Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146272.roa
File: AS146272.roa (raw, json)
Hash identifier: BlPWzZTmHNcijmSNwSclb1pgILDX17MJ/wEv0y+gduM=
Subject key identifier: D2:A7:F7:A7:F9:19:1A:DA:87:27:B3:45:F7:11:29:69:67:A4:D4:E2
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 35524ABBFD24DED94DEB5780C7884F3DED15B2EF
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146272.roa
Signing time: Mon 25 May 2026 03:19:08 +0000
ROA not before: Mon 25 May 2026 03:14:08 +0000
ROA not after: Mon 24 May 2027 03:19:08 +0000
asID: 146272
IP address blocks: 240a:ae26::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:52:4a:bb:fd:24:de:d9:4d:eb:57:80:c7:88:4f:3d:ed:15:b2:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:08 2026 GMT
Not After : May 24 03:19:08 2027 GMT
Subject: CN=D2A7F7A7F9191ADA8727B345F711296967A4D4E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:8c:84:6e:d1:c2:b7:72:c0:63:a6:0f:3f:37:
67:fe:76:eb:4e:ee:d6:b9:22:97:78:e6:e1:90:7d:
8a:e2:8c:29:e7:18:02:91:53:2d:33:30:cf:ea:44:
44:26:77:ef:73:70:b2:68:36:28:d9:c8:ec:72:89:
a2:2a:75:17:72:28:30:5c:21:0b:2e:ad:65:44:4d:
f1:45:e4:9c:9c:f9:f4:d0:a4:d0:f8:18:7a:e9:a2:
47:79:a2:ca:02:b4:a6:60:e6:eb:11:c7:ac:18:af:
e0:d6:2b:a4:4a:ca:20:4d:b5:55:ca:67:c4:c6:ce:
aa:99:6e:04:fc:48:d9:aa:c8:6a:73:58:bf:fa:1b:
05:fd:56:66:6d:d5:79:87:c4:c6:9b:23:39:0a:a0:
c9:ca:7f:f9:b7:3a:18:bd:d2:ad:5e:6c:05:cd:eb:
65:10:67:36:3c:80:80:5b:39:17:d6:f6:da:7d:8e:
57:ee:e6:74:05:dc:5e:73:85:cb:da:d3:a0:18:f1:
20:61:9d:01:24:a3:16:71:9f:b6:6c:ae:f3:03:ae:
05:0d:fb:8f:05:95:a8:5c:23:a3:4a:6a:ea:12:25:
54:18:1a:ee:80:45:71:95:1b:24:09:3e:02:a1:22:
72:20:60:27:67:a5:b8:dc:e6:89:4a:77:6f:23:7a:
97:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A7:F7:A7:F9:19:1A:DA:87:27:B3:45:F7:11:29:69:67:A4:D4:E2
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146272.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ae26::/32
Signature Algorithm: sha256WithRSAEncryption
b1:18:e1:88:d1:f2:1e:90:de:d0:a5:41:8e:14:31:67:5b:4c:
6d:71:37:bb:8f:14:ec:4b:a6:11:4a:65:31:d3:c5:39:5e:be:
79:64:c8:07:97:20:03:92:d5:97:08:53:41:ce:3a:14:6f:90:
82:fc:4f:c7:47:74:d6:c7:ea:cf:2b:53:5c:13:1e:e1:6d:b5:
20:01:98:2c:b3:54:36:5d:75:15:9c:8d:f7:75:f7:74:55:e4:
38:b3:0a:36:60:8d:6f:37:14:f8:48:38:19:dc:43:b6:e7:cb:
49:7a:ff:ec:0c:f2:a0:7c:2a:86:39:bd:dd:48:b0:a4:6d:0f:
31:ab:e8:3a:33:38:52:7e:ac:6b:46:d1:30:4d:dc:57:fd:96:
3f:f0:ea:36:a7:03:8c:1c:53:28:ed:30:cb:ba:7c:f0:35:ac:
6c:de:21:f6:63:3c:0d:b3:ce:ed:44:23:92:57:5a:cb:90:3d:
65:e1:84:a8:c8:80:79:f6:40:05:d7:c1:5d:3c:c5:60:c5:53:
09:84:05:19:99:e1:c8:f8:23:c5:78:8d:6f:fc:92:35:fa:b2:
48:b2:ff:d5:a7:76:ab:db:b0:85:bd:ac:bb:74:9f:4c:c8:e0:
0d:57:d2:83:ce:a0:2f:e7:14:1a:f7:90:fc:ac:e8:36:a6:38:
b8:22:be:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:16 2026 by rpki-client