Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146374.roa
File: AS146374.roa (raw, json)
Hash identifier: IvRcUNr6VMH7rc6aI1n4EKPLDIPr3b1mKbde0KOLKI0=
Subject key identifier: 9F:8B:B3:18:53:2B:AD:92:2F:DA:A3:50:0B:70:70:5F:9A:66:7D:F5
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4D0F0E3510E580B05A91C449F109817A74DCB69F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146374.roa
Signing time: Fri 22 May 2026 07:09:02 +0000
ROA not before: Fri 22 May 2026 07:04:02 +0000
ROA not after: Fri 21 May 2027 07:09:02 +0000
asID: 146374
IP address blocks: 240a:ae8c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4d:0f:0e:35:10:e5:80:b0:5a:91:c4:49:f1:09:81:7a:74:dc:b6:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:04:02 2026 GMT
Not After : May 21 07:09:02 2027 GMT
Subject: CN=9F8BB318532BAD922FDAA3500B70705F9A667DF5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:f2:9a:a7:db:01:f6:04:da:d1:87:2a:98:d7:
0e:03:5b:0e:df:c0:2a:fd:d0:0d:00:d2:0b:a9:34:
d2:56:75:a5:e3:49:66:1d:91:95:59:97:29:ba:34:
bc:17:b8:92:07:43:3a:31:cf:0f:aa:5d:01:94:db:
ae:29:94:5b:b0:60:00:5e:e7:75:df:72:be:fa:ff:
7c:e3:23:27:43:c0:dd:93:16:af:7a:b6:63:70:4a:
87:d7:9c:03:78:25:66:e4:1a:b9:6d:9c:40:33:60:
ce:ac:0f:c6:b0:83:94:57:4c:28:29:7d:f5:87:00:
4a:e3:fd:02:46:32:17:f2:0b:46:5d:a7:3c:be:27:
a3:06:15:4d:d6:28:20:af:f4:35:bd:fd:c2:b0:11:
3d:77:e6:08:53:2c:5e:4d:e0:3b:32:a3:b2:04:8e:
db:a1:ae:a9:ef:9a:94:ac:02:98:3c:23:07:e7:a4:
d4:6e:d7:07:29:63:2a:d3:89:e4:84:c5:92:1c:fe:
6d:92:d0:fd:54:8a:0b:8f:70:f8:ba:1d:3e:58:21:
ca:1c:1b:c2:21:cf:fe:ce:98:ed:ed:9e:19:33:77:
b0:e2:5e:a4:93:1a:f0:ee:54:79:f9:0b:ef:4a:53:
28:e3:9c:43:eb:67:c8:65:ee:7f:4c:87:2a:14:91:
da:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:8B:B3:18:53:2B:AD:92:2F:DA:A3:50:0B:70:70:5F:9A:66:7D:F5
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146374.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ae8c::/32
Signature Algorithm: sha256WithRSAEncryption
81:4d:f5:ad:a1:6e:b3:a5:66:16:86:69:80:58:66:c7:4d:0b:
7a:01:f2:cc:60:7d:b0:aa:f8:63:b6:4b:8e:4d:61:33:5e:87:
12:44:90:61:d1:73:e6:08:06:3a:63:30:af:dc:bd:2d:12:5c:
15:74:9f:e1:2d:34:bd:96:27:75:f1:98:4a:d8:0a:02:41:8b:
c0:cb:1f:53:83:9e:bb:c1:37:19:bd:40:ee:30:d0:ce:7e:83:
30:8b:db:10:64:0e:7a:5c:3b:b7:bf:fd:ec:c1:53:13:c6:9c:
11:54:83:c6:34:a7:b2:fb:2f:75:88:16:67:cf:5c:f1:fc:52:
bc:43:e5:9f:a0:9a:83:5d:19:93:00:32:18:b8:00:4f:f5:d9:
ce:9d:59:1a:20:81:07:7e:b4:ca:6c:c6:73:65:bc:88:fd:29:
b3:73:92:74:f4:b6:8f:96:de:50:f2:48:e5:2a:75:3b:9f:8b:
b4:64:2d:f4:64:36:91:cd:41:6f:7a:3d:c0:cb:fa:4c:fb:8c:
08:50:a1:d4:7a:6d:5e:e8:fa:38:98:18:d9:dd:87:54:7e:fb:
2e:e2:f4:28:77:e8:4a:92:a6:c4:bd:00:3d:cd:eb:81:88:4f:
54:77:9c:7d:31:ed:73:b1:af:8a:bb:28:7d:cb:33:d1:77:2a:
74:5b:d9:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:23 2026 by rpki-client