Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146371.roa
File: AS146371.roa (raw, json)
Hash identifier: lNMQ5+S6dpm3wS0B0fn0n8zby0CqsooQMLs1WePvdC4=
Subject key identifier: 2B:DF:A0:FB:84:FE:E1:77:91:99:57:8D:9F:B3:15:66:E2:5A:E9:A0
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 33F65A073CDAF722F02E6B3287115BEC8A53EAB5
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146371.roa
Signing time: Mon 25 May 2026 03:19:26 +0000
ROA not before: Mon 25 May 2026 03:14:26 +0000
ROA not after: Mon 24 May 2027 03:19:26 +0000
asID: 146371
IP address blocks: 240a:ae89::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:f6:5a:07:3c:da:f7:22:f0:2e:6b:32:87:11:5b:ec:8a:53:ea:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:26 2026 GMT
Not After : May 24 03:19:26 2027 GMT
Subject: CN=2BDFA0FB84FEE1779199578D9FB31566E25AE9A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:6b:67:bb:82:45:c5:7c:2d:a1:ca:69:49:a1:
56:e1:f7:4f:8d:b2:84:d9:45:20:75:f1:2d:96:92:
af:21:6f:05:c0:5e:5e:ed:d5:33:ce:40:1e:78:77:
8f:4b:fc:34:7f:30:dc:c8:16:9e:f2:cd:e5:15:03:
98:81:2e:a8:72:8e:28:a1:12:5d:82:dc:ca:8c:1b:
6a:be:a5:39:b7:76:49:a8:53:75:82:aa:19:68:3e:
a9:e4:0c:0c:45:58:3a:b5:14:93:e7:5a:4d:00:55:
fd:50:96:d9:65:04:7d:b4:ef:93:f8:3b:18:a4:79:
34:c3:c0:d2:78:43:f1:44:c9:15:8c:b0:4f:5b:fa:
47:6a:b7:45:01:c7:e3:cb:40:82:57:21:63:7b:98:
57:87:37:e5:d7:23:90:c0:0d:f0:1b:37:5c:bd:9b:
17:7e:e5:9e:0e:9e:04:09:71:b1:0e:40:6a:d6:e2:
7e:e4:1b:03:fc:de:7e:ae:55:63:15:93:09:ce:91:
29:ff:d9:44:85:d7:80:bf:c0:d0:52:ff:db:eb:a4:
81:b5:23:88:11:47:5f:2c:16:e5:fd:55:3d:05:9a:
86:3e:34:17:2b:a1:a4:db:23:7f:9c:ad:1d:0c:9a:
1d:a3:2e:13:ad:91:63:c6:86:2e:52:51:62:5a:87:
d6:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:DF:A0:FB:84:FE:E1:77:91:99:57:8D:9F:B3:15:66:E2:5A:E9:A0
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146371.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ae89::/32
Signature Algorithm: sha256WithRSAEncryption
9c:69:7e:d5:3c:1a:1b:43:de:33:94:a8:25:71:22:dc:a6:f1:
a2:be:2e:a0:46:f9:bf:5d:93:a2:58:3a:26:f2:1c:9d:a0:12:
30:95:8e:ee:d3:91:88:a2:11:96:e3:dd:2d:e0:96:b1:f9:82:
79:ce:b6:42:7d:da:e5:67:18:fa:69:bb:1e:be:31:31:74:1c:
b4:68:4b:8f:44:31:60:00:ba:bd:94:28:4c:e0:e2:28:78:32:
28:7f:2e:fb:df:d6:e4:c8:3a:48:0a:d4:a8:4b:b6:fc:ec:d7:
34:57:b9:dd:44:71:05:9b:76:ea:b4:c3:9b:f7:cf:58:c0:94:
40:9d:58:88:2e:33:7c:e9:84:85:8a:06:4c:70:c8:56:76:49:
f6:d6:02:39:2d:b5:b8:28:c7:a0:e9:6f:14:e5:8f:1e:4d:a3:
57:82:ec:35:ed:80:1e:57:6c:22:cc:20:37:8a:6f:5e:63:ea:
6b:50:19:a0:ef:34:b0:33:c3:ff:84:99:8a:44:2f:db:33:39:
e1:71:ce:4a:8b:0e:20:71:b9:cb:25:ee:b7:dd:ba:6e:5c:e9:
d4:ea:18:1e:9a:41:9b:fd:6b:3c:7e:82:e0:9f:7b:37:bf:b6:
e0:48:23:1a:42:c2:36:85:e8:d5:63:94:c2:ae:4c:f6:b9:81:
94:97:d9:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:03 2026 by rpki-client