Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146271.roa
File: AS146271.roa (raw, json)
Hash identifier: 1JLDYV8dVLR0jMNIEsVgIwajF2haLDmuUr3O40fTBks=
Subject key identifier: E2:46:BA:F1:BD:5B:F7:9F:E0:4C:94:19:73:A7:AE:7F:96:81:9A:9F
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 20737BA41746DD62DE557332101264952C2FE648
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146271.roa
Signing time: Fri 22 May 2026 04:07:59 +0000
ROA not before: Fri 22 May 2026 04:02:59 +0000
ROA not after: Fri 21 May 2027 04:07:59 +0000
asID: 146271
IP address blocks: 240a:ae25::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:73:7b:a4:17:46:dd:62:de:55:73:32:10:12:64:95:2c:2f:e6:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:02:59 2026 GMT
Not After : May 21 04:07:59 2027 GMT
Subject: CN=E246BAF1BD5BF79FE04C941973A7AE7F96819A9F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c5:d4:0c:62:3a:1a:74:03:fb:61:2a:59:ef:
d6:b1:73:15:6c:c7:27:15:d2:b6:90:c6:92:a7:42:
fb:02:bd:4a:34:6e:6c:21:29:9f:e8:ec:af:7f:6e:
2e:47:ab:96:8c:ce:d0:52:e3:8e:12:25:28:ec:99:
71:fc:1d:ab:16:c2:4a:03:22:33:cb:41:41:aa:3b:
a5:fa:a3:8a:5d:8e:4f:e9:be:0d:72:d6:0b:07:59:
81:66:d7:d8:88:bc:de:54:54:a4:7b:8b:46:df:11:
ae:7d:f0:72:41:2d:a2:23:9e:32:31:f1:60:f2:fe:
15:01:7d:3e:82:85:0b:a2:4d:92:62:ef:9a:40:78:
cb:8e:90:30:81:30:7b:bc:95:76:78:4a:9f:8f:32:
29:6f:34:e2:f5:52:c0:a3:07:b7:68:d7:f4:06:13:
0e:06:a8:e3:c9:43:44:0d:a5:2b:2a:5b:3b:2b:bc:
73:fd:13:d7:55:81:36:40:d2:c7:e5:80:da:5f:1b:
b6:d2:3e:4a:24:d1:4f:b6:16:c2:b4:52:88:de:96:
5b:a5:00:67:6a:55:c0:b1:0b:78:de:c9:47:0c:8e:
8a:f3:19:e8:8b:00:4a:02:4b:5a:06:87:12:6e:0f:
98:cd:2e:09:f2:26:3f:8a:fa:79:20:48:a9:5e:10:
e4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:46:BA:F1:BD:5B:F7:9F:E0:4C:94:19:73:A7:AE:7F:96:81:9A:9F
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146271.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ae25::/32
Signature Algorithm: sha256WithRSAEncryption
75:7e:c1:15:28:f9:03:67:e5:69:30:64:03:31:47:d6:d7:9f:
c1:e5:a4:8b:73:f2:3d:5f:87:37:8d:ed:77:33:15:6f:67:fa:
e4:d7:3c:9b:b9:f0:d3:d5:9b:92:23:64:aa:a5:f0:d0:88:94:
38:0a:71:03:5c:57:d3:74:05:2c:d5:be:78:72:49:7c:d4:1d:
fd:a5:00:77:47:db:77:b7:bc:ca:66:26:5d:2e:fe:ea:20:39:
84:58:25:d8:43:6f:6d:e3:42:ac:dd:88:f9:fe:7c:28:a4:04:
75:79:2a:62:12:d8:ee:2b:50:0b:10:a6:fa:be:78:b9:33:69:
cd:72:2a:c7:e2:d9:7a:f7:80:71:40:6e:f3:6a:50:fc:76:21:
57:e5:8a:1d:59:39:2e:0f:30:70:63:a3:9c:db:ed:93:f6:2b:
1c:be:c9:76:3c:33:77:8f:a9:e0:9a:c5:10:49:85:53:1f:ec:
9d:6d:2e:a1:47:e3:02:31:d3:aa:31:0d:b1:71:25:14:f8:1a:
68:62:67:c0:34:38:ec:00:28:82:f2:b7:f0:d1:3a:e0:bd:6e:
c4:17:8e:f9:9f:3d:ac:19:55:41:80:6b:2d:35:40:0f:39:68:
e1:ee:fc:52:22:f5:c1:21:b5:f2:d6:e8:90:7c:35:00:6f:4f:
f0:12:b4:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:51 2026 by rpki-client