Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146396.roa
File: AS146396.roa (raw, json)
Hash identifier: 7jDK5GwMJiFlcDg3soKYl1ki5GdT4OJehEpreZKf2Wc=
Subject key identifier: 6E:D4:46:85:8C:37:EF:F3:8B:C8:1D:FE:9D:3B:D6:70:BB:FE:85:46
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 64BAEB943E9BFDCC244D39FAADA92AA516DCD2F2
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146396.roa
Signing time: Fri 22 May 2026 07:40:47 +0000
ROA not before: Fri 22 May 2026 07:35:47 +0000
ROA not after: Fri 21 May 2027 07:40:47 +0000
asID: 146396
IP address blocks: 240a:aea2::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:ba:eb:94:3e:9b:fd:cc:24:4d:39:fa:ad:a9:2a:a5:16:dc:d2:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:35:47 2026 GMT
Not After : May 21 07:40:47 2027 GMT
Subject: CN=6ED446858C37EFF38BC81DFE9D3BD670BBFE8546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:44:4b:ae:e5:33:a8:79:72:1d:f5:6f:cd:b6:
74:5c:77:12:eb:00:5d:a9:d4:e5:58:7f:c2:ce:41:
ad:57:ce:9b:81:f0:15:eb:48:25:8e:d1:8a:b4:42:
d5:d5:a1:9d:9a:8e:60:c3:17:1d:b7:35:e1:8d:63:
12:ed:10:6c:6b:55:b9:0d:29:b6:7d:cd:62:1f:23:
ff:40:3f:eb:73:98:c6:81:d1:90:f2:c3:bc:18:77:
e0:fc:72:f5:4e:c4:22:06:20:64:88:e1:fe:a1:e4:
32:c7:99:ef:62:8b:13:5c:89:9d:ee:13:21:d5:2d:
88:75:e0:52:12:9c:e7:80:ec:c5:03:78:95:1b:fe:
6c:82:01:e2:93:a6:a2:5d:23:1d:55:fa:c4:d1:05:
52:75:e3:9b:0e:8e:46:28:d1:b5:ab:7c:83:13:3b:
ce:82:56:5c:3d:be:f5:9e:b6:9f:9a:7b:8c:db:97:
89:1d:de:a5:88:28:35:e0:c8:31:43:42:9c:23:83:
b7:80:43:fd:40:5a:5b:67:3f:f3:5d:39:ba:42:24:
15:a6:53:4c:48:ef:89:08:f6:88:f7:c4:f0:18:cd:
ca:79:a0:de:1e:6c:2a:fa:62:a1:81:0e:d5:79:fb:
96:8a:03:3a:7b:8f:ed:3b:a4:cd:3f:0d:9c:13:37:
34:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:D4:46:85:8C:37:EF:F3:8B:C8:1D:FE:9D:3B:D6:70:BB:FE:85:46
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146396.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aea2::/32
Signature Algorithm: sha256WithRSAEncryption
36:2d:60:1e:e3:ea:76:c9:dc:26:24:50:d5:d1:73:5e:53:61:
db:96:b8:86:2b:8b:bb:4e:22:b3:3f:16:86:33:f4:a9:55:44:
51:1c:08:d2:e6:95:66:eb:ec:a4:09:d2:5e:82:d3:be:44:43:
12:32:7c:f5:73:a3:d0:19:fc:b4:7f:21:9e:99:73:c3:40:70:
db:55:2e:c0:6b:22:ca:ac:73:eb:4d:bb:fc:43:cb:e6:4d:8f:
96:0b:ba:47:9b:13:bc:9a:6a:48:ad:3d:1f:57:6b:e7:2f:8e:
db:f1:b4:67:fb:3a:65:a6:32:c7:f3:f9:25:cc:c2:a3:cc:5d:
6b:22:36:94:72:d2:0b:d6:6b:73:9c:e4:9e:1f:f9:b9:2f:35:
5b:ec:15:f2:05:04:5d:a2:4d:33:3a:59:7d:6c:32:3a:02:90:
b1:90:de:d0:34:49:6f:f4:4c:f5:6f:3b:02:72:06:86:15:7e:
68:97:a0:91:fd:78:98:4e:e1:ae:12:f9:bb:52:20:ba:25:f3:
90:4b:cc:c6:96:93:02:0e:8e:c2:de:26:2f:02:97:0c:a5:29:
e4:22:27:6e:da:1b:72:35:84:8d:e5:a3:3b:fa:f9:89:2d:07:
14:07:1e:c6:aa:fd:e0:36:36:64:16:65:ff:45:8e:9d:1d:0d:
51:d9:cb:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:36 2026 by rpki-client