Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146268.roa
File: AS146268.roa (raw, json)
Hash identifier: TP8vxED3kadpAwaK7bGT9WfJMFIZzVubfv0EGuwQASo=
Subject key identifier: FB:21:DF:1D:57:75:13:4F:31:DA:D6:3E:4C:0A:45:55:A4:4D:54:AE
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4C4E2CA1226A7F901688B25BF9859D6F234FD23D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146268.roa
Signing time: Fri 22 May 2026 06:05:29 +0000
ROA not before: Fri 22 May 2026 06:00:29 +0000
ROA not after: Fri 21 May 2027 06:05:29 +0000
asID: 146268
IP address blocks: 240a:ae22::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:4e:2c:a1:22:6a:7f:90:16:88:b2:5b:f9:85:9d:6f:23:4f:d2:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:00:29 2026 GMT
Not After : May 21 06:05:29 2027 GMT
Subject: CN=FB21DF1D5775134F31DAD63E4C0A4555A44D54AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:d6:e4:0a:36:93:88:3c:21:2d:15:a0:b4:9e:
c2:b6:4a:9e:65:30:d7:43:8f:f7:0a:80:70:76:4f:
61:14:9d:c4:dc:72:07:6c:7b:8d:bc:f1:70:10:d9:
b5:2a:d1:0f:15:f4:c9:36:35:89:ef:59:b0:53:0d:
7a:47:b4:3e:8a:48:20:00:87:f8:75:a8:f3:bb:98:
d6:90:48:34:f9:2e:69:07:d1:9a:18:4c:9d:21:ee:
0f:12:71:9b:2d:55:0f:99:e9:c7:65:47:f4:f5:02:
09:25:25:09:54:ea:ee:c5:8e:93:e2:d6:26:58:52:
48:8a:ea:0c:5d:4e:29:95:7f:8e:43:43:1f:a3:7e:
dc:2d:5f:97:bd:cd:22:7b:05:7b:c1:62:1a:4c:3c:
7c:67:61:7f:38:84:b6:de:3b:8c:c9:b2:01:88:a9:
96:c9:fc:2f:16:e7:87:60:39:7c:2c:fe:dc:66:62:
f1:0a:5f:9e:ec:50:88:2b:94:25:e1:eb:0c:a6:e9:
8e:17:4a:26:7c:a8:c9:b4:c7:aa:e1:d9:2e:67:75:
88:2d:2e:05:30:dd:fd:55:fb:09:25:6f:ab:bf:e9:
95:b0:9e:25:72:35:2d:7a:4a:5c:b9:53:5e:22:b8:
37:89:ac:e5:bb:41:6b:22:02:6b:93:e9:8f:a8:3f:
74:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:21:DF:1D:57:75:13:4F:31:DA:D6:3E:4C:0A:45:55:A4:4D:54:AE
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146268.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ae22::/32
Signature Algorithm: sha256WithRSAEncryption
00:30:4c:4c:62:e6:af:1f:c1:7a:ef:85:b2:e6:5e:5d:b7:ac:
43:53:1e:28:db:a8:0f:53:62:ae:c9:b5:8e:28:06:86:46:f5:
f1:e2:8c:82:28:5b:e4:96:dc:b9:6a:69:9a:0d:4a:08:ca:78:
01:f5:d2:20:7e:0e:76:5c:6e:9d:09:d8:8c:15:d5:ba:d8:74:
cf:dd:82:74:8c:cd:1f:33:df:e7:45:b2:6e:f6:cc:ac:9d:c3:
08:b3:a5:ae:41:3b:6e:3f:b6:95:74:5b:58:e7:c1:2b:1a:c8:
9b:13:77:e3:75:48:82:53:4b:2a:ab:32:90:2d:5a:4c:63:0f:
12:1c:c7:30:19:b1:8a:74:44:c5:94:87:a5:d8:cd:5d:e0:e3:
96:3b:9e:83:1c:9a:b8:14:4c:e1:a1:4e:53:4a:4b:7f:40:8d:
3c:e2:86:9d:3a:4d:58:c9:7b:e5:2b:b9:f5:5a:bc:56:7f:88:
93:1e:7c:d2:e8:2d:0f:4b:69:cb:6f:35:51:6a:4b:ac:30:0d:
c0:73:d5:c9:09:42:85:e8:a8:94:88:21:4f:79:97:a3:d2:b8:
eb:93:f9:27:b4:f3:60:32:50:b2:c0:f2:af:d2:0c:1a:36:4d:
47:35:9e:b6:45:00:c1:bf:6a:ac:c5:88:87:52:33:bf:96:c1:
3c:73:73:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:57 2026 by rpki-client