Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146359.roa
File: AS146359.roa (raw, json)
Hash identifier: /tMIrSqcXHYqHHtgThjv8dm+lTMDFBomFu6EEB0/KhM=
Subject key identifier: 95:7E:92:A8:DE:B8:F3:4E:99:0B:13:1C:83:8B:34:DA:8B:32:FC:4B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 20B077D24AC9714318F385566E12205F972C6EFA
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146359.roa
Signing time: Mon 25 May 2026 06:48:55 +0000
ROA not before: Mon 25 May 2026 06:43:55 +0000
ROA not after: Mon 24 May 2027 06:48:55 +0000
asID: 146359
IP address blocks: 240a:ae7d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:b0:77:d2:4a:c9:71:43:18:f3:85:56:6e:12:20:5f:97:2c:6e:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:43:55 2026 GMT
Not After : May 24 06:48:55 2027 GMT
Subject: CN=957E92A8DEB8F34E990B131C838B34DA8B32FC4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:33:f5:17:8e:c5:37:2a:ce:c2:89:40:a2:64:
04:f4:57:d4:73:83:d9:87:c6:39:06:a5:75:cb:88:
31:60:da:17:fb:3e:3d:01:67:42:ec:a3:e4:0e:78:
0e:9d:71:58:5e:4b:48:07:75:48:69:cb:e9:0d:86:
dd:37:aa:d5:82:b3:5f:38:32:97:0f:f4:bd:f2:c8:
7e:56:77:80:3e:70:fe:c1:3e:2f:90:93:4f:a3:bb:
dd:a3:65:8c:8c:82:15:cf:71:b1:8f:13:33:f4:d6:
6c:ae:fe:1e:7d:bc:7e:ae:f0:53:83:a7:0e:c5:21:
b3:d9:5f:bb:31:31:77:3a:0f:03:ec:88:a3:7c:e2:
48:16:75:da:55:0b:69:b5:de:ec:ce:d4:71:ed:96:
dc:56:b3:8a:92:2b:02:52:f8:5e:c1:56:70:83:6d:
c0:03:cf:04:11:4d:15:c3:ab:39:4c:2e:7c:3b:75:
9c:a4:96:b9:04:4a:9f:c5:94:80:b5:b4:4c:27:4a:
0d:db:d3:9d:e8:0a:db:72:71:b1:bd:5d:4f:63:ed:
87:b3:70:b9:03:31:db:38:31:83:e9:d9:f6:d2:52:
ae:fd:8d:18:df:1b:e1:cf:c0:a0:8d:be:9f:a8:2a:
09:7d:a7:e2:fa:b8:cf:9c:bc:17:86:c0:47:ea:ea:
a0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:7E:92:A8:DE:B8:F3:4E:99:0B:13:1C:83:8B:34:DA:8B:32:FC:4B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146359.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ae7d::/32
Signature Algorithm: sha256WithRSAEncryption
7a:c6:08:eb:c9:1b:66:98:f5:58:c1:1e:52:37:25:20:f6:d5:
13:dc:a5:ae:fa:96:5d:f3:1e:58:53:5f:f9:df:47:bf:2d:c1:
44:41:26:24:c4:dc:3c:5a:71:14:8d:40:65:45:2b:c8:9b:e6:
e2:66:a1:c3:6c:07:71:f8:aa:00:df:a0:5e:94:f2:f8:f9:ac:
be:54:89:d1:d7:29:e8:e3:ba:74:14:66:ef:49:7e:47:2b:6e:
9a:1c:2c:b7:e7:8c:14:bb:32:00:81:31:b1:f3:32:a2:7d:0e:
1a:11:9e:b3:1c:a1:bd:1c:a4:b2:f7:2d:8a:19:73:18:2f:08:
cc:fc:18:59:21:df:2f:91:4f:7e:2b:73:52:9e:48:d4:4e:b4:
33:3a:e3:ee:e4:b7:1c:c9:79:19:ef:82:33:27:b8:d8:ba:21:
80:53:41:6b:1b:9e:8d:fc:13:9f:96:0d:24:48:2e:a7:bb:71:
a5:3a:d7:60:91:7b:20:fb:fb:21:b2:e9:69:50:a8:6d:86:e3:
11:f4:37:7f:d6:35:8a:ea:32:6c:0d:27:f4:78:1e:03:50:1b:
e9:1b:a0:ae:65:90:1f:e2:37:75:b9:7b:3d:f5:4f:53:ca:95:
d0:5b:ac:30:20:ef:b3:92:66:d7:b6:10:1c:0a:bd:23:6b:26:
54:d2:98:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:58 2026 by rpki-client