Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146425.roa
File: AS146425.roa (raw, json)
Hash identifier: GklsUEBfUMM4Yo3qsBJWr+VHgcCvCfrAqahFFJLXgCY=
Subject key identifier: 3C:F4:01:FA:BD:F6:9E:73:20:E3:64:8C:E9:74:B2:C5:61:75:36:44
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 43DCC5331B34D47B0F08DDDF4962AAA082D17077
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146425.roa
Signing time: Mon 25 May 2026 02:22:22 +0000
ROA not before: Mon 25 May 2026 02:17:22 +0000
ROA not after: Mon 24 May 2027 02:22:22 +0000
asID: 146425
IP address blocks: 240a:aebf::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:dc:c5:33:1b:34:d4:7b:0f:08:dd:df:49:62:aa:a0:82:d1:70:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:22 2026 GMT
Not After : May 24 02:22:22 2027 GMT
Subject: CN=3CF401FABDF69E7320E3648CE974B2C561753644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:db:92:3b:46:c8:77:06:e4:43:e1:c0:1a:02:
b2:16:b6:45:d8:17:57:fa:12:6e:22:58:5e:62:89:
b4:c7:df:1d:5f:14:ab:9d:36:d3:29:10:a9:d0:8a:
bd:42:86:d9:d3:4d:ee:0d:11:a9:5e:04:96:0b:0e:
c6:2d:a0:84:fa:46:ea:a9:25:c2:44:b1:99:18:84:
49:87:5b:6c:7f:0c:fd:c6:bc:18:9e:3a:c6:fa:70:
71:92:f4:f1:99:b4:eb:83:cb:f6:97:2a:bc:c5:0a:
3f:cd:7a:90:c0:e9:ca:b3:be:be:31:87:da:21:72:
2a:b4:3d:3e:fd:59:9c:05:40:2f:44:13:dd:76:66:
91:20:83:c3:89:54:16:59:ab:16:cb:69:e4:ac:62:
23:81:5e:ef:27:6c:10:da:41:c5:f5:69:26:fc:f8:
6a:ef:91:be:25:1c:9a:7c:c4:9c:ec:96:a2:ec:ab:
a1:d8:c0:70:cd:40:72:40:d5:12:e8:d4:20:d7:7f:
24:2e:ce:af:0a:45:7e:ab:a6:1d:e9:4b:b6:6f:22:
8b:0f:6a:30:2f:95:58:16:be:45:27:2c:b3:02:99:
74:7f:0a:a4:99:86:b5:da:60:5e:5b:a7:ed:ff:d4:
1a:b1:1a:e8:6c:05:26:78:25:0e:3f:80:5b:f3:a3:
89:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:F4:01:FA:BD:F6:9E:73:20:E3:64:8C:E9:74:B2:C5:61:75:36:44
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146425.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aebf::/32
Signature Algorithm: sha256WithRSAEncryption
72:c9:16:dc:70:3d:91:8f:51:b8:f1:a9:af:e2:ea:c1:5c:5a:
76:30:19:33:be:e0:93:e5:c9:19:ab:75:fb:e7:6c:ed:cd:f2:
20:de:10:dd:f9:ed:a2:6a:b3:ee:75:db:f3:c4:85:81:37:52:
d6:51:7c:6d:ea:dd:85:6a:fb:fe:79:92:b0:c7:7e:82:9f:31:
10:20:98:a0:28:5f:26:a3:0a:2d:0a:f1:f9:49:36:d2:c1:c6:
65:c7:95:42:92:78:de:64:f9:6e:1c:ba:b7:58:99:e7:82:aa:
27:b4:d0:bb:39:c7:df:cd:81:38:54:bc:16:ad:d9:40:58:7b:
04:e3:9c:c6:f9:96:ce:0a:3c:da:c0:08:90:7a:a9:20:3a:d8:
02:3c:d0:83:d8:3e:dc:49:90:f3:b7:2d:38:8b:7f:95:93:61:
f6:64:bf:73:f9:4d:1a:5d:95:01:b8:d2:94:13:b5:87:dc:56:
ec:4a:a5:91:3f:c9:41:a6:dd:1f:2f:fe:3c:5f:78:fc:13:8e:
f1:93:a9:b3:87:8d:01:6c:71:f7:a0:51:b7:d2:67:3a:e5:80:
c9:c2:4d:ef:f2:29:ea:64:dd:8d:a6:38:17:05:a9:07:78:73:
01:36:12:a9:16:0a:50:11:d2:c4:8d:61:ee:1d:05:65:76:a5:
27:28:69:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:50 2026 by rpki-client