Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146257.roa
File: AS146257.roa (raw, json)
Hash identifier: +iwvRiTez71hXQNB0jX2oCfLwaukv7qrI13KlRQVRdo=
Subject key identifier: 6C:49:AF:C8:14:A1:69:18:0A:46:71:03:A3:68:C5:B7:16:7D:BD:58
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2585CF37D52498E0F8DB32A0E72D406B4E441FF4
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146257.roa
Signing time: Fri 22 May 2026 06:27:32 +0000
ROA not before: Fri 22 May 2026 06:22:32 +0000
ROA not after: Fri 21 May 2027 06:27:32 +0000
asID: 146257
IP address blocks: 240a:ae17::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:85:cf:37:d5:24:98:e0:f8:db:32:a0:e7:2d:40:6b:4e:44:1f:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:22:32 2026 GMT
Not After : May 21 06:27:32 2027 GMT
Subject: CN=6C49AFC814A169180A467103A368C5B7167DBD58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:25:22:e7:aa:0a:f2:b3:f8:b5:f1:4e:a6:18:
3f:b2:06:8e:ad:d5:b0:4e:b7:71:73:76:8b:31:ac:
03:ed:c7:ff:00:20:4f:47:66:94:21:d8:aa:11:b1:
bb:31:92:6f:31:70:10:1a:f2:19:fe:18:34:1d:a0:
6c:3c:c4:21:21:02:80:19:c9:97:6f:53:91:f7:f7:
3e:b4:c3:7d:99:40:98:8a:2b:c6:98:fd:bf:33:46:
04:1d:61:3d:19:3c:78:97:05:3a:81:a7:97:df:a1:
9a:a7:39:67:38:c6:a1:45:21:71:27:73:7e:67:68:
86:7e:18:18:20:3f:bd:65:85:81:3d:1c:21:a2:39:
ba:5b:05:20:9c:ee:d6:4b:77:d9:29:52:5d:e4:ea:
23:7b:08:c6:88:16:be:99:be:05:a3:87:37:88:4f:
ec:c9:68:10:b9:a9:e0:bc:34:3c:19:dc:2f:dc:5c:
85:84:73:c6:36:6a:ee:d8:7c:fb:1e:d3:a9:ca:8f:
b1:0c:f4:b0:7f:91:2c:ca:fb:0d:f9:90:fc:e6:ec:
35:05:d9:6a:ab:2d:c1:1e:f4:77:6c:92:b2:6f:2d:
13:8e:32:a9:57:55:00:c2:11:3e:47:74:8d:b4:3f:
65:88:81:13:b0:3b:c3:4f:4a:3d:f0:48:df:e8:83:
40:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:49:AF:C8:14:A1:69:18:0A:46:71:03:A3:68:C5:B7:16:7D:BD:58
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146257.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ae17::/32
Signature Algorithm: sha256WithRSAEncryption
16:ef:bf:bc:79:09:7d:c9:7b:22:c4:ba:60:d2:00:32:e6:99:
78:7c:87:c1:d7:79:d2:53:63:8d:0c:1b:4f:75:e5:6a:00:77:
b9:28:ea:e1:f6:b5:ea:dd:45:1e:0f:96:af:bf:66:7a:8a:2d:
c3:82:40:3e:86:27:db:e1:ee:92:67:9b:5f:1c:5e:d7:8a:8a:
4a:06:6f:f5:f1:38:ab:fb:5e:d7:a0:72:b3:f6:22:5b:92:99:
c0:d3:76:ea:7a:bb:33:ee:55:8f:7f:ee:cc:34:d2:e6:9c:db:
39:ff:e8:5a:93:b5:5a:a7:5c:ca:3b:48:38:71:5a:1e:57:e3:
97:27:e7:94:95:b9:76:72:20:88:4e:01:4d:90:f6:e4:85:cc:
42:e0:fd:55:2e:6e:5c:6c:90:a1:f4:86:c2:b5:90:52:c2:c6:
68:bc:5f:97:58:9f:3a:10:f3:9a:ad:de:af:7c:96:b1:b7:d9:
48:19:b9:15:fa:83:71:86:98:ee:a9:39:d4:9e:14:60:55:3c:
17:17:ba:d2:78:b0:7a:c8:d4:92:26:6f:a0:9b:21:40:09:08:
df:7e:82:b6:68:50:be:45:1d:0d:f6:66:2f:cd:7b:ee:50:f5:
0c:0d:90:82:1c:bb:1c:7d:d5:e6:14:ad:8c:f0:c8:3a:4d:72:
ac:dd:6a:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:38 2026 by rpki-client