Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146315.roa
File: AS146315.roa (raw, json)
Hash identifier: un8uTBjKwYDyXypi8tu9qhYCP9DNWCD4vzO8AP2rRS8=
Subject key identifier: 38:E6:3D:2D:68:0B:B9:2F:EE:12:DC:24:A7:F8:DB:8C:74:50:83:8F
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 56CF5CAA32A812141C768811201CA447DE3A9753
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146315.roa
Signing time: Tue 26 May 2026 08:52:45 +0000
ROA not before: Tue 26 May 2026 08:47:45 +0000
ROA not after: Tue 25 May 2027 08:52:45 +0000
asID: 146315
IP address blocks: 240a:ae51::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:cf:5c:aa:32:a8:12:14:1c:76:88:11:20:1c:a4:47:de:3a:97:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 08:47:45 2026 GMT
Not After : May 25 08:52:45 2027 GMT
Subject: CN=38E63D2D680BB92FEE12DC24A7F8DB8C7450838F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:e1:a4:ff:ec:14:5c:24:16:ec:5b:c2:18:e5:
4c:7e:b3:d6:0c:9f:d5:9a:9e:4b:0d:cf:22:ac:89:
f2:65:6f:54:27:3e:c7:bd:5f:12:16:76:ea:52:4a:
b2:79:2a:82:16:b0:e0:e3:ac:26:76:01:a5:c8:4c:
e9:d5:fe:e5:3c:4f:bb:1f:6e:dc:5f:b0:bf:01:7f:
ac:45:0a:ac:2a:76:fa:14:fa:ea:25:99:7f:0c:0b:
3f:41:e6:30:8f:4a:5e:44:42:f8:a5:a4:a4:bf:35:
38:b7:a7:9e:3b:b9:45:8c:0f:ab:9a:f6:37:50:7b:
e6:1d:c1:e1:46:b6:75:d5:e7:23:8c:ea:d5:96:7e:
b1:db:1d:6c:d6:ba:16:4c:bf:4d:2b:41:6b:cf:c4:
5e:09:9b:a0:f6:2f:6a:67:a4:a2:c1:77:12:ce:d3:
0e:49:9e:fd:56:bd:cd:c1:8d:89:a3:3f:52:a5:e3:
ff:28:b0:b8:f2:b9:a8:e2:25:f1:ae:86:6c:0a:72:
73:20:81:6f:20:50:ed:5e:43:3c:3f:d1:74:81:61:
e0:af:23:29:1d:66:76:23:ef:32:0e:83:a5:34:fb:
65:08:24:c7:b6:36:0d:24:ee:63:c8:73:b8:42:13:
9d:86:bd:1f:c5:b5:94:49:e2:35:df:35:28:5e:56:
65:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E6:3D:2D:68:0B:B9:2F:EE:12:DC:24:A7:F8:DB:8C:74:50:83:8F
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146315.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ae51::/32
Signature Algorithm: sha256WithRSAEncryption
0a:d5:4a:96:cb:d4:10:cb:12:82:c2:71:45:7e:fa:2f:a5:bf:
f1:aa:74:10:1d:9f:91:a8:fc:cc:a8:97:94:a6:a7:0f:25:2c:
28:60:51:6c:5f:8b:68:ee:25:a6:24:8a:72:0f:aa:b5:11:f2:
7b:d7:6e:37:f0:e2:43:2e:40:9e:b5:09:90:4a:79:83:11:b7:
3c:11:92:99:ea:df:dc:5e:df:12:61:39:c1:09:51:35:e1:31:
91:14:29:e0:eb:3d:83:12:b7:91:92:d4:2f:b9:22:23:80:69:
c2:b6:e0:65:66:31:16:bb:60:d6:91:45:8b:5f:a2:05:a4:87:
bb:12:9f:c8:d4:66:b0:02:1b:a9:a9:88:1d:06:1a:34:cf:19:
06:3a:24:4f:15:ed:21:07:00:13:20:14:59:a0:6c:5f:ec:b5:
72:06:23:a0:66:7a:67:ca:7b:d4:84:f8:cd:72:18:e3:f8:22:
46:73:03:dc:cd:92:b7:a4:bd:94:3b:15:a8:70:f6:11:eb:fe:
ab:f5:f8:8c:3c:49:f5:fd:21:10:08:22:2a:a0:c1:7c:69:e9:
2a:c9:87:2e:a6:00:17:96:1d:1d:7d:0a:32:19:01:b8:4a:0f:
61:9a:58:dc:be:8b:c9:67:51:03:92:30:95:34:ab:bc:d2:e9:
c0:9e:03:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:43 2026 by rpki-client