Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146394.roa
File: AS146394.roa (raw, json)
Hash identifier: AGomWAXMLVz1tKFh9seMusNJIV9MwoMpMETtpQ+PKRk=
Subject key identifier: F2:CA:74:17:41:5B:3A:0D:AD:4A:57:B6:22:EE:0A:B2:6E:4C:F9:BB
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0DBCF32AD3A13FF0D11F42456F3625E23D4C9521
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146394.roa
Signing time: Mon 25 May 2026 01:51:17 +0000
ROA not before: Mon 25 May 2026 01:46:17 +0000
ROA not after: Mon 24 May 2027 01:51:17 +0000
asID: 146394
IP address blocks: 240a:aea0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:bc:f3:2a:d3:a1:3f:f0:d1:1f:42:45:6f:36:25:e2:3d:4c:95:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:46:17 2026 GMT
Not After : May 24 01:51:17 2027 GMT
Subject: CN=F2CA7417415B3A0DAD4A57B622EE0AB26E4CF9BB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:16:de:c6:b2:62:f7:f7:b9:c9:33:05:bb:35:
e6:d8:b3:0a:50:a2:62:b7:a9:3c:68:eb:af:e1:5b:
8e:06:de:63:ea:8b:5c:b8:ea:b6:63:f1:c5:0f:e9:
2d:15:0c:c2:11:74:20:01:e9:73:61:91:dd:65:06:
2a:59:5f:f4:84:b4:a7:d3:e3:dd:09:7e:0b:31:69:
3a:b9:45:1b:29:59:da:75:21:04:54:52:ec:5e:21:
ff:b1:82:dc:19:78:df:58:e9:11:ae:7f:2f:fd:cb:
43:c0:57:ff:fd:de:cd:c9:80:02:d2:60:b0:cb:09:
c2:ce:07:52:46:cb:8b:02:88:db:bd:90:fa:6f:c3:
44:5d:f7:e3:62:4d:81:9f:04:1f:3d:a5:d9:db:1d:
76:27:17:b7:cc:17:cc:33:2f:ad:ab:21:14:13:13:
0a:1e:48:f4:5f:d6:15:e3:e8:1e:93:d8:20:2a:25:
37:90:ad:c9:f3:b9:b1:9a:83:bb:9d:34:d7:3e:25:
0b:97:42:a9:f8:b5:70:e9:b8:1d:45:26:41:1e:f1:
b2:74:08:3f:0b:8c:c2:f4:63:af:5c:6c:b1:23:b8:
6b:10:85:11:bf:73:66:20:ba:96:16:ab:04:82:3e:
7c:2f:20:90:b8:0a:b1:76:b4:7c:34:81:0b:f9:46:
28:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:CA:74:17:41:5B:3A:0D:AD:4A:57:B6:22:EE:0A:B2:6E:4C:F9:BB
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146394.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aea0::/32
Signature Algorithm: sha256WithRSAEncryption
bc:d9:32:89:29:58:ec:f1:9e:b5:bd:60:67:e3:24:d1:49:09:
bd:43:2f:95:6d:26:79:f3:2d:24:fd:9a:b9:3d:62:91:30:66:
4b:06:ac:c4:bb:35:14:5b:96:e6:b9:81:dd:2d:11:1f:a2:0b:
fb:b3:dc:f6:5b:ce:37:32:11:1d:20:0c:9f:64:8d:ec:3b:ad:
18:f3:13:dd:24:f7:0e:ff:f5:55:f0:27:94:27:2c:2f:46:9d:
7f:40:e7:1a:dc:aa:88:21:a5:44:5d:07:23:0f:cc:e1:38:e0:
60:1c:80:7f:58:27:03:ba:b4:84:5f:df:1d:bd:51:be:f6:f2:
e9:8f:9b:30:b2:2f:af:b8:dc:f9:40:62:7c:7a:cb:be:f3:fe:
77:01:4b:29:e1:4e:e7:68:7f:d5:cd:c1:8c:8b:4e:7b:ab:a4:
e4:1b:f0:35:bd:04:16:a9:a4:4a:b3:fc:1b:2a:05:9b:46:4d:
27:e0:aa:a4:45:7e:74:11:89:39:c9:6e:41:8d:3d:11:49:2e:
6c:81:2f:91:72:43:a1:ef:56:14:8b:fd:22:bb:dc:d6:00:c4:
99:21:3c:5a:3e:42:15:52:f0:c7:db:bb:07:a6:14:3a:9d:80:
06:0d:78:46:7a:f0:27:36:e5:61:f9:84:56:b2:5e:97:cc:45:
07:f9:c6:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:25 2026 by rpki-client