Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146397.roa
File: AS146397.roa (raw, json)
Hash identifier: MWVVLBc6RG5uhJjV8HZDKaHnvMcfOckuRtMmYZQvwL0=
Subject key identifier: C9:DB:89:0E:33:62:80:57:66:85:8B:AC:0F:F6:90:86:8F:F9:50:67
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 33BA587ABE3ADB42F54D108F3EEB7297F079CFBA
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146397.roa
Signing time: Fri 22 May 2026 01:50:21 +0000
ROA not before: Fri 22 May 2026 01:45:21 +0000
ROA not after: Fri 21 May 2027 01:50:21 +0000
asID: 146397
IP address blocks: 240a:aea3::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
33:ba:58:7a:be:3a:db:42:f5:4d:10:8f:3e:eb:72:97:f0:79:cf:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:21 2026 GMT
Not After : May 21 01:50:21 2027 GMT
Subject: CN=C9DB890E3362805766858BAC0FF690868FF95067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:95:24:23:7e:81:d4:61:9f:f2:da:bd:1a:19:
d3:75:11:2e:42:5f:b3:39:29:c2:9c:e8:d1:6f:71:
30:c2:6f:54:18:43:93:66:f5:99:02:60:1a:bd:ae:
42:7f:3f:89:03:fd:cb:5a:e4:a4:13:3b:0d:93:e3:
64:1c:9a:c3:06:ea:17:05:3e:df:47:1d:7d:53:fd:
49:75:7a:e1:7f:23:19:48:db:f5:a7:3c:6b:7d:8a:
99:eb:a1:e0:6c:db:cb:93:cf:b5:bb:1d:b4:d8:ee:
35:11:3b:38:e7:7d:38:b8:ac:3c:62:db:1f:52:5d:
61:8f:a9:9d:65:b3:8c:89:3f:26:4b:a6:39:c1:72:
a4:04:30:56:13:fe:3a:19:0f:44:88:84:13:09:00:
44:5e:95:28:f8:e7:14:f3:07:6f:a9:e8:2b:89:79:
0d:dc:c4:71:56:13:c1:ae:ed:e4:d9:9b:b6:33:8e:
63:94:f2:ed:14:0d:57:85:53:48:c7:06:a7:fd:ce:
a7:d5:95:3c:69:71:ed:7b:11:6e:4d:36:e6:7b:bd:
f0:64:90:c2:c1:43:35:61:e1:37:20:e7:98:30:85:
7b:b2:d2:d2:8e:8e:38:00:c9:70:e4:65:35:97:44:
e3:2d:69:02:d5:34:1e:79:8d:ed:96:0b:88:2e:51:
a7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:DB:89:0E:33:62:80:57:66:85:8B:AC:0F:F6:90:86:8F:F9:50:67
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146397.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aea3::/32
Signature Algorithm: sha256WithRSAEncryption
34:ab:f1:76:30:ec:4f:be:84:52:aa:80:8d:07:18:89:dc:9f:
0d:23:f6:b3:f9:b1:10:2a:37:7b:07:ca:00:a7:0a:e2:41:a5:
ee:90:46:20:2f:4f:52:53:9b:e8:a0:da:b5:84:e6:64:bb:2d:
f1:3e:bc:be:da:3f:f2:70:0d:b2:97:0f:91:31:76:a2:91:b4:
06:f5:2b:85:d5:a3:a3:62:74:72:41:41:30:8d:07:90:46:69:
00:bb:47:01:11:7a:19:1f:d3:0c:5b:90:23:cc:cf:80:08:02:
38:f6:12:5a:f6:02:dd:22:9a:c4:d9:59:37:ec:fd:d8:cd:b6:
3c:0d:0c:1e:1d:0f:a9:78:65:00:fa:68:2d:b2:7f:7a:68:3d:
ed:6a:3a:03:bc:65:c8:74:9a:49:14:9c:f3:93:76:a3:1f:e0:
87:80:72:1f:75:ac:b2:fe:3b:71:62:50:73:a7:f7:fc:94:63:
54:5a:3f:f8:fa:f9:de:62:c8:9a:0d:99:5e:92:da:1a:2f:70:
f5:a4:54:a0:41:0d:a0:13:44:83:a0:b7:c6:6d:5f:61:e2:a3:
62:07:66:f6:4b:3f:03:87:23:5d:fb:80:21:ee:b4:fe:6a:5c:
db:7b:1d:37:37:65:8d:80:8e:3d:96:29:2d:dd:34:ba:44:b6:
37:0d:88:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:49 2026 by rpki-client