Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146281.roa
File: AS146281.roa (raw, json)
Hash identifier: gVYGDUziq96eZb/mHVAVVasd/CjxkV2Rb5VKqbuCCs4=
Subject key identifier: E2:A3:4D:37:09:73:1D:6B:2B:4C:77:66:33:D9:7A:A5:15:7F:F9:7A
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0BFC95CE4BAEC10C9CF137C805D48DE31AE43BD0
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146281.roa
Signing time: Tue 26 May 2026 03:16:56 +0000
ROA not before: Tue 26 May 2026 03:11:56 +0000
ROA not after: Tue 25 May 2027 03:16:56 +0000
asID: 146281
IP address blocks: 240a:ae2f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:fc:95:ce:4b:ae:c1:0c:9c:f1:37:c8:05:d4:8d:e3:1a:e4:3b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:11:56 2026 GMT
Not After : May 25 03:16:56 2027 GMT
Subject: CN=E2A34D3709731D6B2B4C776633D97AA5157FF97A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:78:c8:22:2e:f5:b3:7d:64:8d:d6:f2:f4:92:
f9:ef:ad:6d:0f:6f:5a:e9:27:ef:25:41:f8:b1:5c:
32:73:41:ff:f8:94:8b:e0:30:c3:84:24:8f:d5:00:
c8:72:aa:6b:88:20:b5:9d:2d:9e:e1:95:f2:ff:ff:
98:35:52:91:9d:cb:e0:2c:c9:97:b8:be:a8:91:55:
f1:a3:68:05:32:72:db:a3:82:ab:b2:3c:e3:5c:51:
71:69:38:8f:1f:b8:ab:51:d4:68:c3:b1:ae:a9:9e:
f5:32:80:ab:1e:23:30:ba:d5:c4:01:68:c6:fb:49:
a7:a0:45:01:33:dc:1b:f6:27:b3:1e:07:f1:11:61:
5c:0a:a3:ac:bf:2a:05:77:48:2f:7f:82:e5:52:a7:
b8:3c:c7:91:fd:26:2f:89:1c:57:78:e7:b7:b0:d6:
1e:83:a4:8a:97:a0:0b:6f:a5:d6:c6:a1:fa:d1:25:
64:01:af:03:e3:a2:74:32:54:18:55:13:98:4e:b7:
2f:ec:04:04:c4:db:4a:49:35:ce:67:4f:45:12:6d:
ed:02:2a:53:29:e2:78:6e:5f:87:9d:c7:6d:9e:a1:
b8:4a:00:b5:20:8b:3f:aa:2d:e1:97:57:e8:b9:86:
fa:77:db:2d:ff:83:14:98:12:78:bd:f4:d7:a1:1c:
e5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A3:4D:37:09:73:1D:6B:2B:4C:77:66:33:D9:7A:A5:15:7F:F9:7A
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146281.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ae2f::/32
Signature Algorithm: sha256WithRSAEncryption
86:5f:3a:1e:6b:1d:99:2c:6c:9a:53:7d:c8:b3:14:8a:36:53:
b1:5e:67:ed:5d:2a:67:ad:4f:12:dd:81:2b:8c:0d:33:ee:d9:
7b:f5:04:d3:d0:1c:8e:37:3b:db:a8:cf:6a:b4:54:0e:81:98:
d3:10:3f:f1:a7:67:16:80:d4:70:f4:80:f0:ba:9b:aa:57:2a:
a4:d3:bb:ee:58:40:23:7f:8e:41:f1:2a:2b:83:65:ee:bb:bf:
d3:bb:39:74:b0:da:4b:23:df:8b:0e:9e:67:ac:ad:0e:00:70:
f8:a8:52:92:61:b9:ba:b5:9f:1a:0e:dc:93:2c:1b:e3:d5:0f:
50:e6:5e:ea:af:0a:2c:ff:fb:50:f1:60:34:31:d9:6f:0c:5d:
4d:33:c0:ac:40:34:58:81:ad:64:be:bb:ec:f5:bd:6b:80:d8:
62:f4:b0:c8:10:5a:52:a0:26:3b:d3:df:e7:7f:99:74:6a:65:
a6:4b:e8:4e:2b:77:a9:aa:01:ac:66:9a:a0:73:ce:1e:ee:72:
e9:03:2a:26:1f:f4:2e:a5:35:67:09:df:52:52:2b:8f:4a:cd:
0e:08:44:3a:b4:be:08:8d:00:c0:4d:9d:ce:17:51:4b:9c:f5:
46:60:a3:05:ac:c4:43:54:e3:59:33:e2:39:4d:1c:f6:8e:89:
97:85:bd:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:23 2026 by rpki-client