Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146317.roa
File: AS146317.roa (raw, json)
Hash identifier: Mpy9Qlq3MBMK/NHKCiFiobvrA3hPiJv2JgIZYIyTtTg=
Subject key identifier: 72:CF:81:8D:D6:2B:68:8F:AA:A6:F6:4D:EF:98:B9:0F:B4:92:56:FC
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0F6E68F064D6C15C1B20292ABFA0142A1BA39DDB
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146317.roa
Signing time: Fri 22 May 2026 07:08:51 +0000
ROA not before: Fri 22 May 2026 07:03:51 +0000
ROA not after: Fri 21 May 2027 07:08:51 +0000
asID: 146317
IP address blocks: 240a:ae53::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:6e:68:f0:64:d6:c1:5c:1b:20:29:2a:bf:a0:14:2a:1b:a3:9d:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:03:51 2026 GMT
Not After : May 21 07:08:51 2027 GMT
Subject: CN=72CF818DD62B688FAAA6F64DEF98B90FB49256FC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8a:5d:f2:de:1c:23:e7:fd:e1:4a:6d:e8:b4:
30:a0:b3:8c:d0:5b:e0:d1:a5:20:ef:20:72:fc:14:
98:f2:54:8b:3f:9d:eb:bb:9b:c1:3a:11:31:df:75:
93:9a:63:b1:a1:10:01:5f:83:82:c4:f0:cb:eb:1d:
4e:3e:c8:6c:e7:3c:03:78:18:e1:b6:8d:5d:9c:2d:
65:16:60:ae:e5:11:f5:8f:35:80:cd:ef:dd:01:bf:
b9:7a:9e:a4:81:34:c3:40:de:8b:c3:48:57:a9:72:
c8:d0:72:4c:d2:14:d2:ec:df:b0:98:71:84:00:fa:
4e:96:55:70:90:57:15:63:50:51:11:65:4e:9c:c2:
c1:df:2c:33:67:3e:22:da:fb:dc:19:74:3c:a6:e0:
fb:25:9b:38:cd:64:eb:eb:ac:00:5e:6d:4f:73:39:
7e:1d:9f:d1:0f:ca:7b:e6:67:29:a5:98:56:7d:a3:
7b:44:6b:57:40:fa:83:5a:ef:34:dc:f9:c0:da:f9:
e3:78:43:65:77:88:d5:5c:5c:41:89:a3:4d:76:77:
49:e9:a9:27:c6:14:e3:6f:36:c8:ed:a1:f6:c8:35:
cd:b0:d2:15:c6:9b:ca:7c:64:b3:90:e2:6f:52:af:
95:82:fb:b0:42:f0:b2:94:07:96:66:4e:67:60:fe:
b1:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:CF:81:8D:D6:2B:68:8F:AA:A6:F6:4D:EF:98:B9:0F:B4:92:56:FC
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146317.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ae53::/32
Signature Algorithm: sha256WithRSAEncryption
48:3d:b6:ef:e2:34:93:f1:aa:55:3c:7f:d5:08:f6:a1:48:89:
79:35:da:2f:c6:39:a7:72:50:05:d9:59:f6:12:07:c6:14:81:
46:ec:7b:4e:54:0c:0b:75:d9:4f:26:0b:bc:67:e7:63:de:15:
d3:1a:5c:9f:e6:36:f5:ca:09:7c:a3:89:18:19:e6:a2:df:a1:
8c:0a:1b:bb:cb:6e:b0:fe:37:21:c3:7d:53:0b:ec:2f:e9:bd:
7c:55:8f:99:94:74:72:c7:85:54:d7:2c:50:85:d6:66:e9:ee:
b4:91:ae:6c:08:7e:50:84:ed:4f:eb:90:4c:45:6d:65:8e:2f:
77:d8:e4:ff:93:4a:92:4e:2b:2a:f7:89:e5:03:c7:36:b6:21:
73:b1:5a:42:5a:25:f9:9c:3f:81:d2:ff:3b:3b:65:d9:5d:95:
fc:92:aa:76:16:11:1c:63:1d:44:07:e2:36:b4:a9:53:3a:5d:
33:3f:11:37:ae:a9:c6:83:3b:a9:ef:8b:5f:26:2c:7b:14:fd:
6b:6c:5a:63:9c:7c:8a:1d:e3:0b:dd:9e:ba:c6:46:be:31:15:
36:c6:fe:99:3d:6c:80:b7:af:14:2c:13:bf:13:a3:b4:e0:00:
e6:e7:f2:a2:56:9d:d9:b3:3b:9d:2d:fc:5e:ed:4b:89:4a:22:
fe:98:85:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:09 2026 by rpki-client