Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146372.roa
File: AS146372.roa (raw, json)
Hash identifier: IiPP+uT8097RihpBDXFHZrEAr9fL4yLhI1joHAR2Mv0=
Subject key identifier: 91:80:4A:F1:84:E7:8A:BA:61:AD:55:A1:F1:68:6A:12:96:CB:C0:82
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 65E8459C85FC78D1D5EE471382A079FD7ADE9B08
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146372.roa
Signing time: Fri 22 May 2026 06:28:08 +0000
ROA not before: Fri 22 May 2026 06:23:08 +0000
ROA not after: Fri 21 May 2027 06:28:08 +0000
asID: 146372
IP address blocks: 240a:ae8a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:e8:45:9c:85:fc:78:d1:d5:ee:47:13:82:a0:79:fd:7a:de:9b:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:23:08 2026 GMT
Not After : May 21 06:28:08 2027 GMT
Subject: CN=91804AF184E78ABA61AD55A1F1686A1296CBC082
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:52:c5:b3:73:4b:3b:03:24:77:04:1b:a7:d9:
e5:a4:63:db:5b:90:e8:78:6c:f8:5e:50:68:34:50:
b6:6e:a6:51:ea:29:d2:38:75:5e:ce:6f:41:72:9f:
a1:be:76:70:d1:15:be:0b:19:e1:95:a9:9b:f5:06:
d6:ea:31:31:a9:5e:3b:c0:67:26:f6:a4:f6:b1:72:
aa:41:64:82:14:49:26:f5:17:b0:45:a7:c4:46:0d:
df:8f:b8:fe:7f:c0:dd:81:71:91:40:20:58:4c:5c:
79:72:48:2f:a5:51:af:f3:5b:16:77:00:75:0a:9a:
22:ec:37:d8:b7:95:40:15:88:9f:db:e0:1f:33:7c:
48:56:8d:c3:72:c7:30:cd:8b:23:69:14:44:a3:c3:
ff:cb:d8:1f:07:d6:6b:8f:a4:fc:27:d2:f1:a4:af:
bf:a0:c5:7c:6d:fe:97:ff:84:9c:b1:d2:f4:7e:3d:
07:5b:fc:d0:31:5d:46:dd:b4:80:d2:b2:dc:16:ba:
4d:d5:41:0c:5c:8a:5c:21:e1:83:3c:2b:01:b7:0a:
a3:34:fe:17:4e:ad:34:de:7c:9d:fa:32:3a:63:f9:
69:48:55:e7:17:9e:36:f4:34:06:0d:6d:58:66:30:
f4:f4:30:37:cf:59:b2:8c:fc:58:14:d8:50:42:f2:
a2:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:80:4A:F1:84:E7:8A:BA:61:AD:55:A1:F1:68:6A:12:96:CB:C0:82
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146372.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ae8a::/32
Signature Algorithm: sha256WithRSAEncryption
8c:03:92:c2:c2:a1:06:88:c6:6b:35:65:08:13:ef:d1:96:8a:
90:c8:cd:4f:51:84:8e:d3:71:10:ac:87:03:cc:69:a3:e6:5b:
78:b2:50:32:7b:14:f3:ff:a4:51:93:c5:34:3f:34:59:a3:79:
87:7a:ee:b8:dd:81:60:e3:6c:e2:ee:b3:58:81:4e:45:0c:b7:
45:ae:ba:46:f3:5d:fd:23:81:b2:a5:90:c0:65:ae:22:69:e7:
6b:93:18:45:41:8a:c9:cd:d5:4a:92:40:f5:f2:2a:19:f6:0b:
eb:06:3e:44:d9:bd:f5:77:da:ac:c2:1b:3f:1d:52:47:9c:21:
dc:11:f7:7c:0c:02:a4:6b:ba:5c:96:e4:df:65:7d:18:34:50:
e7:cc:b7:ac:26:9c:65:bb:80:a9:88:e9:21:4c:0e:d1:54:7a:
a5:46:b2:2a:4e:ea:74:e8:10:6c:bb:99:cb:df:0f:bc:99:08:
a1:96:22:93:15:03:20:97:c2:ba:32:f9:62:de:09:cb:6b:9e:
44:3b:6f:e8:8f:11:b4:05:8e:1c:6e:20:37:ac:d0:58:6f:90:
fa:0b:b2:e1:6f:f2:c4:e7:85:67:6c:9a:1e:b1:01:3f:ca:2b:
c3:96:80:c4:71:c7:44:c0:32:c0:48:c3:39:83:ed:41:09:44:
f3:af:67:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:42 2026 by rpki-client