Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146423.roa
File: AS146423.roa (raw, json)
Hash identifier: mD6ooKfUwol2d2g3DFljxMng1VH4tVYu5M+xIb5iCKk=
Subject key identifier: 5D:02:73:52:E6:33:00:6D:56:A4:C9:89:28:5B:66:EA:ED:5B:72:94
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 59D621F2C84D92F69D209E4C35CDB69AF0B7AFA7
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146423.roa
Signing time: Fri 22 May 2026 07:24:32 +0000
ROA not before: Fri 22 May 2026 07:19:32 +0000
ROA not after: Fri 21 May 2027 07:24:32 +0000
asID: 146423
IP address blocks: 240a:aebd::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:d6:21:f2:c8:4d:92:f6:9d:20:9e:4c:35:cd:b6:9a:f0:b7:af:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:19:32 2026 GMT
Not After : May 21 07:24:32 2027 GMT
Subject: CN=5D027352E633006D56A4C989285B66EAED5B7294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:a7:a0:a2:f4:c7:06:ef:2c:fc:8f:ff:89:b4:
fe:37:ef:ff:11:6c:d7:81:35:51:99:33:31:0a:e7:
d1:5e:dd:fd:24:34:fa:2e:7d:9e:f1:21:b7:ae:cb:
11:5f:60:d8:5d:bc:85:7c:a8:92:96:e2:1c:72:c0:
42:7a:23:60:60:2f:ec:57:1d:c2:c6:4d:f4:3c:c6:
9d:62:8b:90:9b:19:39:45:16:f7:7a:22:61:04:20:
24:ae:23:cb:7b:3c:0f:5d:db:fd:10:5b:5c:d9:11:
9c:f1:d4:27:64:e9:52:fd:20:c6:b3:c4:98:7d:dc:
50:a7:6b:e7:93:72:28:80:bf:de:49:7d:f4:0e:b5:
41:b0:b7:ee:db:57:6b:8f:01:a9:89:d3:34:78:ff:
f7:43:c7:ad:1d:04:6b:1d:72:66:0b:ee:4d:d4:c0:
88:3c:22:56:55:c7:f1:51:d7:5a:31:06:c7:58:83:
24:ca:42:2b:81:06:21:cd:b2:09:9a:a0:91:8d:84:
99:9c:4a:cb:ab:46:d9:b3:a2:65:68:95:7c:1b:57:
83:3b:c2:c8:69:01:5c:a6:77:41:65:19:88:4d:cf:
74:b4:0f:69:02:b9:a2:74:0d:1e:43:0c:9f:48:37:
83:38:c6:69:1c:f8:1b:b0:75:b9:58:73:d4:4a:c9:
a5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:02:73:52:E6:33:00:6D:56:A4:C9:89:28:5B:66:EA:ED:5B:72:94
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146423.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aebd::/32
Signature Algorithm: sha256WithRSAEncryption
ae:c4:bb:8f:11:73:24:20:70:90:a6:90:9e:bc:12:c6:fd:5c:
1c:36:dc:e4:4f:e5:1e:72:33:2b:66:65:f5:15:50:ba:38:db:
88:c9:66:28:86:45:0c:08:77:48:e1:78:51:93:6f:a2:59:a5:
f8:5e:89:ac:64:6d:23:9a:fa:4c:9f:52:2c:23:cd:5f:33:7c:
ad:40:0a:2e:aa:de:89:89:f5:6a:29:c8:e6:3b:3d:01:a6:a0:
c1:29:cb:73:2e:f8:bb:e5:15:ec:34:d6:71:a6:63:25:6e:2c:
04:13:2d:a9:8c:4b:91:6f:d7:8d:49:4d:fc:ab:f5:26:ce:d2:
1b:b8:ed:b5:da:93:4b:02:7d:77:94:c7:e3:a0:9a:01:6c:52:
e1:be:b2:7a:88:f0:32:09:50:3f:e6:cf:ed:a5:71:d1:c9:70:
44:2b:22:68:b3:1e:c0:d6:4e:7e:68:8f:3b:3d:ac:66:bd:fa:
7a:f3:c9:59:e0:57:62:d4:93:a0:ea:02:70:72:48:f8:46:68:
f8:15:1e:dd:f4:61:d1:14:74:e1:e2:20:51:14:ec:c7:ee:23:
6c:2e:f8:ec:bf:49:a2:87:60:1b:46:aa:84:0f:50:5f:90:13:
cd:3b:75:b3:3c:f8:bb:2d:bf:1f:af:73:98:bd:b3:fe:e2:94:
74:33:71:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:24 2026 by rpki-client