Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146347.roa
File: AS146347.roa (raw, json)
Hash identifier: amC8XX5fT/Fq/ny7NZOkR0aYEyhNs7YeVguJlbcVpMg=
Subject key identifier: 7B:AD:3B:19:F8:10:C1:36:76:B0:32:71:3C:21:37:71:54:9D:90:A1
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 47199D359E49F05E7844B35705941DC830280781
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146347.roa
Signing time: Mon 25 May 2026 02:22:23 +0000
ROA not before: Mon 25 May 2026 02:17:23 +0000
ROA not after: Mon 24 May 2027 02:22:23 +0000
asID: 146347
IP address blocks: 240a:ae71::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
47:19:9d:35:9e:49:f0:5e:78:44:b3:57:05:94:1d:c8:30:28:07:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:23 2026 GMT
Not After : May 24 02:22:23 2027 GMT
Subject: CN=7BAD3B19F810C13676B032713C213771549D90A1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:73:ed:79:ee:ce:21:e6:64:52:9d:f5:32:bd:
9e:38:b8:62:ed:d8:d2:62:a2:d8:87:fc:0a:c4:d1:
42:71:e9:4d:e8:84:18:de:f1:7a:6a:78:78:51:8c:
ab:37:81:05:c3:6f:55:ce:4f:76:72:19:fb:09:02:
aa:b0:6b:05:6a:7e:aa:94:cb:3f:5e:26:a8:c8:80:
b8:01:1b:2e:01:dc:15:fb:fa:2f:97:ce:b4:41:6e:
69:84:46:16:4e:fe:f9:2c:83:e8:e9:0c:bc:ee:b5:
93:b6:49:90:3d:53:74:d2:76:7c:c5:31:fa:9e:07:
16:a0:fd:2f:d2:71:22:dc:a3:f0:43:34:f8:49:1f:
f9:09:6f:4b:36:3f:f1:23:15:81:24:34:69:f3:2c:
01:4e:0d:c1:47:d1:60:74:c4:37:4c:66:f7:4e:89:
6c:1f:34:87:3c:83:80:04:28:34:ea:ad:30:84:e4:
48:7b:21:16:55:6c:a6:ec:0b:1a:41:ff:df:e3:f3:
fb:e2:f8:b7:b6:f9:ca:5b:00:09:29:68:10:12:44:
e9:0a:52:02:34:bd:6e:2f:8c:52:3e:3f:67:ac:50:
68:a7:96:30:fa:e8:6f:d2:8c:b0:12:91:cf:70:83:
31:1f:03:ae:52:ba:91:cc:df:21:51:ce:88:6c:f7:
96:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:AD:3B:19:F8:10:C1:36:76:B0:32:71:3C:21:37:71:54:9D:90:A1
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146347.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ae71::/32
Signature Algorithm: sha256WithRSAEncryption
57:b2:0d:0a:07:17:3c:7e:d0:80:59:bf:e3:34:ce:94:68:dc:
bf:6c:d6:88:d9:d3:11:91:0e:71:c5:0d:0a:16:7b:15:be:c5:
29:64:c8:d7:0d:b8:92:c6:a6:a6:f7:99:95:20:ae:e2:89:38:
59:70:c0:55:b9:d2:28:3d:5d:35:9e:de:8a:78:ad:34:3f:f7:
bd:48:39:c7:dc:41:63:49:ca:9c:70:5a:86:38:df:8f:18:10:
f6:5d:7e:4a:a0:ad:5a:c4:e8:be:70:28:35:32:9d:a7:00:1d:
93:66:82:76:c6:f1:60:7a:12:6b:95:48:6d:aa:99:fc:28:f0:
e9:e2:be:c1:7e:3b:c3:64:a0:20:92:eb:8b:16:0a:43:8e:cd:
3b:55:40:0f:69:88:4f:2c:46:b6:65:0a:20:b7:73:61:10:bf:
dd:3a:fa:25:3e:99:e6:52:da:41:ad:af:bb:fe:bd:50:7c:f5:
73:7d:37:70:02:dc:a8:58:6f:82:4c:26:35:6a:84:11:8a:6b:
46:f0:78:4f:92:6c:bb:9c:e6:1c:b2:2b:1d:fd:ec:e9:94:65:
e1:ec:7a:82:1c:24:99:3b:ed:4a:3d:45:d5:c5:9e:8a:b4:95:
8a:49:07:33:d1:67:8a:09:0e:97:0e:34:25:b7:72:8a:1a:16:
d0:fd:29:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:42 2026 by rpki-client