Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146420.roa
File: AS146420.roa (raw, json)
Hash identifier: lb1y7pegqOX6pv+H+7gnCGMU6psa69xWOt3geNV07q0=
Subject key identifier: 27:DD:D5:0A:0A:B0:95:3D:6A:6E:46:74:53:5C:F9:00:14:40:0B:C8
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 43299C0AF4388ADA188EC39BF5F57858811379A3
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146420.roa
Signing time: Fri 22 May 2026 01:50:42 +0000
ROA not before: Fri 22 May 2026 01:45:42 +0000
ROA not after: Fri 21 May 2027 01:50:42 +0000
asID: 146420
IP address blocks: 240a:aeba::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:29:9c:0a:f4:38:8a:da:18:8e:c3:9b:f5:f5:78:58:81:13:79:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 01:45:42 2026 GMT
Not After : May 21 01:50:42 2027 GMT
Subject: CN=27DDD50A0AB0953D6A6E4674535CF90014400BC8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:fa:f5:23:ef:4a:b5:30:2c:48:04:94:84:6b:
ed:d2:82:b9:34:50:f6:3c:0e:e2:41:d4:82:f1:a3:
1a:ee:df:15:68:d0:45:85:5c:27:80:8f:ac:e9:82:
4b:78:4a:35:c3:e3:17:c2:f2:47:c4:80:d8:8b:b5:
2f:f1:6c:6f:9f:08:43:4d:bb:b2:01:a2:4c:32:00:
e0:3a:1c:51:72:9b:1b:2b:1a:ab:22:5a:46:36:3f:
d6:cc:f7:b6:2a:2f:1b:1c:44:cf:35:46:2c:0c:27:
bc:4e:8c:8e:69:0c:79:88:b8:04:dd:1a:59:f1:c6:
3e:63:2f:cb:a4:2f:95:8c:6a:9e:97:51:89:ee:e4:
b7:77:f6:d0:86:a0:87:17:1a:b7:9e:05:7b:af:b1:
ec:cc:45:75:5e:1f:87:3a:51:22:9d:0e:f9:8b:21:
a6:6a:bb:bc:3c:ab:3e:0e:a1:45:15:0e:bf:53:e8:
cc:73:98:83:22:7c:51:28:c3:49:65:d3:fa:ef:ab:
39:40:f3:d8:b2:4d:bc:8f:66:47:d8:c1:31:35:4a:
5d:f2:e7:ed:05:31:58:5b:a4:1a:1f:dd:d8:94:ff:
60:c0:ff:aa:fc:00:93:5c:45:9a:9f:ef:8e:74:50:
9a:3a:12:19:f8:12:d7:e4:89:ad:8c:ce:16:41:d9:
bf:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:DD:D5:0A:0A:B0:95:3D:6A:6E:46:74:53:5C:F9:00:14:40:0B:C8
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146420.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aeba::/32
Signature Algorithm: sha256WithRSAEncryption
06:14:0b:ca:e5:ae:a3:fe:d9:4a:5a:1a:cd:60:a9:f2:c5:da:
49:a9:c2:64:4c:f2:f3:d8:6c:98:47:97:c9:9e:3c:82:61:31:
45:e1:60:77:e6:46:de:f9:1b:7b:25:2f:d9:d4:39:72:2d:56:
f1:97:9b:fe:c7:78:17:91:0a:86:2e:b8:35:39:eb:f4:99:0d:
1b:0b:ae:12:26:ff:75:05:14:ad:4f:c2:6b:93:59:9c:ef:2c:
56:1d:2e:9d:a2:94:21:90:42:48:1d:84:4f:f4:41:91:08:ea:
3f:81:ef:f3:aa:68:7d:55:b5:90:b7:a4:c1:ec:57:ea:54:17:
21:bc:1b:1a:be:93:9b:61:53:ae:4a:09:ad:10:fc:a5:2b:c3:
57:b4:75:c0:39:80:47:d8:4f:95:c7:06:e7:66:eb:4c:1a:95:
57:96:90:be:98:62:5b:0a:43:98:8c:07:4f:d5:a1:f5:93:75:
1f:9f:22:5e:ac:11:f3:e9:4a:b8:4c:58:e4:0d:3f:99:54:2a:
36:be:17:b6:5f:a4:47:b0:45:39:03:d1:08:34:3e:df:7c:d1:
31:d8:d6:24:b1:9e:8e:0a:cb:7e:3d:4f:c7:5a:3c:1f:7c:3b:
e6:29:3e:b0:16:73:20:4a:a1:36:fa:19:59:e3:5d:17:40:65:
81:75:c0:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:12 2026 by rpki-client