Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146291.roa
File: AS146291.roa (raw, json)
Hash identifier: LnT5FDSzrUnZC4G2EE3ZbZNTtwqDwdP4jSn/N1qXlp8=
Subject key identifier: A8:BE:D1:01:31:99:F8:56:8E:8F:FE:83:1B:3D:6B:9A:A2:18:74:8D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0B389DFC0A35542DF01872BB1E0CBF6829630A55
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146291.roa
Signing time: Mon 25 May 2026 02:22:42 +0000
ROA not before: Mon 25 May 2026 02:17:42 +0000
ROA not after: Mon 24 May 2027 02:22:42 +0000
asID: 146291
IP address blocks: 240a:ae39::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0b:38:9d:fc:0a:35:54:2d:f0:18:72:bb:1e:0c:bf:68:29:63:0a:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:42 2026 GMT
Not After : May 24 02:22:42 2027 GMT
Subject: CN=A8BED1013199F8568E8FFE831B3D6B9AA218748D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8d:c1:f0:e0:50:a8:ad:5f:7b:79:00:42:21:
12:43:b2:c1:bc:89:03:b3:3e:68:e4:ab:f9:21:64:
d8:92:82:ac:fb:7f:a5:b6:5a:9f:de:e9:c1:c3:53:
36:6e:c8:06:45:51:38:1e:77:a8:70:1c:56:b1:8b:
e3:33:63:84:b5:7f:fd:ce:85:3a:fb:0c:a8:cc:7d:
23:03:39:a3:62:68:46:25:66:45:da:43:f1:85:be:
f5:1d:9d:5d:cd:2d:82:2a:59:68:1c:45:f2:be:89:
6c:a8:8c:06:64:23:06:1c:18:1f:33:8d:3c:75:52:
00:99:0c:c5:d9:31:78:30:10:9e:80:af:6d:27:37:
d7:ff:51:bd:4f:88:a7:66:c6:d4:0a:7f:e8:c0:e2:
c2:ab:d3:5e:f0:8b:9a:89:c4:e6:3e:ad:4a:2e:a7:
46:cd:7e:c8:27:e8:ac:34:e3:0c:07:bf:ec:19:04:
5b:7a:eb:76:c5:bd:28:58:0f:3e:3c:40:5c:ed:c9:
ad:f1:3f:49:e5:2e:c9:12:fe:98:c9:99:02:b3:b1:
be:ed:95:58:55:db:7d:6a:cf:d2:25:f0:2a:65:30:
2b:02:54:25:1c:74:46:5b:61:a2:1d:7d:ff:f5:3c:
4f:9b:24:78:ae:a0:55:f8:bf:86:ee:5e:3e:ef:57:
7e:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:BE:D1:01:31:99:F8:56:8E:8F:FE:83:1B:3D:6B:9A:A2:18:74:8D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146291.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ae39::/32
Signature Algorithm: sha256WithRSAEncryption
33:76:92:27:62:fa:a8:65:d1:53:61:71:49:d1:a0:29:75:4c:
97:18:02:b3:5d:55:6a:4c:3b:a1:1a:cc:93:cd:d5:14:71:23:
dd:bd:90:0e:13:54:96:54:90:89:c8:5d:1b:fe:de:65:12:02:
26:25:fc:94:4b:bb:10:fa:dc:2a:b7:44:f9:1c:14:b7:9a:62:
9f:f9:5a:ba:9b:7f:b4:58:de:da:f0:c7:fd:08:2d:6d:41:82:
d6:d8:8d:c0:68:01:2f:0a:6f:d6:8a:b3:96:af:53:84:d0:21:
e9:7e:25:0a:3a:d9:a6:b9:9c:59:dd:34:d1:7a:48:dd:6b:6b:
45:93:32:0a:fc:1d:00:44:7a:09:66:9e:19:d5:ee:5b:9d:7c:
e7:4e:b4:2d:4b:d3:3e:57:ad:63:9b:6e:7a:d3:ae:64:ee:95:
a1:be:0b:eb:e3:5a:49:2e:de:fb:33:2f:a7:6d:d0:2d:11:b8:
96:11:0b:8d:d8:c1:85:6f:91:62:1f:7b:75:a8:f3:73:cb:36:
a1:cf:f6:39:b1:9e:fe:fb:95:89:5c:68:6a:e5:95:54:21:ec:
bc:3a:df:ac:f5:76:eb:86:b9:7d:09:ea:54:e6:95:92:28:85:
eb:5b:79:26:15:6c:50:0c:f4:40:18:cf:83:7a:90:74:4a:ef:
fc:ce:c1:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:19 2026 by rpki-client