Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146405.roa
File: AS146405.roa (raw, json)
Hash identifier: jxoijDUw69zzO12XMbOsQL/Tia0gV4/Wmov4P1/n/cg=
Subject key identifier: 1F:DF:17:44:7C:67:FA:86:D0:F9:8A:CA:83:DE:56:71:9A:0B:76:FA
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 649E13FBC26BF8D0433D6B37291D848A552EE08A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146405.roa
Signing time: Fri 22 May 2026 07:40:50 +0000
ROA not before: Fri 22 May 2026 07:35:50 +0000
ROA not after: Fri 21 May 2027 07:40:50 +0000
asID: 146405
IP address blocks: 240a:aeab::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:9e:13:fb:c2:6b:f8:d0:43:3d:6b:37:29:1d:84:8a:55:2e:e0:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:35:50 2026 GMT
Not After : May 21 07:40:50 2027 GMT
Subject: CN=1FDF17447C67FA86D0F98ACA83DE56719A0B76FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:f7:fd:11:27:d2:fc:57:8c:fa:c3:08:05:f8:
c7:10:b8:7e:8d:1c:fe:af:b9:4f:b6:07:83:3a:fd:
32:38:9f:02:2e:3c:31:98:be:78:ff:ad:10:01:f3:
ea:94:d1:15:38:17:b7:29:70:0d:fc:0e:13:b4:95:
37:84:57:7a:e8:1c:64:9f:b8:ef:86:38:04:20:67:
ad:89:1b:17:c1:0d:73:7c:41:d9:e8:89:81:9b:4c:
ae:7a:74:97:10:e1:fd:9b:b9:ec:bd:8d:dc:96:43:
88:b9:6c:ca:37:fc:be:42:4a:dd:b9:68:2b:f9:98:
a7:e9:fa:1e:51:42:06:fa:7a:0b:63:cd:a4:95:83:
a8:05:37:48:9a:90:69:c1:b8:dd:4c:32:b9:f4:04:
1a:84:8b:4d:09:9c:c2:56:a7:dd:99:ff:02:d4:9a:
36:f0:55:28:a4:12:15:a2:40:2c:87:ea:45:e9:fa:
bc:23:3e:c3:d8:18:3f:4d:8f:69:bb:2c:44:ac:b6:
e4:74:07:bd:0f:bd:c2:28:7e:e8:dd:06:a1:44:1f:
b0:f0:bb:35:09:59:42:5e:a9:35:43:6f:30:ce:86:
95:61:14:e3:10:1e:4a:5b:ff:c7:7e:9e:98:a0:bf:
d6:e3:d0:0a:fc:e0:7a:98:79:35:94:3a:4c:2f:e6:
d2:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:DF:17:44:7C:67:FA:86:D0:F9:8A:CA:83:DE:56:71:9A:0B:76:FA
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146405.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aeab::/32
Signature Algorithm: sha256WithRSAEncryption
45:cf:be:69:1a:c4:6b:f3:aa:c8:3b:f9:9e:d6:86:c8:d4:e4:
b0:27:b6:b3:59:9f:f1:d1:68:b9:f6:c4:bc:59:78:53:de:ae:
f8:b7:1c:29:04:8f:70:b9:a6:70:11:25:57:ce:02:80:3d:8f:
b2:2c:4f:7e:13:bf:b6:c6:44:f8:df:61:f2:fe:3b:94:76:b9:
ab:a0:37:20:33:b5:cc:b8:0d:ae:26:81:51:33:a3:a2:29:69:
44:83:95:52:20:6c:3a:10:f1:e7:f0:38:12:24:4c:3a:6d:24:
54:f9:75:35:81:9d:f7:58:da:a6:b4:e9:53:7f:28:05:20:0e:
da:5b:66:68:30:7c:a6:03:db:7c:8f:36:83:9f:1d:1d:a8:d6:
27:00:b6:de:a7:29:d5:0a:14:bb:cd:7f:d7:12:48:7d:03:14:
1f:50:4e:61:24:94:fe:5b:04:1e:af:24:a2:3c:fc:c7:6b:c7:
a0:da:8c:f4:da:10:09:b8:ad:53:a5:33:c9:13:26:7b:4c:7b:
ae:2b:af:2a:83:c3:20:77:5e:f1:ab:8f:52:9b:6e:68:9a:1d:
36:b9:a3:7f:cd:b4:2d:e1:08:a3:aa:12:38:ee:c2:d9:ba:4b:
62:6b:af:06:8e:58:86:45:d6:46:fd:df:55:61:ab:4a:35:b4:
24:ce:7c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:25 2026 by rpki-client