Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146339.roa
File: AS146339.roa (raw, json)
Hash identifier: gxkZ/ie3iAiIUZCXI9Z9EgIymIkV2DG1+L5eqRPTrw8=
Subject key identifier: D5:E2:24:CB:54:F4:6A:E4:90:95:95:45:89:94:A1:2C:29:60:E0:7C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5B53E1AB8A10ED3DDCFA589AA005D307749785AE
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146339.roa
Signing time: Tue 26 May 2026 03:16:47 +0000
ROA not before: Tue 26 May 2026 03:11:47 +0000
ROA not after: Tue 25 May 2027 03:16:47 +0000
asID: 146339
IP address blocks: 240a:ae69::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:53:e1:ab:8a:10:ed:3d:dc:fa:58:9a:a0:05:d3:07:74:97:85:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 03:11:47 2026 GMT
Not After : May 25 03:16:47 2027 GMT
Subject: CN=D5E224CB54F46AE4909595458994A12C2960E07C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:9c:42:db:0a:ce:85:78:7c:bf:8a:98:fc:a4:
0e:7c:bf:a1:21:b2:51:91:85:8c:98:69:e5:73:0c:
78:f8:8b:4e:8b:05:d6:5c:ad:e3:fd:cb:c6:67:6c:
a3:77:ae:62:e3:73:39:3a:b2:db:70:93:e0:b2:f2:
e9:62:71:e6:a7:ef:52:38:07:80:88:de:0b:b5:1c:
35:a9:4a:78:6a:38:2f:3c:5e:8c:39:00:ff:8d:28:
06:c7:41:b4:f9:1e:e3:85:e0:9b:d1:10:d1:0e:69:
4c:e3:67:bb:29:3e:61:af:95:5e:8f:2f:46:9a:ac:
3f:a4:3d:87:8e:6f:3e:c3:2f:d6:4d:49:58:f5:a8:
00:b9:ff:c7:30:8c:7e:73:28:83:d5:2f:f2:3b:73:
13:9e:4f:3f:41:1d:14:ad:88:c2:08:6a:93:a4:b3:
8f:ab:de:d0:49:6a:eb:bd:87:00:3a:ab:83:08:02:
44:9a:bf:8b:f9:30:2a:08:a5:00:5a:88:ff:85:50:
3d:f9:db:a6:62:ec:e4:b6:b3:af:df:90:37:f3:03:
58:1d:6d:30:e3:b9:b6:6d:ac:06:b5:5c:c1:20:ca:
24:b6:51:1d:e7:c2:4e:ff:9c:cb:29:8d:0c:5b:2a:
16:5b:39:e9:a7:7f:c2:34:43:db:38:a9:56:97:61:
a9:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:E2:24:CB:54:F4:6A:E4:90:95:95:45:89:94:A1:2C:29:60:E0:7C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146339.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ae69::/32
Signature Algorithm: sha256WithRSAEncryption
9f:9f:03:3d:1e:50:65:3f:d6:76:60:9b:b7:28:ac:a9:94:17:
35:0c:96:31:76:b9:54:47:48:d3:95:d3:5a:6f:0f:fc:05:fe:
83:a7:7c:f5:31:5b:a9:61:c8:89:e7:cf:3d:95:66:7b:28:91:
d4:ca:aa:a1:27:09:73:55:e8:10:f6:24:67:3f:8f:27:9b:fe:
b4:c7:69:cb:b6:36:66:2c:df:c5:8b:f5:e5:a1:00:b2:8a:ec:
b9:97:c5:f0:30:a0:92:59:52:83:9a:09:db:c4:d7:38:92:37:
92:9f:64:06:81:b5:79:01:88:1e:8c:8d:8a:ed:32:e9:2e:ed:
36:62:1d:dd:36:1a:c7:fa:71:b0:46:b0:a8:9e:3c:5b:e1:1e:
72:9f:1e:d7:86:21:45:0b:8d:d8:93:83:bc:11:8f:61:8f:6a:
b5:4c:71:13:37:a5:88:df:82:35:a0:08:ec:f0:40:a6:98:bf:
80:86:89:81:41:75:f9:ab:2d:17:56:55:2e:47:fa:e2:63:8e:
7b:1b:40:83:db:da:2e:a2:bd:65:72:79:0f:5c:ac:47:30:51:
f9:38:67:b7:4d:f1:49:be:d9:94:18:67:e1:4f:88:c5:97:d8:
11:de:7b:c8:20:d1:83:73:66:ff:0f:dc:48:d5:85:0f:09:ea:
66:c9:e6:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:36 2026 by rpki-client