Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146407.roa
File: AS146407.roa (raw, json)
Hash identifier: RGyL0Um2VbYiVqkoIrJ38nPVy0NX49Lv1LHqR/Ryv0k=
Subject key identifier: BE:BA:F9:DD:43:E6:AB:8F:54:21:14:60:60:E7:D0:71:FD:31:44:C3
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 058687D8D03364733D093FA93543D8A6ADA5ECC9
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146407.roa
Signing time: Tue 26 May 2026 06:12:41 +0000
ROA not before: Tue 26 May 2026 06:07:41 +0000
ROA not after: Tue 25 May 2027 06:12:41 +0000
asID: 146407
IP address blocks: 240a:aead::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:86:87:d8:d0:33:64:73:3d:09:3f:a9:35:43:d8:a6:ad:a5:ec:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:07:41 2026 GMT
Not After : May 25 06:12:41 2027 GMT
Subject: CN=BEBAF9DD43E6AB8F5421146060E7D071FD3144C3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2a:48:db:2c:c6:dc:26:bf:87:02:e5:47:1e:
de:f2:8c:ad:b3:53:78:f5:7b:1f:ba:40:0e:b3:9f:
47:2b:2e:41:ba:25:63:e6:3d:40:5e:d8:44:a8:13:
68:4c:be:25:12:64:3f:5a:c9:73:5c:9c:3e:08:28:
62:21:3b:6a:18:fa:53:8e:94:52:4d:00:54:c5:50:
c5:b9:3c:64:45:65:8d:f9:69:b9:0a:e9:48:17:ab:
9c:49:a6:71:ff:75:aa:2f:16:31:d0:7b:c7:ce:dc:
c1:f9:47:d6:02:4a:01:cb:2d:1b:5f:93:a4:d5:81:
00:45:2e:3f:b8:b5:48:7c:1e:fd:c9:32:ac:aa:eb:
6d:f6:fc:58:e7:7b:4b:dd:b9:4b:be:b9:f4:88:d7:
36:fa:24:a3:21:93:df:f3:f9:15:e8:d8:e9:93:c8:
9d:fc:a1:08:57:d5:c3:e5:67:f4:43:a5:9f:03:67:
52:ee:1e:41:3f:e5:6b:bb:73:2d:e1:10:cc:82:2d:
24:30:af:a3:79:d6:67:54:57:0f:da:53:6e:df:41:
30:54:f6:2d:c9:ba:86:12:16:bd:c2:78:6d:28:8b:
ed:bf:cc:07:a7:6a:51:e7:83:61:0f:c3:a3:ca:f2:
92:d7:5c:6d:3b:b2:69:1c:19:8a:9f:c6:21:7c:19:
d9:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:BA:F9:DD:43:E6:AB:8F:54:21:14:60:60:E7:D0:71:FD:31:44:C3
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146407.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aead::/32
Signature Algorithm: sha256WithRSAEncryption
af:54:40:5e:65:a5:68:cb:8d:13:24:cc:7b:34:ed:58:f4:65:
5b:84:aa:6e:94:1c:9b:7a:99:7b:51:15:fe:ac:98:b1:ff:13:
aa:81:2b:73:e2:83:ed:ee:e1:7b:42:ee:d8:83:f1:32:e8:da:
e1:8d:c0:d8:fb:be:eb:fc:fa:e8:d4:82:ee:a4:84:62:6c:c2:
91:7f:4d:78:36:eb:20:79:b4:4f:d2:6a:27:62:5d:60:3f:ed:
fc:97:dc:a7:bd:e4:41:44:8d:73:a3:2b:cc:a3:7a:64:09:1f:
6a:80:76:ce:29:41:8c:4d:a8:4f:30:55:79:2d:ca:bb:b8:fc:
6d:8a:b3:55:6f:a3:db:52:90:05:3c:10:32:f3:4b:c7:c8:a0:
ac:74:2f:7a:e8:59:6c:7a:03:ff:29:5c:d6:63:40:7e:60:fd:
cb:34:70:c5:f4:51:7e:78:f1:d4:80:1c:7d:cb:cf:1b:ee:a1:
71:f5:22:b0:72:99:17:8a:8b:39:8d:26:fb:b1:a4:4e:18:ac:
df:11:a9:d2:d2:05:8c:c0:84:55:a8:bf:cd:dd:33:ef:a8:4b:
9a:07:51:e3:6b:ec:69:22:2d:f2:3f:a1:d6:47:92:57:88:8c:
47:b5:5e:de:20:f4:6b:15:5b:2f:f5:39:d9:bd:4c:c5:c4:3f:
8f:67:e7:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:27 2026 by rpki-client