Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146395.roa
File: AS146395.roa (raw, json)
Hash identifier: MfPyX2hATUwzt5lOrdiJdNYEhvPrV9mNJbfm6kw+XLU=
Subject key identifier: 7D:7E:B4:4A:31:E2:A7:39:2C:25:F6:0B:DB:A9:0D:05:CE:DE:40:FB
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1F60D0BBCE7C65BB8DC64BCEABCB7B4284E44B44
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146395.roa
Signing time: Fri 22 May 2026 07:24:34 +0000
ROA not before: Fri 22 May 2026 07:19:34 +0000
ROA not after: Fri 21 May 2027 07:24:34 +0000
asID: 146395
IP address blocks: 240a:aea1::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:60:d0:bb:ce:7c:65:bb:8d:c6:4b:ce:ab:cb:7b:42:84:e4:4b:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:19:34 2026 GMT
Not After : May 21 07:24:34 2027 GMT
Subject: CN=7D7EB44A31E2A7392C25F60BDBA90D05CEDE40FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:79:b8:2f:de:af:b6:3d:82:89:1e:57:99:2c:
75:32:e0:00:b8:96:78:c2:c3:e6:dc:fb:c3:62:1f:
97:e1:09:cb:2d:30:03:87:a7:22:e2:12:c7:5c:fd:
de:86:69:a4:8c:92:95:d6:a5:a4:bd:42:21:9a:70:
2e:fd:74:21:d9:c8:f2:85:16:33:cc:59:07:42:27:
33:72:20:37:3a:91:4d:ec:69:cf:2a:3b:60:6e:69:
34:81:0c:e3:f7:fc:86:d0:ba:4b:3b:22:0d:89:6f:
12:31:2f:c8:5f:00:42:39:fb:6f:be:00:63:9c:6f:
4a:f5:0a:46:b9:a7:e8:23:18:63:e8:1c:7b:ab:4c:
2c:ce:62:32:dd:d9:de:20:e7:6b:25:38:05:7a:36:
0a:cb:f3:97:93:e2:cd:20:69:d4:a2:2a:ab:99:93:
8d:9d:bb:a1:e7:f6:89:9e:16:a1:32:d8:cb:13:1c:
b8:88:6a:68:7c:d1:59:70:13:0c:cc:62:b5:99:d7:
2f:43:02:a4:7e:5d:2b:ca:a3:00:1f:33:3b:fd:1b:
90:02:68:85:28:2b:1d:00:d9:e8:f3:e3:a5:13:53:
5f:93:a6:37:11:d4:a2:6c:d8:46:0a:55:0b:ac:bb:
48:2a:17:13:d3:85:4d:65:ff:21:c4:28:60:70:87:
ac:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:7E:B4:4A:31:E2:A7:39:2C:25:F6:0B:DB:A9:0D:05:CE:DE:40:FB
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146395.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aea1::/32
Signature Algorithm: sha256WithRSAEncryption
b7:09:43:9b:56:01:df:9d:d6:90:d8:c5:69:1a:d0:c1:27:eb:
81:bc:3b:2b:ca:38:9e:4c:30:0c:62:ac:19:62:56:63:2c:ab:
49:78:d9:fa:8a:cf:3e:fe:60:b2:7b:35:a7:95:5e:a4:73:2e:
b2:95:ab:d0:d2:ff:34:e4:bd:f8:4e:b6:a0:a9:f3:81:4d:86:
64:bd:e5:31:af:89:35:87:4a:35:6a:67:75:dc:de:51:04:35:
5a:1b:04:e3:e4:0e:47:88:05:e3:4d:d3:af:b7:00:5c:89:3e:
19:fa:f1:b0:90:fc:67:45:7a:18:28:4b:7d:ff:6b:71:0f:f4:
46:87:65:7e:c0:8c:9c:53:99:63:ba:b4:bb:40:b8:84:8e:c6:
69:19:30:9c:4e:a1:41:18:d7:c6:3d:ff:c2:39:f2:07:56:64:
7d:9c:66:d8:d0:ea:05:55:35:3c:fc:e6:b3:99:ba:02:f2:6d:
1a:da:1e:5b:56:e5:38:83:47:b5:ea:f4:52:c6:7e:71:e4:a2:
bd:47:56:14:dc:86:c2:9d:f6:1a:41:b9:e3:b9:5c:5b:42:84:
b7:d2:1c:41:25:60:31:0c:35:cd:40:91:62:cb:d9:73:55:ac:
02:98:d7:e7:15:0d:1f:eb:4f:f5:a3:fd:bb:b6:18:86:e4:11:
2a:69:eb:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:25 2026 by rpki-client