Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146342.roa
File: AS146342.roa (raw, json)
Hash identifier: uiPNqoAvhBiNLenW5sfMYubP/f8mr32cCWpOnFZergE=
Subject key identifier: 60:C0:8D:BD:25:B0:51:7C:C6:64:56:AE:BF:D6:91:4B:99:11:DA:40
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 62AEA22085D146AD6F16DAB35998E4881B570751
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146342.roa
Signing time: Mon 25 May 2026 06:48:51 +0000
ROA not before: Mon 25 May 2026 06:43:51 +0000
ROA not after: Mon 24 May 2027 06:48:51 +0000
asID: 146342
IP address blocks: 240a:ae6c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:ae:a2:20:85:d1:46:ad:6f:16:da:b3:59:98:e4:88:1b:57:07:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:43:51 2026 GMT
Not After : May 24 06:48:51 2027 GMT
Subject: CN=60C08DBD25B0517CC66456AEBFD6914B9911DA40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d7:3f:43:a6:29:39:c4:32:37:53:d2:6b:d7:
a7:84:aa:7d:fd:88:8b:c5:96:c1:5a:b3:cb:26:c3:
38:da:97:85:83:84:d6:84:f4:10:29:6a:22:9e:0a:
63:fb:fb:5e:56:ce:92:8d:b7:83:c1:48:27:de:f4:
a5:2f:9d:b7:37:18:2a:f8:e8:45:30:d5:3d:37:29:
3e:58:c0:b9:14:bc:53:4d:91:b2:e5:04:79:3e:59:
79:09:e2:75:f4:95:da:11:d9:22:8b:85:3b:fa:5b:
d1:84:95:7c:a8:ca:e8:6c:e7:e7:80:17:cc:c3:c0:
94:d2:1c:b8:7b:97:90:f2:2b:bf:7c:3a:35:ae:c9:
0a:87:1c:45:1e:8f:63:b9:a3:33:d3:40:70:91:2e:
4c:e5:8a:79:62:a2:76:88:4c:6e:a4:6a:ba:12:0e:
7f:5a:09:5a:ac:98:2b:94:5a:4c:44:8d:9d:51:30:
91:d4:c9:b0:11:e2:51:66:17:47:fb:8a:2e:38:59:
36:b9:9a:32:5d:ce:a5:37:83:50:a4:1b:cb:d2:04:
95:14:cb:6a:6c:ca:6c:ff:f6:de:24:6d:eb:a7:3a:
ae:0c:d2:ce:1e:bb:c1:2d:55:d0:9e:f9:0c:ad:c9:
e3:41:ff:b7:09:a2:4b:65:61:fa:8c:b6:04:55:3d:
08:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:C0:8D:BD:25:B0:51:7C:C6:64:56:AE:BF:D6:91:4B:99:11:DA:40
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146342.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ae6c::/32
Signature Algorithm: sha256WithRSAEncryption
a3:b0:fc:73:aa:20:f0:12:c3:78:e3:7f:d0:6f:98:22:5f:f6:
0a:3a:51:7a:a1:e8:db:df:18:44:10:fe:86:e2:51:07:06:0d:
fe:95:38:3d:21:8d:4c:1e:12:65:c1:36:05:90:01:69:e7:cf:
a2:28:88:cf:cf:a7:8d:17:f8:28:5a:55:91:ef:9b:c5:4f:3a:
c9:76:eb:51:13:47:87:49:67:9a:5d:b4:ab:68:61:5f:4f:da:
55:c0:6d:ba:2f:1f:62:67:62:cd:ac:70:e1:9d:8c:0c:09:28:
10:99:b8:e5:e2:42:88:ea:05:a0:79:d1:69:62:04:f3:cb:3e:
ff:8b:62:ea:f1:1b:9c:7b:ba:aa:9b:42:92:93:5a:b0:fc:3c:
6a:e8:15:fc:ec:6d:3a:92:7c:a7:ab:5e:b2:93:f4:0a:6e:90:
19:ec:4e:7a:bf:a5:a2:9d:62:b6:41:02:df:1b:f1:4c:e2:4a:
a1:99:cc:2c:5d:ef:e0:50:10:b2:13:eb:b4:0c:0a:73:ce:74:
86:0a:c2:8d:ea:ce:1f:8f:e3:a8:50:cf:dc:7d:13:20:d9:58:
bb:84:54:a3:b4:77:24:6b:b5:72:56:4e:08:59:f3:49:cc:28:
e1:f2:b3:de:ec:5b:af:b7:bb:5c:bc:f5:29:1e:b9:ed:57:59:
14:61:1f:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:20 2026 by rpki-client