Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146429.roa
File: AS146429.roa (raw, json)
Hash identifier: 01aQ0RCoAJb66OYFfz5DAS252kLUcT21ErkD4fuSLcw=
Subject key identifier: 62:B7:18:26:93:6A:0B:C9:1C:66:34:30:7F:89:79:4A:70:81:A0:AB
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 65E433D5CC6B70E77A099B7CE44BDD510C5BB9D8
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146429.roa
Signing time: Mon 25 May 2026 06:28:28 +0000
ROA not before: Mon 25 May 2026 06:23:28 +0000
ROA not after: Mon 24 May 2027 06:28:28 +0000
asID: 146429
IP address blocks: 240a:aec3::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:e4:33:d5:cc:6b:70:e7:7a:09:9b:7c:e4:4b:dd:51:0c:5b:b9:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:28 2026 GMT
Not After : May 24 06:28:28 2027 GMT
Subject: CN=62B71826936A0BC91C6634307F89794A7081A0AB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e6:01:2a:a1:3d:4c:1c:8b:5f:5f:72:89:43:
ce:a5:86:4d:05:bc:2b:c7:09:b8:39:1a:b1:45:a5:
05:0c:25:80:f0:7d:17:7f:fb:68:93:9e:09:f5:4c:
56:5f:5b:e9:4a:67:9d:f4:3a:3f:7f:b2:99:05:1c:
ed:5c:46:c2:80:8c:5b:6a:d2:aa:81:11:4d:46:e0:
26:5d:c9:f6:3d:f6:5b:90:1a:89:6e:da:7b:1d:68:
b8:15:fd:70:3b:e8:63:e1:09:15:eb:fa:c1:0e:45:
67:38:12:57:78:e7:fe:b8:e2:9b:e2:a6:03:f9:58:
3d:d8:79:29:f1:c5:26:3b:45:97:7d:5a:e1:76:34:
fc:81:c4:f6:ad:c7:35:42:48:5a:b1:90:f4:73:56:
c7:67:66:c8:66:4f:9e:c0:c1:cd:cb:fa:d5:ab:6c:
35:0c:d7:41:34:72:cd:91:05:aa:43:d8:20:db:b0:
71:0c:ed:b1:7f:a9:6c:90:0d:2f:e0:87:ea:38:a3:
1e:69:69:58:2e:ac:0f:0a:75:d1:f2:7e:ab:ff:12:
c3:6a:01:17:57:fc:61:4c:c2:a3:16:de:9b:b3:4a:
ae:e7:fd:55:28:97:f7:97:79:4b:ba:1e:a0:a3:7e:
b5:10:0d:17:4e:8c:73:4a:c4:bf:e5:88:69:79:45:
32:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:B7:18:26:93:6A:0B:C9:1C:66:34:30:7F:89:79:4A:70:81:A0:AB
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146429.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aec3::/32
Signature Algorithm: sha256WithRSAEncryption
28:e2:63:c5:4e:e1:27:88:1e:0c:2b:ae:cc:0b:31:c3:d9:a2:
fa:3c:e5:00:b0:4c:98:66:af:cd:a8:9d:50:27:e7:99:f3:af:
7b:f2:27:c0:a8:fc:83:f8:b9:ee:da:45:8a:6c:46:2b:e1:aa:
01:e7:a2:6a:a6:5c:fb:32:3d:01:57:40:51:94:9a:42:8c:ed:
87:2e:20:ce:69:0c:58:a4:6f:84:d2:db:70:ff:6e:0b:fb:74:
3c:df:80:b7:52:d9:5d:84:61:dd:44:80:24:e1:32:7b:3b:e6:
e7:8d:bf:9a:ab:11:b3:ff:25:14:17:f2:9f:77:9d:bf:1e:06:
22:95:74:3a:61:e9:c3:cf:d3:d9:e6:1a:69:0e:47:6e:0a:3c:
c3:75:d2:de:4b:19:0f:a3:00:85:2a:e3:c3:96:2b:49:1f:4d:
62:11:92:b4:e5:15:64:4b:1b:e7:ed:d1:19:f7:05:a6:00:1e:
30:5a:db:80:84:2b:80:59:2d:f6:6f:f4:fe:4a:56:14:91:36:
c4:5c:3e:45:ee:0e:46:1f:ca:b5:2a:d8:39:84:ab:3b:d3:54:
c3:43:89:aa:07:fa:90:d4:0b:5f:3d:3e:ae:c4:57:f1:09:3f:
ee:a1:d4:9f:b3:2f:e3:53:61:f4:e7:b4:ce:c7:ad:2f:0c:2d:
bc:e6:f2:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:32 2026 by rpki-client