Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146346.roa
File: AS146346.roa (raw, json)
Hash identifier: EQAn4YETikyMJbXQaHqq0rWM+kGFICxMH816o/GjcuY=
Subject key identifier: E3:A3:AF:E9:8E:24:59:86:A2:4D:88:15:D3:C4:7E:3C:19:B2:98:79
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 5F07008DECFF75241C69A78768019D5B8D626391
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146346.roa
Signing time: Tue 26 May 2026 02:34:58 +0000
ROA not before: Tue 26 May 2026 02:29:58 +0000
ROA not after: Tue 25 May 2027 02:34:58 +0000
asID: 146346
IP address blocks: 240a:ae70::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:07:00:8d:ec:ff:75:24:1c:69:a7:87:68:01:9d:5b:8d:62:63:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:29:58 2026 GMT
Not After : May 25 02:34:58 2027 GMT
Subject: CN=E3A3AFE98E245986A24D8815D3C47E3C19B29879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:81:7d:b4:ed:29:2c:60:01:eb:03:48:14:45:
a5:54:56:90:57:0a:49:99:5b:23:d1:de:ae:9e:c8:
87:3e:59:88:77:27:01:60:af:1f:e3:25:48:b0:f2:
06:0e:4c:8b:95:2f:cc:56:b0:ce:8a:dd:f9:fc:bc:
0b:16:85:97:b5:ac:69:c7:a6:64:e6:8b:7c:77:f0:
5f:c8:0c:f4:93:37:b0:c5:ce:6c:2e:36:4d:5f:d1:
ed:d1:7e:99:8a:61:17:cf:72:74:e5:14:96:d2:02:
1c:24:58:29:7c:b9:89:98:da:fa:ec:ef:c0:d5:5a:
b4:54:7e:0d:f0:f1:a7:9c:bd:cf:18:a6:ce:8e:88:
0c:6b:87:68:94:25:34:91:64:77:c1:4e:ee:b2:76:
39:63:25:3a:74:a6:59:e0:aa:fa:ca:e1:00:75:1e:
21:71:44:b9:8e:3e:25:73:22:b6:bd:ac:e8:27:b1:
e2:a1:1d:3c:80:91:6d:86:61:4e:dc:67:d1:9c:6e:
54:46:de:88:15:68:ba:a9:14:d3:73:0e:ec:7a:21:
ec:d1:75:02:2b:2c:5e:84:fe:7a:fe:e6:05:71:21:
05:24:40:6c:5b:64:30:0d:76:8b:2b:82:aa:88:c9:
3f:88:9a:8d:36:4b:1a:c0:1c:ec:9c:d1:76:24:a3:
9b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A3:AF:E9:8E:24:59:86:A2:4D:88:15:D3:C4:7E:3C:19:B2:98:79
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146346.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ae70::/32
Signature Algorithm: sha256WithRSAEncryption
5c:1b:f1:54:29:f3:6d:f1:96:8a:e7:a5:90:59:61:bb:77:92:
16:81:6b:2b:89:d5:df:94:18:f2:0d:10:4e:67:4d:18:42:a3:
d5:f4:70:20:95:11:9f:3c:1f:a0:f7:f5:0c:4e:90:65:14:d4:
7a:fa:f9:0a:c5:de:e5:4f:ef:b2:11:3e:08:bd:31:08:5d:db:
c5:4f:1a:7a:7f:0a:ee:af:ca:50:61:e9:08:35:f8:b9:68:e3:
e9:9d:f8:fd:ea:9a:f8:9a:99:bd:b6:4e:d3:31:93:71:26:37:
01:94:b6:26:9a:1d:63:01:c2:fa:b9:71:16:fe:45:97:98:39:
6f:8d:fd:fc:84:32:d1:b1:c4:5a:34:e2:a3:dc:b5:98:4d:80:
b2:cf:0e:58:7c:f1:90:70:fc:31:82:1f:99:ed:af:d0:6b:e5:
49:b7:e8:cb:f9:d6:6a:09:8f:23:03:b3:61:6b:72:3e:88:49:
43:b2:80:fa:07:09:3b:cf:2a:be:07:9d:fd:57:9d:96:bb:b0:
44:91:91:8f:18:ed:99:26:dd:78:b0:f2:36:02:e1:22:df:d4:
c5:a6:f5:c7:19:c7:1f:90:1c:7a:70:71:c5:8c:9a:ca:cb:0b:
2a:83:60:c0:de:8d:c0:d3:d0:dc:7f:be:dc:30:dd:ae:f9:9b:
32:36:37:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:36 2026 by rpki-client