Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146246.roa
File: AS146246.roa (raw, json)
Hash identifier: jAfcT0KfIhbM2hzH1bCpLYA6e5sbPxDId1WoxX0YkxQ=
Subject key identifier: 1C:94:1C:C4:2C:A2:A3:A4:EC:1D:6B:63:1F:D7:76:08:69:A0:DC:75
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4B885C1F69BD27D31C83B86F8B3ED2EB087F5DF0
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146246.roa
Signing time: Mon 25 May 2026 06:49:04 +0000
ROA not before: Mon 25 May 2026 06:44:04 +0000
ROA not after: Mon 24 May 2027 06:49:04 +0000
asID: 146246
IP address blocks: 240a:ae0c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:88:5c:1f:69:bd:27:d3:1c:83:b8:6f:8b:3e:d2:eb:08:7f:5d:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:44:04 2026 GMT
Not After : May 24 06:49:04 2027 GMT
Subject: CN=1C941CC42CA2A3A4EC1D6B631FD7760869A0DC75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e0:7e:c0:a8:6a:72:b3:21:f9:79:f7:9a:e8:
37:56:aa:04:49:64:d0:f3:2d:a1:cf:97:ae:53:5d:
64:49:7b:02:4a:25:9c:74:f5:77:92:1f:92:37:7d:
c0:d7:ae:ed:70:48:e3:5b:28:29:f7:3d:b4:af:0e:
0e:dc:fd:2e:9a:4c:d3:29:18:1d:94:0e:20:d8:74:
11:42:b9:18:5e:b6:d0:54:a6:60:71:2f:00:35:13:
9e:e7:64:46:a3:da:72:23:79:5b:74:03:9d:b0:15:
7c:8a:25:f6:c2:ad:a0:d3:52:39:dc:8a:eb:eb:29:
a4:49:1e:f3:ac:f5:61:af:be:31:40:cc:68:c5:74:
fa:48:98:3e:68:75:a6:72:0f:e5:d8:0a:d3:11:8a:
34:66:0d:42:c9:13:eb:bf:eb:ca:82:c5:ce:f9:71:
52:6c:10:d1:0b:d7:f8:5e:8c:6f:8e:9f:ef:e2:e9:
97:4b:da:f1:01:23:16:76:e0:b2:41:98:9e:50:d6:
de:13:7f:42:39:5b:fd:aa:74:a1:ad:c4:a5:1f:ed:
14:45:b8:aa:e9:41:19:04:62:bc:56:8b:7d:9f:36:
8b:e5:05:98:f6:56:25:4c:c3:73:3e:69:57:3f:26:
57:e2:42:67:9c:9e:cb:7f:1a:e6:58:33:14:61:9c:
44:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:94:1C:C4:2C:A2:A3:A4:EC:1D:6B:63:1F:D7:76:08:69:A0:DC:75
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146246.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ae0c::/32
Signature Algorithm: sha256WithRSAEncryption
91:ad:32:2f:5e:c0:ae:d9:93:cd:9c:2a:54:64:2e:ca:59:af:
63:3a:8f:03:92:34:16:9c:c4:5e:4e:5c:bb:eb:a0:71:1f:f2:
85:ce:73:89:d9:02:ab:1f:37:7e:a4:cc:b5:55:f1:5a:4f:d2:
08:96:3b:17:94:8d:b9:46:32:b2:d5:f7:16:d1:53:28:a3:51:
57:60:b7:b6:12:1b:30:0d:14:00:45:c1:4a:21:00:56:97:d7:
20:d0:3a:0d:c1:c8:2a:53:f3:90:46:e9:5d:a7:9e:b7:04:98:
27:81:ea:39:52:7d:b0:e0:e1:1f:85:87:0d:3c:d7:61:fc:4c:
57:bf:a4:05:fb:d0:e6:6e:ed:f6:0e:9b:b2:07:2e:5e:d7:7b:
e4:56:99:5f:77:ac:de:20:be:48:aa:87:e6:76:90:f3:9d:71:
0e:a4:30:32:60:ab:c2:4a:6c:4a:a2:30:65:f6:f7:08:e0:37:
1c:93:21:38:ee:47:61:86:12:f7:e4:18:c8:6b:e2:63:ca:3d:
0b:cc:07:7f:0a:e1:86:43:ad:1e:4b:97:cc:8c:99:6c:b2:d9:
a1:97:08:6c:af:52:15:99:db:de:5b:32:de:6c:f2:0d:87:b0:
0e:2d:52:dc:ae:a6:19:27:df:cc:f1:d1:47:f6:c8:cf:5a:e8:
36:6a:56:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:37 2026 by rpki-client