Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146299.roa
File: AS146299.roa (raw, json)
Hash identifier: WvD7nbKwP9fJyptjllQ8O8ctgUydnPnipRc3nzF09CU=
Subject key identifier: 96:97:02:A3:88:EF:97:28:22:AE:07:9D:22:2C:51:4C:32:A6:11:1D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 52365B6ADAA01B647CFB900BC82F87C3BF558A6A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146299.roa
Signing time: Fri 22 May 2026 07:24:51 +0000
ROA not before: Fri 22 May 2026 07:19:51 +0000
ROA not after: Fri 21 May 2027 07:24:51 +0000
asID: 146299
IP address blocks: 240a:ae41::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:36:5b:6a:da:a0:1b:64:7c:fb:90:0b:c8:2f:87:c3:bf:55:8a:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:19:51 2026 GMT
Not After : May 21 07:24:51 2027 GMT
Subject: CN=969702A388EF972822AE079D222C514C32A6111D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8e:89:1f:c6:66:e1:e1:b0:6d:89:0b:61:48:
00:74:80:c8:a0:48:3b:f3:14:12:cd:b5:59:70:45:
f9:d0:ff:33:43:5b:81:e3:99:af:c8:1d:67:51:ce:
e6:4f:eb:8f:d1:00:a1:b5:82:dc:21:29:3f:c3:6b:
f8:ff:e4:72:a9:42:41:66:e1:e2:bf:41:38:bd:30:
46:5f:db:20:15:64:92:e1:77:4b:83:eb:69:99:aa:
a9:3d:9a:df:23:3d:b7:86:dc:b2:6a:97:38:48:92:
20:02:67:d0:32:fa:bf:64:36:c9:7a:57:d0:4a:1a:
5a:70:58:3c:3c:fb:e9:9b:4d:59:ae:7e:a7:63:75:
80:65:27:dc:e4:e1:35:07:de:0f:84:7c:83:1a:9f:
e9:12:fb:63:85:ea:56:61:47:0d:2f:92:69:d9:95:
51:14:d2:0c:bb:f9:28:08:c3:3d:5d:b1:2d:97:93:
7b:36:d4:f2:26:bd:c4:74:8a:2a:6c:1c:96:64:58:
b1:ae:4f:de:78:02:a8:79:b6:3a:45:ac:58:92:70:
79:31:ab:0f:8c:37:d7:6b:54:6d:05:53:c4:37:de:
59:0a:38:f5:4d:b9:d6:4b:00:19:9e:98:50:18:90:
92:71:00:77:3d:44:d9:82:a9:f2:93:56:44:57:77:
30:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:97:02:A3:88:EF:97:28:22:AE:07:9D:22:2C:51:4C:32:A6:11:1D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146299.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ae41::/32
Signature Algorithm: sha256WithRSAEncryption
92:13:f9:a1:72:bc:29:26:a1:e8:44:9e:11:6a:52:9d:d5:9b:
da:a3:02:63:d2:a4:8b:96:5d:d2:f4:13:8f:a8:9e:3d:ac:52:
ff:d7:5d:0a:0d:71:de:d6:d6:5a:60:4b:00:d2:b4:c9:97:52:
26:51:9f:fb:8c:6e:a5:a0:39:52:23:bf:6b:94:f9:0f:e6:46:
0e:c3:19:46:19:91:3e:59:78:47:a4:60:92:7d:e1:d9:b7:38:
ad:43:a8:5d:b7:d4:f4:36:ad:3a:79:86:82:cd:a9:03:dc:a7:
b5:0e:56:03:a6:53:38:e7:9a:4e:1d:9c:a6:ed:30:a5:7d:45:
fb:bf:87:a5:03:06:b8:d1:2c:a6:69:26:c7:08:0a:0a:8e:9d:
7b:89:49:d6:26:c3:1d:81:e5:ac:62:bc:8a:f0:fb:3f:60:31:
12:1c:2d:b3:2b:18:91:c2:b5:42:95:40:bc:4f:15:b8:58:6f:
17:0c:90:78:16:99:51:8e:ef:76:e1:b8:e7:80:8b:dc:2b:5b:
75:7f:f6:c2:a6:35:d6:88:79:27:17:e9:87:0d:a4:ed:b7:f6:
e7:ac:45:52:cc:ff:30:b0:9a:b3:cb:b7:8b:38:94:08:3b:84:
aa:73:2f:1d:d4:69:b7:91:d0:6f:60:8b:40:0d:f2:73:63:ff:
13:43:9c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:22 2026 by rpki-client