Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146302.roa
File: AS146302.roa (raw, json)
Hash identifier: D9nQtxpP5ZwGYP+RgUdI/P7o9pQPp376tXshXFA4p48=
Subject key identifier: 63:BD:71:50:66:05:88:F2:02:D4:5B:5E:84:55:B3:26:93:66:FE:1C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3CC530790D3135F35A32E57621EA385CCFA0D663
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146302.roa
Signing time: Tue 26 May 2026 06:12:37 +0000
ROA not before: Tue 26 May 2026 06:07:37 +0000
ROA not after: Tue 25 May 2027 06:12:37 +0000
asID: 146302
IP address blocks: 240a:ae44::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3c:c5:30:79:0d:31:35:f3:5a:32:e5:76:21:ea:38:5c:cf:a0:d6:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:07:37 2026 GMT
Not After : May 25 06:12:37 2027 GMT
Subject: CN=63BD7150660588F202D45B5E8455B3269366FE1C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:59:0a:11:9e:5e:45:63:e5:2b:70:ee:ea:68:
ea:af:17:ab:63:8a:13:26:a4:0b:fe:d1:ac:57:47:
7f:3b:23:2f:11:d9:bb:eb:02:ca:85:d3:fe:73:92:
c8:df:ee:c9:fb:57:21:e5:0f:22:c1:f1:52:cc:78:
77:a3:ad:57:7d:94:9b:8d:29:97:68:73:45:3d:ba:
9e:5c:ad:80:e2:82:8c:97:93:2c:08:b4:d9:b7:14:
64:12:97:7e:a7:e6:35:8b:b7:03:3d:0b:af:c0:8d:
aa:b1:0d:99:58:ca:23:9e:f8:50:95:08:02:4b:5a:
e2:51:e5:0f:f3:60:5d:be:0a:a0:ec:52:7a:65:6e:
d4:70:68:ed:01:55:03:d4:cb:d2:c3:94:12:aa:1a:
5a:88:dc:f3:08:c1:33:36:a9:ca:91:11:9c:4e:04:
92:7d:91:ee:9a:e1:cb:ab:8e:52:09:fe:da:3f:e6:
ed:17:33:11:10:f3:7b:bb:c0:54:1a:47:75:db:62:
9c:46:f9:b2:34:5a:a9:f5:5b:43:cc:a5:1a:0d:be:
80:96:90:47:56:38:63:95:f3:8c:05:eb:99:ae:9b:
92:34:da:f2:61:9d:56:c0:e7:6f:77:f3:5e:7c:9d:
b4:97:5a:c2:2e:6d:27:e1:26:3b:19:6d:fd:5e:18:
2e:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:BD:71:50:66:05:88:F2:02:D4:5B:5E:84:55:B3:26:93:66:FE:1C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146302.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ae44::/32
Signature Algorithm: sha256WithRSAEncryption
a6:c1:a9:d7:03:91:1e:60:0c:30:51:ad:ef:8f:d9:3f:77:21:
e3:8c:91:18:90:b2:07:24:01:3a:5a:68:ac:e0:74:c3:33:56:
be:32:d6:58:95:33:4f:44:c8:60:ef:d4:74:8f:32:0f:51:ab:
fc:9c:be:95:5c:52:03:3d:24:40:d1:64:a5:ac:d1:d8:61:e5:
6b:88:4c:ae:62:99:00:86:5f:ad:ed:88:15:38:e9:db:f4:da:
f1:59:9b:77:07:79:72:27:bf:43:60:a8:c4:55:5f:d9:84:88:
24:dc:22:69:81:ea:b6:66:4c:81:c1:22:99:71:55:fd:6f:7d:
49:c3:49:03:d3:b6:66:95:8a:3e:e2:57:f8:46:27:ff:3b:a9:
41:e1:99:37:11:8a:0c:25:c0:a5:ad:11:3d:ed:f1:80:d7:b0:
1b:b6:4a:3f:2e:f7:91:c7:99:1b:9d:f3:e1:69:b0:5c:9f:64:
51:ca:8b:eb:af:cf:e2:6e:be:9f:da:86:e7:79:ab:f1:17:4a:
31:93:fb:a1:ff:29:7c:ab:59:db:27:bf:48:7d:ec:2a:6d:56:
bb:51:1a:76:70:f7:95:08:e8:5b:b9:88:ea:8d:06:19:89:e1:
12:fb:d5:5c:b0:55:95:bf:b5:2a:4f:98:69:47:f7:68:e9:33:
a4:e7:18:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:33 2026 by rpki-client