Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146270.roa
File: AS146270.roa (raw, json)
Hash identifier: l+Flkm/w4ByOKgc7ihG5+1kynTL6GmhoyEI4+kPsLAo=
Subject key identifier: 37:55:E0:1A:C1:0B:3C:74:75:AD:4B:AD:1E:41:32:66:9F:42:A2:44
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 353A5AF0E9C44DE972DD047F2AB7B7C490FDD17C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146270.roa
Signing time: Mon 25 May 2026 06:49:10 +0000
ROA not before: Mon 25 May 2026 06:44:10 +0000
ROA not after: Mon 24 May 2027 06:49:10 +0000
asID: 146270
IP address blocks: 240a:ae24::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:3a:5a:f0:e9:c4:4d:e9:72:dd:04:7f:2a:b7:b7:c4:90:fd:d1:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:44:10 2026 GMT
Not After : May 24 06:49:10 2027 GMT
Subject: CN=3755E01AC10B3C7475AD4BAD1E4132669F42A244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:49:72:66:4d:54:54:a8:90:f0:de:d2:5d:ea:
40:b8:c8:88:d9:57:1f:13:75:22:97:62:a7:bc:63:
52:d8:1d:76:1c:ad:56:89:f3:a6:06:79:f1:0b:14:
4a:bf:21:cc:ec:bd:e7:84:cf:16:0e:85:d4:97:6b:
81:b1:85:1b:51:b6:b9:f3:a2:c4:72:ee:5d:8c:f3:
46:f4:f5:99:55:e8:cc:76:88:76:59:22:f9:f2:a1:
ab:ab:94:37:70:60:68:46:ee:2a:a9:c4:95:b6:c9:
2b:d0:e8:8f:11:db:c1:11:7b:cb:fd:82:5b:cb:72:
0a:77:1f:af:58:5f:3b:47:19:98:d5:ad:3b:84:b1:
24:ea:4f:ed:96:0d:d0:63:45:4c:37:cf:8a:51:fa:
cb:5f:46:7b:4a:49:f5:de:44:c5:05:a4:ad:59:83:
f5:97:a1:44:8f:48:a0:4b:06:ef:b2:8a:3a:19:91:
d3:70:2b:06:11:8c:32:64:0a:24:4d:3e:06:8d:15:
c0:0a:e3:13:e5:ef:cc:61:17:4c:a5:52:4b:d2:55:
e4:1c:da:7f:1f:15:23:c1:ab:b1:5c:51:b6:85:dc:
cc:56:e5:ca:72:70:78:1e:e6:7f:48:12:95:50:71:
47:e3:28:e1:57:38:af:0a:4f:63:fa:2b:1d:e2:05:
a6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:55:E0:1A:C1:0B:3C:74:75:AD:4B:AD:1E:41:32:66:9F:42:A2:44
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146270.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ae24::/32
Signature Algorithm: sha256WithRSAEncryption
66:0b:41:a7:ea:92:5e:2b:46:c0:db:79:65:06:68:8b:3d:fc:
ba:94:65:2c:5a:c2:66:6b:ce:c7:ca:38:b7:b0:c0:62:e4:a4:
f8:82:32:50:5e:d9:70:a2:2d:9c:8c:1c:e5:ee:0a:81:35:1e:
f3:ef:a2:84:cf:ed:e5:eb:76:a6:fc:b0:4e:0c:bd:b5:b9:94:
1f:56:b0:68:02:aa:cf:63:a2:7b:d4:0c:46:2f:41:ae:f7:39:
e6:da:aa:5c:5f:37:50:88:cf:3d:3e:9b:48:dc:28:1f:01:b6:
1f:d9:1a:99:be:37:9c:a3:83:51:9b:16:e8:43:f5:c1:c7:c9:
c9:07:0d:67:b3:a9:51:ac:c8:3d:19:2b:23:c0:17:b1:29:9a:
97:83:82:36:64:53:2f:b1:f4:d1:f6:ab:9a:e3:d4:97:94:cf:
2c:25:43:7a:04:e1:3a:0e:5a:3a:a2:bd:49:3b:e4:c9:aa:ac:
cd:e7:db:00:1e:28:59:e8:ae:5f:91:4d:89:5a:17:c5:d3:dd:
90:28:b2:51:15:45:3a:18:a2:7a:64:c3:99:21:a5:88:aa:9c:
32:2d:11:8c:88:d1:95:12:b1:28:f2:29:a2:eb:4f:01:71:b0:
fd:33:81:b8:30:c7:fb:40:0b:2f:bf:5d:1d:1c:48:75:02:d4:
40:c4:46:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:10 2026 by rpki-client