
Subject key identifier: CA:3A:8B:2D:BE:80:41:6A:74:F2:F4:17:F9:A4:FA:44:0D:13:B6:00
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 48B96CDE6A67D64AFF929EFAB7407DD06C665427
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146244.roa
Signing time: Mon 25 May 2026 06:49:03 +0000
ROA not before: Mon 25 May 2026 06:44:03 +0000
ROA not after: Mon 24 May 2027 06:49:03 +0000
asID: 146244
IP address blocks: 240a:ae0a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
48:b9:6c:de:6a:67:d6:4a:ff:92:9e:fa:b7:40:7d:d0:6c:66:54:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:44:03 2026 GMT
Not After : May 24 06:49:03 2027 GMT
Subject: CN=CA3A8B2DBE80416A74F2F417F9A4FA440D13B600
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:65:f9:cc:f6:ec:0d:5a:8e:a2:a6:be:fe:cd:
94:0f:38:ea:e0:c1:3c:b4:f1:d7:fe:d7:9c:e4:b1:
20:a2:44:23:36:23:9a:b7:0b:88:37:02:a5:ad:2c:
26:2d:fa:50:21:58:a2:b2:d1:85:b1:4d:de:2d:e2:
a8:56:26:f3:76:10:c1:2d:f0:8e:bf:72:4a:d1:78:
9c:19:34:b4:e8:3f:2e:b6:d0:be:f0:18:3f:f6:05:
d4:c7:68:fe:9e:4b:bc:d0:79:0a:50:37:25:6e:b4:
82:77:4f:d2:19:85:4e:71:06:93:cf:e4:1f:ed:65:
70:f7:b0:f0:04:db:1e:9d:36:43:3c:13:a1:78:2d:
66:26:7e:b0:6e:c7:cd:37:99:0b:7a:e9:ee:b0:07:
cf:a7:84:12:75:cb:cc:e2:8e:0d:56:4a:ad:d1:c9:
b8:fb:d8:6c:27:62:d4:48:ae:12:a6:00:d8:6f:4d:
d8:ad:22:41:da:95:0b:44:6e:1b:5e:61:f2:dc:d9:
ff:13:f1:a2:9e:20:3e:7f:52:6f:d3:0f:98:b4:8e:
74:5d:b4:59:b3:56:96:3d:a4:eb:ef:23:63:6a:29:
21:f9:db:8a:90:9c:8b:41:61:99:73:6d:55:c9:58:
28:ef:9b:c3:42:28:2d:ee:87:ca:7a:4b:24:e8:bf:
35:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:3A:8B:2D:BE:80:41:6A:74:F2:F4:17:F9:A4:FA:44:0D:13:B6:00
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146244.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ae0a::/32
Signature Algorithm: sha256WithRSAEncryption
2d:a9:80:00:6d:8a:dc:af:6c:a6:6d:ce:6d:fe:d3:45:86:fb:
70:aa:77:54:32:6c:95:4f:25:d3:19:0c:a2:11:f4:fc:b6:58:
94:48:c3:eb:5d:47:06:0a:0b:0f:f3:23:e8:8d:c3:cc:f8:e2:
27:cd:2f:d1:a9:90:4e:ef:04:60:c7:73:7a:1e:82:b0:67:68:
87:fa:8c:c7:9e:c7:23:62:53:47:62:fc:75:01:1d:f6:dc:7d:
83:9c:72:31:51:74:5f:a6:d1:dd:5a:d2:af:61:bf:bd:0a:fb:
0b:cf:68:fa:eb:e6:df:54:02:de:2a:19:f4:3b:cd:c9:13:40:
a4:bc:ea:c9:10:45:ee:df:5b:b5:92:5f:2b:d3:49:30:27:38:
e8:7b:65:e9:6c:15:7a:b5:dc:9d:88:c2:14:5a:d9:96:cc:31:
6b:ab:0a:d3:1f:54:d8:58:84:b3:e2:8a:8c:a2:56:4a:a4:42:
e1:45:98:7e:c6:07:c2:b1:43:2e:33:52:64:01:21:10:3f:ed:
9b:6e:15:4f:05:82:1c:93:76:c3:15:57:31:ed:5b:c7:d6:32:
18:58:b2:2e:fd:3e:91:6d:9d:5a:24:c3:12:f4:7c:a0:6e:78:
58:2a:f0:87:8d:6f:ce:2d:01:f3:98:f1:8b:36:d9:94:27:6d:
2c:07:39:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:39 2026 by rpki-client