Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146402.roa
File: AS146402.roa (raw, json)
Hash identifier: DsCQPu1IrIZH81eEffRq3TfeCGFvKQEMfRoYws5tYFA=
Subject key identifier: 6D:7D:AE:7F:FD:8E:54:3F:B1:53:1A:DF:C8:1C:C0:3C:01:AD:70:61
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0DF50F570BE6ED0CA0353FCEA600F04395BD22CB
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146402.roa
Signing time: Fri 22 May 2026 04:26:46 +0000
ROA not before: Fri 22 May 2026 04:21:46 +0000
ROA not after: Fri 21 May 2027 04:26:46 +0000
asID: 146402
IP address blocks: 240a:aea8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0d:f5:0f:57:0b:e6:ed:0c:a0:35:3f:ce:a6:00:f0:43:95:bd:22:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:21:46 2026 GMT
Not After : May 21 04:26:46 2027 GMT
Subject: CN=6D7DAE7FFD8E543FB1531ADFC81CC03C01AD7061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:50:2b:20:73:99:c2:4c:ca:ee:13:f8:d8:57:
ef:23:b0:fc:9d:70:52:ee:64:8b:69:52:e5:78:50:
db:0f:22:b1:bb:a2:c8:54:17:61:6e:35:83:1c:23:
43:4b:ab:c1:78:ac:02:ac:10:93:51:3b:84:c7:96:
ed:f1:c6:33:65:56:19:63:ac:2d:85:38:24:a8:cd:
4b:95:92:35:14:be:30:eb:b4:04:72:9f:22:df:bb:
23:aa:ce:ed:45:37:03:a2:d8:db:5b:9b:91:a4:a9:
53:ac:7e:24:28:4b:c6:25:81:3f:6d:63:fb:cf:54:
fa:9f:19:d4:d5:8a:f1:1b:75:da:0a:4b:35:ca:53:
1f:cc:01:ba:19:32:07:82:5a:31:e7:37:fc:14:92:
fc:ec:1c:30:98:e7:37:8d:60:37:ba:a1:77:76:6c:
82:92:c7:3a:12:e4:60:45:c7:fe:f5:b2:8b:76:38:
0f:14:42:11:7f:30:2b:3c:76:46:08:f2:a8:82:0d:
db:2c:dc:6e:49:ff:80:40:04:7c:82:11:6a:18:3f:
9e:8a:85:3b:c5:d8:8d:d7:89:9b:82:35:9c:d5:4c:
21:49:52:4d:5c:da:44:a8:fd:ea:c8:c1:58:6a:ca:
c6:2a:51:41:eb:16:64:d0:c7:47:18:d9:a2:81:b2:
6d:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:7D:AE:7F:FD:8E:54:3F:B1:53:1A:DF:C8:1C:C0:3C:01:AD:70:61
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146402.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aea8::/32
Signature Algorithm: sha256WithRSAEncryption
80:09:74:2d:79:f5:12:3a:60:bd:89:8f:19:0b:2c:3b:4b:8d:
22:5d:87:6e:b4:ce:f8:74:24:0e:25:66:52:06:14:58:9d:89:
ec:e8:3a:c1:d3:e9:13:e0:91:b4:17:ec:bb:cd:cc:fe:3c:ef:
5a:8f:41:70:26:b7:1b:74:5f:18:72:dc:cc:f7:f7:f4:d2:7b:
b8:78:92:a9:d7:33:a6:fa:af:48:cb:12:96:e5:26:40:6d:e9:
47:78:34:dc:c7:ab:1d:f8:35:f0:a5:a7:72:2d:45:d9:a8:6d:
d7:3b:99:f1:fa:8e:0e:61:ef:dd:76:19:8d:12:8d:2f:de:a4:
1c:68:6a:38:dd:37:21:fe:42:b3:eb:bc:67:8a:6d:db:44:e1:
af:e6:a4:d7:f0:a2:b4:8c:8d:3b:fa:0a:02:d1:29:37:b7:0c:
b1:55:ad:d1:db:1f:3c:77:ad:1e:cd:fc:fd:01:6a:7d:42:22:
15:34:a8:af:54:48:10:bd:e9:fc:aa:bf:ed:58:0d:69:23:09:
ac:da:1f:a7:b5:bc:10:e9:b2:53:63:42:fc:5c:5d:59:94:1f:
eb:a6:27:79:85:77:c2:4c:22:d6:8c:95:d9:cd:09:6a:be:8c:
09:46:2b:60:2a:66:18:22:36:f9:e6:f3:25:66:0c:a4:09:8a:
ed:54:df:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:38 2026 by rpki-client