Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146360.roa
File: AS146360.roa (raw, json)
Hash identifier: ekBdqZedJuC1zenuyrQxhS5MDgEs/5dCjZajycEr64s=
Subject key identifier: C3:7E:C0:14:F1:4C:5D:0A:94:A4:12:46:27:12:2C:BD:C9:2F:8D:3C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4502A362CC94A81E939A3568E9CEEB4F367DD7EE
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146360.roa
Signing time: Fri 22 May 2026 07:41:09 +0000
ROA not before: Fri 22 May 2026 07:36:09 +0000
ROA not after: Fri 21 May 2027 07:41:09 +0000
asID: 146360
IP address blocks: 240a:ae7e::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
45:02:a3:62:cc:94:a8:1e:93:9a:35:68:e9:ce:eb:4f:36:7d:d7:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:36:09 2026 GMT
Not After : May 21 07:41:09 2027 GMT
Subject: CN=C37EC014F14C5D0A94A4124627122CBDC92F8D3C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e1:b4:0e:da:bf:c0:dc:53:db:86:a5:e3:62:
27:8e:2d:f5:20:06:2a:6a:79:5d:ad:0b:53:1e:b7:
ff:c1:39:1b:3a:76:84:0a:d6:ab:18:26:6b:59:05:
75:90:a0:a8:d6:e5:4c:fd:ba:3c:35:2c:f7:39:66:
c2:58:4e:98:6a:30:82:ed:29:58:ec:4a:9d:db:43:
86:e2:bb:a9:84:45:50:4f:e5:ac:a2:19:e5:3c:9b:
74:0c:ba:2f:c5:fa:e7:e1:84:3e:66:c5:52:df:44:
a8:be:fd:2f:b0:4f:de:51:a7:0f:ec:80:b2:bc:6a:
ed:c0:fc:f5:4a:1f:61:af:c8:6e:36:9f:fc:7f:94:
ab:c6:53:cf:af:69:29:75:64:24:8d:80:32:a0:cb:
c0:3e:02:7e:70:d9:dc:5c:ad:eb:bc:d7:41:ea:bd:
51:8c:ef:57:2a:29:31:bb:fa:20:92:7f:2b:a4:ec:
01:0d:5f:8b:e1:c7:b9:80:b8:c1:e3:7c:c2:54:34:
87:e6:33:63:99:23:29:8b:1f:ae:b1:5a:8f:51:21:
10:ad:50:58:1b:bb:81:0b:81:af:34:b6:c7:f3:49:
c5:e3:8e:6d:ed:b9:01:d3:c4:f0:cf:15:98:54:e7:
cb:ac:3c:14:8e:a0:d0:6b:7b:30:30:f5:8f:9c:b8:
93:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:7E:C0:14:F1:4C:5D:0A:94:A4:12:46:27:12:2C:BD:C9:2F:8D:3C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146360.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ae7e::/32
Signature Algorithm: sha256WithRSAEncryption
2a:7b:a1:82:45:ee:d9:c7:2c:1f:8a:24:ee:7f:09:a7:70:5e:
bb:c3:b4:c4:37:6c:ed:25:de:c6:aa:03:8a:9a:63:9e:2d:22:
76:4e:f7:b3:82:7f:7a:04:84:d6:91:9e:f1:d2:35:4d:84:00:
06:dc:76:c6:e2:58:03:40:68:f8:20:b0:57:f5:34:a4:c1:b6:
15:6d:79:1e:03:93:72:8c:52:0a:9c:8f:88:18:d4:35:4b:2d:
d4:ba:d1:1b:28:b1:24:1a:12:24:bf:77:18:0e:1f:88:50:5a:
72:1f:5c:1c:bd:1a:8e:96:ae:98:73:87:28:39:f5:bc:53:cb:
0f:b8:cc:df:cf:f4:fd:0e:a2:cc:0e:c1:da:4e:8b:b6:29:99:
4d:10:bb:5a:1a:99:e9:51:b3:85:11:73:66:e5:f2:2f:d0:d0:
6e:06:92:1c:f4:ba:d1:4f:52:e4:17:91:00:c1:b5:48:92:e7:
ff:06:84:81:8d:41:cd:7e:e6:b8:4b:ae:bd:e2:a8:19:4a:f8:
84:c3:98:bf:d6:21:57:92:b3:46:aa:e7:b6:ee:04:a1:ea:95:
33:ef:46:17:4b:1b:13:89:9c:e2:e6:69:17:9a:70:ff:9c:44:
07:e7:ba:c8:a6:3d:70:39:47:2e:78:87:fc:78:10:71:a1:49:
2f:f9:7c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:44 2026 by rpki-client