Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146301.roa
File: AS146301.roa (raw, json)
Hash identifier: i/5hwhsOZnGMK0KVmsBGqxgdk/mv1pO5S/THcT/2anY=
Subject key identifier: 3B:D7:50:F0:CB:5E:0F:02:5D:DF:38:03:90:EC:DC:98:1E:09:C6:19
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 139EAB7F12407A6FEE2DCC73BABBC1E5257D834A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146301.roa
Signing time: Fri 22 May 2026 02:48:07 +0000
ROA not before: Fri 22 May 2026 02:43:07 +0000
ROA not after: Fri 21 May 2027 02:48:07 +0000
asID: 146301
IP address blocks: 240a:ae43::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:9e:ab:7f:12:40:7a:6f:ee:2d:cc:73:ba:bb:c1:e5:25:7d:83:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 02:43:07 2026 GMT
Not After : May 21 02:48:07 2027 GMT
Subject: CN=3BD750F0CB5E0F025DDF380390ECDC981E09C619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ff:37:38:83:20:89:89:5e:d5:47:19:1a:38:
7c:04:59:5b:4a:ba:03:6b:79:52:d8:74:5e:9a:4c:
ca:5f:df:77:ce:96:34:ce:48:88:d8:86:e4:5e:d1:
cc:33:3d:22:71:fa:64:06:83:92:e9:8f:15:60:d1:
2b:b8:cf:b6:3e:a5:72:b5:72:6b:2e:96:a3:7e:b9:
7d:b8:fd:cf:74:bd:fc:ff:de:b2:7d:4f:ab:0f:77:
5a:f2:50:ab:0e:11:75:33:db:a8:59:26:bc:6f:2c:
dd:ee:00:48:f3:0e:95:15:10:e0:5c:9e:b5:c2:4a:
4b:67:35:4e:d1:a8:98:da:5d:b3:80:a7:a3:05:a1:
4c:f5:16:f7:3a:ad:a9:56:bf:fb:be:33:da:a9:6a:
aa:c8:cd:a0:3b:e2:0c:3f:98:78:c2:92:b9:73:08:
15:44:56:79:ef:0b:c8:4a:0e:22:ac:88:ff:f8:5b:
7e:0c:a2:b4:b0:38:92:5a:1c:2b:9f:a6:2f:72:28:
d0:48:d2:9a:d2:7e:a5:95:95:13:7b:7b:32:0a:01:
c1:38:45:cf:75:6a:ba:11:79:d7:8f:f1:8f:f2:45:
83:49:bb:ae:26:23:7e:0d:9a:39:03:64:ae:0a:f4:
7e:14:87:12:e3:bd:b4:44:a6:c5:1b:4d:05:79:a1:
83:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:D7:50:F0:CB:5E:0F:02:5D:DF:38:03:90:EC:DC:98:1E:09:C6:19
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146301.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ae43::/32
Signature Algorithm: sha256WithRSAEncryption
2a:9f:ee:c8:7d:0f:ba:6f:7c:e8:de:c3:9d:e2:ca:4c:0f:e8:
c7:91:ab:9b:ac:65:12:06:b7:18:a9:68:57:51:67:78:d6:93:
94:7e:5e:a2:1d:6d:5c:56:af:5c:5c:d4:9a:45:e8:6c:1b:aa:
f4:e5:81:03:ab:fb:9f:77:25:53:87:71:4c:3e:f0:81:b9:68:
8b:a2:e8:15:af:20:04:2a:88:de:41:96:36:23:b1:01:a4:28:
57:56:a6:88:c2:44:63:02:0d:2e:52:d1:1f:d6:f1:84:83:80:
9e:c9:26:4d:ad:6a:44:69:df:28:9f:81:56:eb:84:d8:a5:d5:
d2:02:59:93:e1:d0:f1:2c:3e:6f:c9:0d:5b:d4:0e:18:e9:b5:
e6:25:50:4a:c5:0a:8b:21:bd:91:a3:57:5e:a9:f2:ec:99:94:
20:3c:e4:42:f1:5f:1d:0e:22:f0:a3:25:5b:21:9f:2f:e8:16:
df:b0:07:ca:a2:78:80:eb:d9:6b:7d:c1:64:8b:e6:8b:3c:74:
7c:39:50:a7:5e:ff:97:14:f6:a0:4b:32:2c:2f:4c:df:76:d6:
97:ae:7e:2b:e0:e5:1c:b4:0f:00:21:d3:01:60:98:22:67:bf:
42:cd:e0:27:0f:21:1d:2e:da:d3:33:ee:07:b6:f0:18:ac:df:
e1:41:ab:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:39 2026 by rpki-client