Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146400.roa
File: AS146400.roa (raw, json)
Hash identifier: SEDvm/RYHLK9KyqEn/ca42927+YTdc+EsLqVPJO3lcI=
Subject key identifier: C0:A7:9A:07:87:D9:9B:D4:AE:91:6F:1D:05:6B:AD:5E:2F:AC:D6:F3
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3B5019713982C74600E950BEBADB791D9FAD2F03
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146400.roa
Signing time: Tue 26 May 2026 06:30:41 +0000
ROA not before: Tue 26 May 2026 06:25:41 +0000
ROA not after: Tue 25 May 2027 06:30:41 +0000
asID: 146400
IP address blocks: 240a:aea6::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3b:50:19:71:39:82:c7:46:00:e9:50:be:ba:db:79:1d:9f:ad:2f:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:25:41 2026 GMT
Not After : May 25 06:30:41 2027 GMT
Subject: CN=C0A79A0787D99BD4AE916F1D056BAD5E2FACD6F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:37:2e:fa:06:c4:a1:b2:a2:e3:8b:e8:ae:6e:
11:be:34:38:c8:3d:2b:13:da:35:56:81:b1:a6:4e:
6f:b6:d1:22:4e:f7:ff:90:55:36:ac:ef:c9:0c:e5:
c9:b4:f0:97:df:52:0a:57:38:29:30:02:cf:98:46:
03:86:e3:66:92:37:05:a5:5b:b9:cf:b8:c7:8f:b8:
68:3e:5c:70:e5:0f:3d:48:07:da:a9:90:26:4f:29:
b3:9a:ef:8f:9f:7e:d9:ac:b7:64:74:c3:12:e7:95:
23:39:e9:75:13:b7:1d:c1:ab:fa:85:68:a3:8f:df:
a9:ab:0d:9b:5b:b0:25:39:12:f3:0d:01:3b:8a:f4:
d0:b1:8f:bd:4f:bb:19:92:5e:f5:ef:04:1e:9f:53:
37:2f:3b:71:d5:bc:64:c3:2b:9b:46:88:be:b5:ef:
9b:ef:81:21:f5:d0:68:a5:d2:4c:40:8a:f2:78:66:
6e:1d:93:8b:1b:61:13:cf:e3:1b:bd:00:b5:77:79:
87:01:82:26:28:66:9d:de:e4:da:5e:5d:c5:f4:7f:
cc:32:0f:a3:11:45:c6:e3:d2:2f:98:65:98:6e:1b:
f0:63:0e:7a:3c:5e:2e:35:19:57:63:05:7e:87:4e:
13:89:99:51:08:7f:68:86:f1:3b:b4:d5:65:94:81:
a8:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:A7:9A:07:87:D9:9B:D4:AE:91:6F:1D:05:6B:AD:5E:2F:AC:D6:F3
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146400.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aea6::/32
Signature Algorithm: sha256WithRSAEncryption
b7:76:43:90:7b:8b:00:90:7e:03:a5:12:9a:b3:55:a3:18:c2:
c4:ba:cb:78:63:36:c8:c6:3e:d3:a6:ff:f3:bc:c3:21:6f:89:
94:ca:9e:2c:14:cc:ac:b7:12:b2:a5:d5:32:28:d6:e1:e9:47:
fe:60:ac:ea:0e:88:8e:56:f4:1b:d9:c6:1f:ca:73:89:05:28:
b0:d7:4b:42:a6:54:23:5f:4b:79:4e:88:3c:cd:77:d7:5f:02:
12:c7:26:5f:f9:fe:93:f4:40:60:a4:e1:72:c3:a4:b5:8c:0b:
a4:e6:c5:44:6a:98:89:91:e6:21:d0:d0:ce:94:7b:3a:a0:ff:
04:43:f6:43:0e:e3:26:4b:c1:26:29:f0:3d:d5:52:fb:36:58:
3d:cb:4d:12:48:ba:a3:50:31:0c:e6:1f:65:38:b2:cc:92:23:
23:fe:f9:c4:c4:46:2d:64:38:a1:7e:20:a4:d3:31:2a:5e:17:
0e:c2:41:2f:84:97:05:9c:54:be:fc:a3:ae:a4:32:bb:d6:46:
06:88:14:3b:49:ed:43:2b:4e:0c:8a:b1:fd:f6:67:1a:25:84:
78:aa:94:8d:be:54:11:3e:87:d7:11:73:f3:bb:86:6b:82:1b:
2b:fc:03:c6:a1:99:f3:e8:eb:40:c3:a4:37:4e:20:a9:6a:38:
3d:e7:74:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:54 2026 by rpki-client