Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146422.roa
File: AS146422.roa (raw, json)
Hash identifier: Peuu0KEGL5iyUxX5JJgbUpAQ3zornn1tRYpPzbQEaMQ=
Subject key identifier: A8:5E:A2:DD:BE:F6:7C:62:8F:5C:85:F8:62:7B:C9:B7:1B:E8:BB:02
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 387405D49C91B76C11F97003710E6D082994EECD
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146422.roa
Signing time: Tue 26 May 2026 06:30:57 +0000
ROA not before: Tue 26 May 2026 06:25:57 +0000
ROA not after: Tue 25 May 2027 06:30:57 +0000
asID: 146422
IP address blocks: 240a:aebc::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:74:05:d4:9c:91:b7:6c:11:f9:70:03:71:0e:6d:08:29:94:ee:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:25:57 2026 GMT
Not After : May 25 06:30:57 2027 GMT
Subject: CN=A85EA2DDBEF67C628F5C85F8627BC9B71BE8BB02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fe:ef:53:7d:58:a2:b3:3d:11:37:43:5a:df:
65:78:54:00:a8:4c:a0:e1:96:f8:a4:24:1c:13:3c:
a1:f4:3c:8d:29:cc:72:fb:15:1e:e0:84:36:20:9a:
03:90:a1:29:c6:47:72:3d:1d:ba:dd:39:e9:d1:9d:
b4:ed:9b:db:74:c7:3a:e1:7c:7a:e8:f8:8f:f6:21:
91:47:3e:be:53:58:39:96:80:d8:64:30:ea:0d:4e:
72:78:59:be:e8:b1:67:4a:d5:e5:c3:90:b1:71:95:
fb:4f:31:3b:b4:1d:e5:ec:92:72:be:6a:f2:af:74:
36:70:7e:fe:19:96:f1:39:40:b7:e8:cd:c7:ee:b7:
de:8b:7f:c1:70:8e:0b:7c:cf:19:4a:27:58:c1:ec:
81:1a:5f:81:4d:d2:c0:34:fd:bc:b1:8b:f8:75:d8:
38:2e:b7:ea:b5:94:3e:50:4d:cd:2d:82:47:0d:36:
ea:38:43:bf:42:f7:51:98:71:79:6c:fb:c7:63:1e:
15:62:07:a4:64:83:da:f8:13:a9:f0:75:8e:17:9c:
52:78:df:3a:cf:48:d8:f2:9e:c8:9c:9b:21:b4:17:
84:db:74:ef:50:62:3a:e9:dd:0f:f1:ba:68:1b:48:
e6:67:66:20:9a:bf:51:0c:8d:eb:e3:3f:76:26:3f:
e9:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:5E:A2:DD:BE:F6:7C:62:8F:5C:85:F8:62:7B:C9:B7:1B:E8:BB:02
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146422.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aebc::/32
Signature Algorithm: sha256WithRSAEncryption
6f:5a:f4:67:61:31:f0:5f:6a:d6:10:84:4d:c2:9e:ca:ed:d5:
c7:ca:c1:98:80:74:02:c9:ce:45:d5:55:66:80:b6:79:5b:38:
a0:70:79:8d:1a:bd:96:e6:05:5a:38:f6:9e:22:ea:5e:cd:4a:
1a:51:36:50:17:f0:91:4c:72:ab:c1:b8:94:70:e5:96:c1:10:
e3:1b:90:24:4d:b8:c6:ed:75:e5:7b:c4:ec:fe:57:f9:59:1a:
2e:24:56:68:a9:df:9c:81:12:29:3e:2a:1e:f7:da:bf:9f:86:
68:d9:d2:43:87:7b:af:c6:d2:84:24:0c:24:05:e6:a1:b3:67:
5c:76:84:41:1f:5a:10:d1:41:02:21:3f:12:8b:39:fb:8f:d8:
f6:59:56:ca:e3:24:6a:1a:aa:90:36:8c:21:64:e2:ea:6a:c2:
fc:3c:6a:aa:39:6e:7a:b2:5c:d2:69:9f:b0:c1:1d:95:4a:47:
46:72:69:51:2f:75:8d:2c:bb:30:a0:17:19:9c:06:a8:95:82:
bc:ed:46:34:ac:c9:1d:fe:d7:3e:a3:ad:8f:45:4e:fc:8e:a8:
fa:29:54:b1:ac:6d:3a:79:ba:67:1c:0e:ee:1e:d7:1c:40:bb:
6c:18:00:52:f7:25:ba:75:a0:e7:07:38:77:b4:81:f0:95:29:
50:93:b5:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:18 2026 by rpki-client