Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146412.roa
File: AS146412.roa (raw, json)
Hash identifier: kxn72JVFst61YQYp5X1nqdAkFp0FUCdiMYW32X6KNwg=
Subject key identifier: BF:50:51:7B:E8:48:43:C0:9A:FB:6F:6D:51:5C:98:74:0F:BE:C2:16
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1ED7FECC31CD8D518BD7F927D9BCBBC1F4A00DA0
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146412.roa
Signing time: Fri 22 May 2026 07:24:45 +0000
ROA not before: Fri 22 May 2026 07:19:45 +0000
ROA not after: Fri 21 May 2027 07:24:45 +0000
asID: 146412
IP address blocks: 240a:aeb2::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:d7:fe:cc:31:cd:8d:51:8b:d7:f9:27:d9:bc:bb:c1:f4:a0:0d:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:19:45 2026 GMT
Not After : May 21 07:24:45 2027 GMT
Subject: CN=BF50517BE84843C09AFB6F6D515C98740FBEC216
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f1:37:bc:37:e5:8c:de:42:2f:0d:a4:36:94:
a6:51:ea:c0:fa:0b:54:c5:7f:81:bf:06:7a:2d:b4:
56:b1:f7:dc:bd:e5:a7:76:34:b8:7c:55:20:d9:4f:
87:ed:36:bb:89:2d:1d:15:bd:4f:ce:ad:52:cf:60:
9b:df:17:2d:7e:2b:16:c4:e7:10:8d:b0:6f:56:60:
b0:1f:64:6e:35:59:d8:92:ac:1e:69:32:ec:e4:78:
f2:af:41:b4:58:4b:8f:93:51:24:39:0c:cb:08:8c:
04:77:14:4d:a7:66:44:bc:fd:f4:77:af:5b:c4:96:
ae:5e:5b:57:1a:a6:89:f4:d7:51:00:2a:7f:5b:24:
e4:32:64:f8:dd:67:96:e9:97:7f:bf:b7:8b:54:4e:
9d:31:be:5f:9b:46:04:ce:f2:ad:c8:b8:84:bc:7e:
55:52:3b:2e:dc:51:8c:90:9d:3f:a5:b6:38:96:55:
df:26:12:9c:eb:a2:5b:a6:65:fa:5d:f0:73:3c:fd:
52:b0:97:d7:66:0c:1a:8d:b6:6f:62:44:4c:4d:d3:
bd:c9:21:cf:c6:22:23:87:df:14:29:42:20:97:8a:
d9:cd:2e:33:31:0e:de:21:8d:8b:bc:24:4b:8e:c3:
e3:8f:59:42:e8:2e:6a:ff:08:fc:0f:99:1c:a2:3c:
44:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:50:51:7B:E8:48:43:C0:9A:FB:6F:6D:51:5C:98:74:0F:BE:C2:16
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146412.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aeb2::/32
Signature Algorithm: sha256WithRSAEncryption
7e:aa:ea:aa:41:a9:82:9e:41:ac:0b:ce:c6:ca:f1:44:70:b5:
ff:02:4e:0f:5a:5d:1f:6b:51:01:34:7d:74:e3:66:dd:c4:3e:
82:c3:e3:92:71:98:37:35:b6:1d:26:50:06:3e:4c:97:fd:b4:
7d:2f:ba:38:1a:33:99:83:d9:d4:bf:fb:34:97:56:a9:c4:47:
5b:8e:ff:50:81:46:9a:01:b2:a0:24:6f:4e:6d:25:54:5f:1e:
a5:e5:7d:b1:11:b6:84:26:aa:c8:20:fb:bf:f1:f4:f5:3d:ae:
43:d5:ad:18:5a:03:4c:c9:46:2e:4d:aa:ba:38:ce:89:dc:b0:
fa:c9:db:ca:f8:c5:1a:53:6a:2e:aa:0d:c3:11:aa:d8:21:4d:
9f:63:da:45:e0:75:90:41:85:2f:45:a9:7d:4e:8c:be:6e:7c:
e3:ea:53:0b:d5:62:a3:14:6b:90:84:4d:64:42:3e:33:b3:ee:
d2:7c:93:0e:50:5a:9c:49:6b:94:33:34:b0:fc:d9:4d:95:cc:
e8:70:98:86:41:ca:60:a1:8b:10:b1:e6:39:7f:46:4d:23:b3:
a1:3c:10:86:84:c9:f7:3a:d2:6d:50:3e:64:4d:49:4a:4a:42:
36:fb:69:76:a7:91:a1:9d:f4:78:8a:6a:3d:2a:ab:13:61:f9:
00:d7:11:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:45 2026 by rpki-client