Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146426.roa
File: AS146426.roa (raw, json)
Hash identifier: MR7nyj8aRt+WADG5f1Wzka9Y+sg4zJ421lSrgssZQ0o=
Subject key identifier: 36:A4:A5:A6:61:6B:2C:18:99:18:5F:27:4D:34:27:C2:F2:65:CD:D8
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 682ABD0C4888F3CC12100A34DA1CA4F45F313B48
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146426.roa
Signing time: Mon 25 May 2026 01:38:33 +0000
ROA not before: Mon 25 May 2026 01:33:33 +0000
ROA not after: Mon 24 May 2027 01:38:33 +0000
asID: 146426
IP address blocks: 240a:aec0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:2a:bd:0c:48:88:f3:cc:12:10:0a:34:da:1c:a4:f4:5f:31:3b:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:33:33 2026 GMT
Not After : May 24 01:38:33 2027 GMT
Subject: CN=36A4A5A6616B2C1899185F274D3427C2F265CDD8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:88:2a:95:54:ae:40:ea:70:d3:aa:82:22:58:
60:ab:63:27:bc:05:b9:64:53:b8:b7:64:84:c3:55:
25:57:ae:6c:d4:ec:31:49:3e:d4:7a:f4:2c:23:10:
f0:32:42:c2:ca:4d:e1:ae:11:88:75:b7:2a:4c:31:
f3:74:51:0e:2d:f5:f7:ae:7c:c9:23:6a:cc:b3:9c:
90:a2:e6:c1:c3:e5:d0:2e:21:a3:79:14:08:37:e2:
ad:77:9f:e7:cc:18:94:d9:4a:5b:30:2f:5d:e3:38:
8a:ea:5e:9b:dc:35:38:bb:de:cd:05:05:44:a4:d6:
dd:e9:b9:43:3f:c9:e5:51:b7:1c:02:28:e1:6d:f1:
f7:29:43:a1:a7:77:63:bb:20:44:1d:29:21:a8:d6:
b2:80:98:b8:91:8e:ea:0c:66:05:49:f3:a1:73:ed:
9c:19:b9:04:8e:6d:7e:42:ce:f1:c7:6b:0f:2e:aa:
fb:c4:75:0c:2c:40:1a:2f:85:81:72:a7:49:0f:26:
c6:41:9b:7e:43:c3:a6:f8:da:05:58:0a:87:d1:fb:
63:45:3f:b9:e4:95:5e:a0:f1:25:cc:7b:a2:c4:11:
92:c7:9e:66:3f:af:6a:06:63:e5:75:27:01:13:28:
87:0f:73:9c:a6:7f:b7:7b:a3:f6:eb:53:c5:28:57:
c5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:A4:A5:A6:61:6B:2C:18:99:18:5F:27:4D:34:27:C2:F2:65:CD:D8
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146426.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aec0::/32
Signature Algorithm: sha256WithRSAEncryption
7d:cc:b7:f2:96:fc:ed:52:5e:70:61:eb:12:eb:f9:a3:fc:15:
73:d0:80:f5:bc:54:ea:64:3f:e7:95:38:4e:fb:1c:87:d9:f4:
00:f2:7a:80:5f:9c:35:c5:18:b3:14:87:a7:73:ee:ac:e7:e3:
92:2a:c8:0f:b7:cb:59:23:4a:29:9e:15:50:7d:7d:d4:7f:f9:
28:5d:54:4e:1d:a7:44:90:ab:e3:8e:ae:90:75:62:f8:d5:d9:
86:9e:45:79:b2:1c:8f:20:a9:8d:40:08:61:62:28:d1:56:6f:
4d:65:33:56:6a:81:81:49:4a:39:c6:09:84:49:e6:ba:da:3d:
f0:6a:50:b4:0c:cc:99:b2:cc:34:42:2e:41:ee:30:a9:51:82:
a1:90:46:f4:da:eb:9d:32:ee:2c:f0:0d:e8:90:e3:5a:24:50:
75:ce:28:7c:9f:c5:26:38:73:ee:52:50:cd:d6:54:76:88:24:
c7:d3:76:ba:c1:0f:a1:f1:0b:28:72:7d:78:5e:f3:ea:6f:5c:
00:8e:04:ec:95:21:15:8a:57:c7:b6:d3:24:ae:48:99:c3:b1:
8d:91:8f:5a:0a:b4:01:29:84:cf:b0:cb:3f:4b:7b:2b:e2:b7:
99:fc:a5:72:93:c9:86:30:a5:30:6d:e8:fb:43:54:36:98:e9:
ec:c3:87:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:33 2026 by rpki-client