Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146431.roa
File: AS146431.roa (raw, json)
Hash identifier: x9MZJAroLuncjy6m2ms7ErNoDusfPMyKd7ibqy+rJhE=
Subject key identifier: 26:16:E9:1F:84:32:AB:0A:18:87:94:D4:92:5F:99:52:F0:31:99:4D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 36E98BEF1C5B24750C0DE59ECB7DD03435907ED8
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146431.roa
Signing time: Tue 26 May 2026 02:35:26 +0000
ROA not before: Tue 26 May 2026 02:30:26 +0000
ROA not after: Tue 25 May 2027 02:35:26 +0000
asID: 146431
IP address blocks: 240a:aec5::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
36:e9:8b:ef:1c:5b:24:75:0c:0d:e5:9e:cb:7d:d0:34:35:90:7e:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:30:26 2026 GMT
Not After : May 25 02:35:26 2027 GMT
Subject: CN=2616E91F8432AB0A188794D4925F9952F031994D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:95:a6:b9:5c:a0:33:7b:4a:9c:e4:3c:ae:99:
bc:b9:bd:2c:c7:e9:4c:81:c7:03:19:e1:f0:37:1a:
39:d6:c1:c1:2a:6d:2a:e8:c5:c5:6a:b5:9c:fa:39:
1e:62:9d:ee:03:24:3b:c6:f7:10:11:ff:bf:8d:bb:
38:dc:77:72:ff:fd:e6:08:a8:21:8e:0e:f8:89:11:
79:75:9a:ed:7e:7f:df:f2:43:40:66:af:01:92:14:
d1:4f:6f:23:26:cd:35:29:4f:8c:d1:c8:8d:93:cb:
dc:f4:f8:88:01:78:26:cf:cf:24:a4:8a:7e:14:77:
69:d0:63:d2:37:8e:69:39:6c:cf:97:a7:9e:18:c2:
1c:c4:21:a1:bd:af:e3:e2:ce:9f:0b:dd:0e:7d:95:
ed:bd:44:2d:2d:30:fe:f1:ed:e9:29:98:52:96:2e:
1f:6e:83:64:74:56:11:ea:7f:2b:62:3c:4d:e6:43:
eb:ee:c9:40:52:f4:ec:62:4b:dd:c9:4c:0c:00:b6:
70:07:15:34:3c:47:ee:c9:98:e5:c1:9f:ca:68:4f:
9d:d7:0d:0c:5a:75:f1:dc:5f:d3:0f:cc:ef:ec:de:
6f:b9:d1:22:75:a0:9e:64:c2:f9:9b:35:26:de:3c:
ec:1d:70:c6:4e:5a:f1:3e:59:e6:25:4d:a9:61:18:
30:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:16:E9:1F:84:32:AB:0A:18:87:94:D4:92:5F:99:52:F0:31:99:4D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aec5::/32
Signature Algorithm: sha256WithRSAEncryption
6a:85:e0:ea:9f:41:66:0f:8c:95:d8:4e:b3:2f:8a:99:22:23:
74:3a:aa:b7:e5:97:e3:53:33:67:8d:e4:0e:7d:e3:35:13:9d:
7d:ba:df:00:8e:2f:35:26:4d:d7:82:83:11:cc:e1:d6:ee:2f:
ba:f9:59:96:28:d3:ba:af:06:07:23:87:a1:99:3e:05:87:49:
16:30:51:73:8c:cc:92:81:ee:34:65:ef:9d:a8:f5:10:c8:75:
b7:7f:6d:16:a7:7c:96:a1:16:59:bc:51:48:63:78:ec:13:79:
07:9a:ab:9d:57:16:49:98:39:4f:24:ae:f9:50:9f:1b:7a:39:
0b:08:34:5c:e7:0d:52:b3:9c:4b:9f:59:d0:d3:ec:c6:f0:04:
d8:bf:1a:ce:f8:af:98:bc:a4:61:42:b2:31:1a:61:17:63:14:
e3:66:44:d3:56:3b:c8:5f:d3:28:19:da:09:1a:1b:2d:61:32:
74:e9:a1:a6:ca:e3:27:b0:75:16:d6:ea:0a:ee:bf:8b:f0:0a:
a7:83:1a:e3:b1:b9:b7:9e:85:ed:fb:15:56:15:23:86:24:40:
d4:0e:30:39:66:a4:b0:55:67:e8:7f:9e:6a:d2:ad:1d:06:c0:
4c:bf:a0:1b:95:3f:51:e5:51:3b:72:3f:d2:63:b1:1b:ae:db:
7e:4c:0e:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:34 2026 by rpki-client