Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146248.roa
File: AS146248.roa (raw, json)
Hash identifier: UcLayailkAJ+HQjjoL9Q2xSxioJqMuCUGA3Oc47W9II=
Subject key identifier: DE:E6:45:20:5C:7B:E3:83:6B:79:FB:3E:36:3E:4A:5D:7C:0F:63:EB
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 144B5D6C980E6AF76BF0BBFC84281D73F5697A6F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146248.roa
Signing time: Fri 22 May 2026 07:08:57 +0000
ROA not before: Fri 22 May 2026 07:03:57 +0000
ROA not after: Fri 21 May 2027 07:08:57 +0000
asID: 146248
IP address blocks: 240a:ae0e::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:4b:5d:6c:98:0e:6a:f7:6b:f0:bb:fc:84:28:1d:73:f5:69:7a:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:03:57 2026 GMT
Not After : May 21 07:08:57 2027 GMT
Subject: CN=DEE645205C7BE3836B79FB3E363E4A5D7C0F63EB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:5e:5e:ec:03:c7:a6:bd:87:ba:7e:5c:9d:b3:
ce:46:1e:89:db:ae:e6:bf:86:05:12:ca:69:c4:73:
2b:20:9f:25:fa:ca:94:a1:1f:9b:d7:b4:32:04:9f:
ff:19:cc:88:c2:c9:fb:74:f0:30:7c:68:49:f1:72:
67:39:22:81:3d:e7:7f:23:c1:7c:7d:d8:b4:94:06:
41:1e:e0:d3:b5:3d:d1:cd:0d:0b:93:12:d1:94:76:
bf:b9:a6:9c:7c:e0:33:51:ee:b2:6e:47:f2:2b:1f:
80:37:df:e2:fa:4f:4a:4a:fd:f5:e7:35:ba:97:53:
24:aa:0e:27:f8:4a:06:89:47:5e:09:91:97:36:33:
fa:3f:5b:ef:1a:a1:bd:22:3d:f9:ef:43:83:b3:05:
3f:05:c6:f0:43:49:7b:b0:6e:5a:0d:c3:cc:00:f6:
4b:f0:fe:7a:f5:d8:f0:88:ac:a1:93:91:0d:25:06:
6c:f2:56:2f:26:43:09:62:79:98:c5:b4:0f:62:d4:
fa:33:11:24:b1:d8:20:0f:29:94:bf:d1:74:d8:54:
f7:33:c0:6b:f3:72:7f:a8:f4:de:d3:de:50:fb:ec:
e4:4f:28:70:eb:36:7c:e2:98:91:78:88:ad:b5:eb:
a2:07:0d:76:d8:f2:a5:f8:9f:81:16:cd:da:59:a3:
fa:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:E6:45:20:5C:7B:E3:83:6B:79:FB:3E:36:3E:4A:5D:7C:0F:63:EB
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146248.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ae0e::/32
Signature Algorithm: sha256WithRSAEncryption
46:ee:d0:00:d0:b9:00:ad:18:7c:10:be:16:41:c4:bc:a8:a2:
1e:39:3f:b8:68:0a:1c:6d:b4:10:a9:fb:e3:20:4d:5a:0b:e9:
6c:8c:48:91:7b:5c:b7:15:de:ba:37:9f:b6:58:91:e6:12:3f:
40:67:ad:b9:56:76:e5:73:84:85:42:f7:01:0e:00:a6:cc:ec:
83:7e:b8:8a:0e:45:cb:6d:b4:e6:8c:1d:ad:01:ec:87:1d:ab:
16:38:c6:2c:0e:d2:99:5a:7b:8c:30:3f:47:84:d8:c0:b7:a1:
a4:e1:ed:c0:06:31:80:bd:fa:c0:98:16:78:e9:89:b0:78:5c:
c8:f6:93:24:08:1f:92:e6:19:0f:c3:ee:02:0d:4c:6b:0b:d4:
95:57:b6:29:b6:06:cc:8f:22:0f:4c:2e:aa:c4:af:41:1c:bd:
ed:9e:ac:69:17:89:78:95:de:c1:61:80:0e:97:4b:de:8b:f5:
32:59:50:f7:4e:49:06:22:c7:5b:97:82:fb:87:a5:bc:45:6c:
f3:f7:cb:fa:ea:4e:0c:07:02:3d:97:24:ba:32:b4:8a:b3:cb:
3f:d7:27:6c:b2:d4:1b:6f:38:41:ea:7c:50:d2:87:37:69:db:
2f:ca:b5:5f:51:65:af:b9:72:13:6a:0e:da:18:c0:65:44:04:
91:b8:03:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:25:44 2026 by rpki-client