Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146287.roa
File: AS146287.roa (raw, json)
Hash identifier: /3JAijQrwclFZ68LX7a8+kGAKVkVvXJDpRpGjo2V9P4=
Subject key identifier: E4:24:67:F3:23:1C:6C:F8:96:37:DF:C6:D3:80:02:24:7C:25:EF:9D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2D9A2FC6880B31C205F72B1B41B39F107F718F48
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146287.roa
Signing time: Tue 26 May 2026 06:12:42 +0000
ROA not before: Tue 26 May 2026 06:07:42 +0000
ROA not after: Tue 25 May 2027 06:12:42 +0000
asID: 146287
IP address blocks: 240a:ae35::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:9a:2f:c6:88:0b:31:c2:05:f7:2b:1b:41:b3:9f:10:7f:71:8f:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:07:42 2026 GMT
Not After : May 25 06:12:42 2027 GMT
Subject: CN=E42467F3231C6CF89637DFC6D38002247C25EF9D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:7f:98:bb:00:71:b3:8b:75:c0:cd:13:79:6c:
04:ef:28:35:98:f7:26:5e:2a:8f:f2:2f:84:85:22:
ec:22:46:5b:9e:30:00:4d:92:a9:64:73:6d:7e:74:
a1:a6:86:b2:b8:af:ba:d3:79:d9:1a:18:85:c9:27:
26:91:35:e4:5b:67:bf:57:23:a3:c3:a4:ff:3b:6b:
b7:ca:7e:ca:a7:2e:75:d2:b3:e7:c0:f4:65:cc:55:
48:b3:55:c1:8d:84:a8:4d:73:85:ed:65:03:f1:22:
9f:76:05:e2:4a:6c:a4:91:d7:2c:21:5c:62:4c:57:
b9:d0:59:f6:d8:19:6b:40:bd:b6:51:ed:10:d5:a2:
19:26:0d:97:76:aa:43:0f:85:95:f1:68:28:0f:04:
3b:15:46:8d:d9:7c:ba:b0:f3:58:1e:c2:31:0a:e2:
d2:ef:c9:b6:23:8d:91:2b:31:1a:3d:86:72:2b:9b:
ae:0f:f2:47:91:d2:59:24:97:75:4d:c8:ad:61:87:
ae:69:45:18:1d:89:8f:c4:15:d5:af:ca:6b:e0:31:
18:51:1b:c0:9a:40:1c:bd:2f:79:32:04:7a:fc:0e:
74:73:bb:3f:0d:8a:b7:f2:06:be:ac:a2:64:72:a9:
5f:4f:85:c6:7c:ea:f9:8b:dd:48:1a:bb:df:4e:2a:
3a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:24:67:F3:23:1C:6C:F8:96:37:DF:C6:D3:80:02:24:7C:25:EF:9D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146287.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ae35::/32
Signature Algorithm: sha256WithRSAEncryption
7a:d2:87:ec:bf:4b:5d:b4:a3:6f:a0:45:f2:cd:62:e3:06:ce:
7e:dc:f8:86:5c:51:08:dd:2a:8c:64:43:37:6a:10:c3:6c:26:
17:8d:93:b1:59:41:68:c2:a9:ff:87:02:b7:de:16:dc:b7:4e:
af:c4:60:6d:45:e5:30:3a:24:26:0e:b5:0d:9b:26:9b:18:8b:
7f:8c:5b:b9:7a:e1:c2:06:64:c1:c1:d9:da:1d:82:4b:9d:ca:
99:80:fa:69:a4:b9:d9:c2:32:8f:f8:8a:b5:ab:5d:39:c2:94:
08:4f:1f:0f:08:3e:81:ad:53:0f:61:e8:a8:88:73:72:3e:9b:
8e:84:dc:90:2f:83:d1:1c:2d:aa:73:74:95:6d:24:32:29:e0:
1d:b2:26:46:cc:e0:16:3e:54:09:df:41:db:db:e4:84:67:e3:
fb:43:25:c5:ef:95:bf:3a:72:61:40:49:ac:cc:f7:c3:25:1c:
93:20:0a:1e:cd:2b:d4:e6:76:6e:30:04:04:0e:dc:a4:ae:be:
ee:b7:52:3b:eb:af:fa:b9:52:b6:35:44:8f:10:c7:46:c5:ef:
a4:af:f4:ef:7b:c9:1a:60:2a:8c:c6:a1:15:ae:bf:12:ec:74:
d5:bd:1b:33:0b:21:9b:bc:98:4c:36:ea:16:df:c8:a9:a0:81:
50:3e:32:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:24 2026 by rpki-client