Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146245.roa
File: AS146245.roa (raw, json)
Hash identifier: 1NGHhJCRj271zJUEC2psZ83s9sN2/x8wa6WTettGE00=
Subject key identifier: 4C:E1:67:88:09:98:42:1B:9E:78:27:80:F5:C2:D7:77:61:40:BD:95
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3B57F665ADCC5F846B4C694C50FE0A0AA4F5A94A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146245.roa
Signing time: Mon 25 May 2026 02:22:16 +0000
ROA not before: Mon 25 May 2026 02:17:16 +0000
ROA not after: Mon 24 May 2027 02:22:16 +0000
asID: 146245
IP address blocks: 240a:ae0b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:57:f6:65:ad:cc:5f:84:6b:4c:69:4c:50:fe:0a:0a:a4:f5:a9:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:16 2026 GMT
Not After : May 24 02:22:16 2027 GMT
Subject: CN=4CE167880998421B9E782780F5C2D7776140BD95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:59:2e:70:c0:a6:d3:f3:95:1f:53:62:d1:c5:
2b:b3:82:ff:dd:59:2b:1f:52:42:51:1a:8e:8e:2f:
9a:51:01:da:15:d5:83:6d:13:58:08:88:74:15:c1:
e3:11:a1:0b:64:4b:f3:7d:ec:4d:74:d9:dc:8d:68:
0f:8f:19:42:2f:b2:3e:88:e1:3c:ae:ee:50:6a:6d:
ec:66:6c:ed:83:6d:5c:ff:00:50:31:fc:51:40:5c:
ac:6d:20:f3:73:36:c5:7d:44:55:32:93:25:60:4e:
95:40:5b:d4:9a:b4:01:a6:86:d1:e1:6d:0d:eb:58:
6f:81:4f:c1:b8:eb:e2:e1:1b:5c:88:40:2c:bc:fe:
40:bb:c6:94:ad:77:c8:da:13:71:4a:4b:f0:5a:87:
e4:73:54:9c:a4:88:6e:94:1b:9f:d5:ff:54:54:1a:
22:be:86:6a:1c:0c:fb:11:e0:36:aa:89:46:ff:c0:
d1:1f:54:5b:68:d3:b7:9b:6d:5b:1e:f2:e3:a9:60:
b2:bd:cb:de:ae:c5:a9:52:14:43:13:94:a0:ca:40:
e5:32:a0:d4:99:1c:c0:26:94:47:a0:9f:02:93:cb:
64:cc:4e:6e:29:b5:52:21:e1:fe:9e:29:99:2f:78:
90:4e:8c:48:3c:3a:1d:b2:63:0d:74:dd:ee:c0:33:
81:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:E1:67:88:09:98:42:1B:9E:78:27:80:F5:C2:D7:77:61:40:BD:95
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146245.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ae0b::/32
Signature Algorithm: sha256WithRSAEncryption
83:dc:04:ef:db:93:dd:b4:21:5e:42:92:b9:24:ed:83:e2:69:
f0:77:a6:4b:66:41:22:51:4a:f8:20:43:71:2f:5b:c9:10:02:
9b:db:b9:89:23:d0:64:2f:78:39:ef:9b:8f:c2:3f:d9:a2:a9:
c9:bb:ff:ee:a5:f8:6f:56:9f:ee:b7:af:f5:70:25:68:90:d9:
9d:54:88:33:3c:cb:01:bb:ea:02:d6:06:56:dc:d9:57:57:6a:
d7:74:15:7d:67:78:49:b2:b7:24:7c:c2:14:ad:8d:73:fc:21:
f1:79:c1:3d:c0:17:99:c9:11:e0:08:76:2a:b5:43:c0:35:1d:
41:64:18:63:43:6e:e5:67:d4:fb:dd:1a:43:5e:b9:c6:4c:05:
94:a3:f9:28:13:b1:ba:3e:43:45:4b:1e:d6:54:35:8e:f6:4a:
5b:ba:18:59:82:b6:c7:73:95:0d:a2:dd:f8:15:f2:4c:d8:87:
d1:69:60:66:26:42:ea:f6:37:00:82:14:9e:9f:f7:74:32:7d:
7f:6b:26:3c:96:e9:de:0a:8d:ac:2c:c3:11:fa:f5:59:07:6d:
11:5b:c5:fa:41:16:6f:72:46:56:80:fd:b1:aa:d2:e2:f2:9c:
d9:0b:46:c8:e3:4c:51:dd:f9:e0:e5:92:c1:5e:1d:e8:07:9b:
a4:44:53:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:01 2026 by rpki-client