Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146329.roa
File: AS146329.roa (raw, json)
Hash identifier: Rcdrd8Bk1JVZ+8Xvic4PVfY8J63tqfXoN7CA79fvQrs=
Subject key identifier: CC:4B:50:FA:2C:3C:62:A1:06:44:E3:38:FF:34:95:CF:49:B4:2F:74
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2B2239D1DFDEF060C1727822B6759E2A61E54C97
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146329.roa
Signing time: Mon 25 May 2026 01:51:25 +0000
ROA not before: Mon 25 May 2026 01:46:25 +0000
ROA not after: Mon 24 May 2027 01:51:25 +0000
asID: 146329
IP address blocks: 240a:ae5f::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:22:39:d1:df:de:f0:60:c1:72:78:22:b6:75:9e:2a:61:e5:4c:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:46:25 2026 GMT
Not After : May 24 01:51:25 2027 GMT
Subject: CN=CC4B50FA2C3C62A10644E338FF3495CF49B42F74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cd:4c:24:c0:a7:34:5f:90:19:60:65:b2:f8:
45:74:e1:8a:46:df:96:a6:f2:89:a0:f1:d2:f7:c5:
76:23:14:1b:e4:64:d0:14:58:70:4d:b5:90:bd:10:
be:d9:17:7e:05:a8:60:43:46:b4:76:88:c3:fb:a8:
49:b2:c6:80:7a:f0:86:c1:e9:79:6d:c5:10:e8:f8:
9d:38:cf:ee:11:a3:7c:28:27:4d:64:a2:30:9d:e6:
4b:33:85:f8:21:58:81:b8:b8:f2:88:d6:f0:a1:79:
14:80:20:6b:a2:25:6f:be:c2:92:58:8d:d8:73:e9:
c1:c8:2f:79:56:89:93:91:82:87:85:4b:1b:09:73:
e9:53:6e:59:6a:70:e7:08:6d:60:e1:53:43:4f:4e:
de:8c:8e:eb:42:f9:fa:75:5d:1c:90:3b:11:40:db:
d0:cb:96:e5:f3:d1:e5:24:94:bc:fd:89:96:f8:96:
11:a7:fb:95:40:c3:60:2c:28:22:f6:01:df:a9:0d:
cf:d9:3d:25:5c:a6:80:1a:12:d6:7a:25:85:48:49:
fc:be:e8:fa:cb:50:43:12:5f:5f:84:4f:38:d2:ac:
96:ee:de:97:04:40:e0:16:35:b3:f0:45:1f:d1:50:
99:b8:7a:03:20:cd:fd:18:f4:d2:b9:40:0a:26:02:
a7:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:4B:50:FA:2C:3C:62:A1:06:44:E3:38:FF:34:95:CF:49:B4:2F:74
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146329.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ae5f::/32
Signature Algorithm: sha256WithRSAEncryption
0d:29:5a:f1:46:b2:4d:dc:d1:84:ee:32:1e:be:20:c0:aa:16:
5e:94:fb:a3:06:2c:b3:fd:49:46:bd:c1:79:99:93:ff:98:33:
e6:ae:a9:30:b3:5e:75:56:0c:3e:32:3c:03:44:c3:52:ec:3d:
07:5c:d7:de:8e:11:65:58:67:39:94:93:0f:08:de:09:9d:7a:
30:b4:76:cb:be:e6:71:cf:b8:f4:63:9d:b0:bb:df:52:63:48:
73:f1:4b:89:2c:6f:eb:60:b4:ba:9a:f3:74:d6:35:72:f2:9e:
cb:f4:cf:20:b0:1d:d4:71:d1:da:b1:01:10:59:d8:ef:5c:38:
64:11:b4:c1:58:c4:c2:0e:d8:32:77:34:fc:8c:14:60:75:4f:
8b:10:48:de:a0:d1:8f:50:1b:e5:e3:be:00:e8:18:39:68:92:
10:39:80:17:8b:64:14:81:5d:d3:1e:9d:06:bf:c2:70:4d:32:
80:41:4e:54:73:75:ae:63:1b:65:86:cd:d2:bb:67:49:ee:ee:
1a:51:82:e1:e5:8a:6e:31:23:41:84:03:dc:7c:87:54:ef:67:
49:f7:41:fc:ba:85:ef:f0:8a:c7:5f:a6:f2:6b:9d:d5:5a:af:
d7:e6:8a:ea:b3:e4:15:59:a7:b8:a6:1c:c3:73:ae:50:cb:75:
58:66:2b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:09 2026 by rpki-client