Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146389.roa
File: AS146389.roa (raw, json)
Hash identifier: +rKX6epeWy40apJTLHGwqP7ol58RUjdxQ23l01Y9EwQ=
Subject key identifier: E1:B9:45:61:B8:D2:0A:00:B2:30:0C:36:81:2C:34:9A:CA:A4:BF:8F
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0185970C443F2ED81483B2F22FC190E73A065FF3
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146389.roa
Signing time: Fri 22 May 2026 07:24:28 +0000
ROA not before: Fri 22 May 2026 07:19:28 +0000
ROA not after: Fri 21 May 2027 07:24:28 +0000
asID: 146389
IP address blocks: 240a:ae9b::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:97:0c:44:3f:2e:d8:14:83:b2:f2:2f:c1:90:e7:3a:06:5f:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:19:28 2026 GMT
Not After : May 21 07:24:28 2027 GMT
Subject: CN=E1B94561B8D20A00B2300C36812C349ACAA4BF8F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:25:d7:33:ae:c1:f6:81:2b:3a:a1:63:d5:e7:
41:6d:6f:8c:d1:23:ee:99:8e:73:c0:df:b9:b9:2e:
d7:98:9c:cb:cc:e1:bc:c1:7f:a4:d0:9b:4a:da:95:
eb:7b:e8:c5:c9:e6:0a:66:dd:1d:a0:57:d9:fc:3c:
9f:c7:f8:b4:dd:f4:c8:46:a2:18:c4:33:d4:93:e2:
3e:0e:dc:d8:8f:bc:2a:f4:b9:6b:2f:25:76:09:ed:
5f:27:82:0d:f6:17:c0:b3:36:40:8b:ca:d6:a0:28:
9a:8b:e3:e6:ef:73:2e:09:c0:36:d6:95:38:82:bc:
03:74:e6:f3:1a:ea:d7:6b:26:61:eb:cf:3a:fb:0a:
8b:58:f6:48:b4:c5:8b:18:bc:5d:8b:8e:6f:4a:d2:
6a:52:5f:66:ca:21:e6:10:c6:09:9e:73:bf:94:ae:
51:40:a2:4f:0c:31:52:cd:a9:3f:7c:32:f5:dc:45:
07:99:74:88:a2:93:5f:bc:5f:c1:ef:96:06:3e:be:
0b:92:b9:a1:20:09:c2:44:cd:d9:0f:9c:df:39:52:
35:fc:10:41:ad:7c:67:10:3d:3e:2c:32:58:29:74:
2e:67:36:4e:08:22:43:e5:c4:a7:f3:35:5d:88:45:
be:dd:24:ad:87:47:a4:00:04:82:36:2c:86:c5:8d:
40:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:B9:45:61:B8:D2:0A:00:B2:30:0C:36:81:2C:34:9A:CA:A4:BF:8F
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146389.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ae9b::/32
Signature Algorithm: sha256WithRSAEncryption
18:e0:b0:fc:a8:08:81:05:18:61:95:71:1e:ac:f3:90:c5:1e:
2b:00:ab:3e:03:60:b7:75:a4:b6:84:94:bb:51:70:48:46:69:
2e:ab:24:a4:2b:66:f1:bf:19:f6:b2:89:64:c0:49:10:ab:70:
a9:75:a1:23:79:b3:da:a5:1e:e2:7e:3b:bb:cc:f7:93:df:75:
8e:ee:6a:31:f1:f7:dc:65:fe:1f:70:11:2d:b6:f7:3d:8f:9f:
1c:8b:88:1f:ad:89:e8:ee:f4:22:41:8f:06:d5:40:f1:71:5f:
34:4c:e2:e8:be:a0:9d:90:07:9a:49:96:07:70:f8:ab:7d:73:
af:eb:e7:8d:90:85:74:aa:35:52:73:14:a2:67:6c:77:5a:7e:
65:a9:a3:4c:67:ff:9d:d9:18:7c:37:3f:c8:85:2e:6f:d2:76:
87:1f:ef:3d:f4:06:25:47:98:e6:99:16:71:8b:d8:cf:2b:a6:
7c:03:6a:1b:e4:2f:d6:f7:19:ad:d4:e2:0b:82:33:a7:53:5a:
db:fe:b3:ef:ad:a4:0b:a1:29:6f:c1:ee:3d:19:27:19:b3:47:
13:51:7b:37:06:c4:c7:6c:40:d6:01:9d:37:95:60:1a:03:98:
d0:d1:08:84:ea:5a:41:4b:38:a7:10:17:e7:ea:11:67:f3:a3:
9a:9c:61:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:28:16 2026 by rpki-client