Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146436.roa
File: AS146436.roa (raw, json)
Hash identifier: 7nu3y6DevbbmK6gI7eWdgqBX6NnyUBsXggY/inJ5F68=
Subject key identifier: F4:04:A8:F1:A1:8F:07:4A:93:3F:98:DF:CD:CE:BD:BF:20:C0:8B:0A
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2DE20CF5AEAA927C2B7ED06E8BFFFC85BAA48916
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146436.roa
Signing time: Mon 25 May 2026 03:19:21 +0000
ROA not before: Mon 25 May 2026 03:14:21 +0000
ROA not after: Mon 24 May 2027 03:19:21 +0000
asID: 146436
IP address blocks: 240a:aeca::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2d:e2:0c:f5:ae:aa:92:7c:2b:7e:d0:6e:8b:ff:fc:85:ba:a4:89:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:21 2026 GMT
Not After : May 24 03:19:21 2027 GMT
Subject: CN=F404A8F1A18F074A933F98DFCDCEBDBF20C08B0A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:a3:f4:fe:b5:f6:91:6e:9d:f5:79:90:02:1a:
c4:54:fd:60:36:15:80:e8:69:c3:c5:d8:ad:e9:5a:
db:7b:65:06:60:02:13:45:2a:6a:40:83:45:4c:91:
a7:3f:fe:ec:0c:03:64:e9:42:82:f6:49:e8:68:ca:
0c:66:77:32:49:9f:40:70:04:72:21:0c:6a:d0:a1:
73:35:61:8b:f0:d6:ff:91:ae:a6:ac:8f:38:46:63:
77:2e:63:4c:ca:b7:99:7d:fc:3d:27:cc:52:fd:1e:
f9:46:11:05:de:6e:b9:4f:99:09:e3:bb:db:a2:a3:
1e:b6:f9:f2:bf:c8:2d:ce:94:8b:ec:f1:c0:44:1d:
02:c3:e1:3c:1d:66:01:67:16:e5:fe:d2:57:6a:45:
5f:e6:2c:af:37:ef:f8:0a:62:4b:ea:38:41:7b:d7:
14:b2:4e:d9:0f:c8:ea:26:a3:37:f2:d8:57:93:e4:
a0:0a:66:02:a7:6b:61:01:9f:29:c7:40:3b:79:2f:
be:67:ce:a6:1a:8c:04:4b:de:49:cc:e0:e4:d4:6e:
7b:0e:b2:08:93:06:f0:31:21:6a:37:bc:bf:89:3f:
c3:66:c3:5d:2a:2e:0b:5b:1d:57:4c:a3:05:59:63:
60:8c:1f:3f:e9:da:a9:29:01:bf:17:96:00:63:e7:
64:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:04:A8:F1:A1:8F:07:4A:93:3F:98:DF:CD:CE:BD:BF:20:C0:8B:0A
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aeca::/32
Signature Algorithm: sha256WithRSAEncryption
87:a9:94:f9:1d:2f:cc:87:37:f5:28:e2:6f:91:da:f0:83:6d:
99:61:c6:ca:25:cd:c1:0f:06:d1:fd:2f:7c:48:e5:dd:c6:d4:
d2:da:37:10:a2:a9:96:1a:46:5f:35:24:6b:d9:11:72:73:80:
1b:59:c9:c4:88:52:7a:cb:bf:4f:12:23:20:29:34:f1:dd:93:
08:bc:77:28:76:3e:b5:e5:78:80:02:ac:40:df:b7:de:e5:8a:
35:e2:85:13:81:a5:20:a7:01:09:d3:0c:68:7f:44:06:a5:59:
d7:e6:2f:3d:85:fe:2b:17:bf:b4:1d:43:91:fc:30:64:97:c2:
8f:2d:69:05:cc:f7:75:72:09:b0:5a:f5:e6:af:9b:06:1d:67:
c9:c0:01:17:cb:ef:a3:be:15:3f:46:2d:68:f0:37:0a:44:6e:
9a:4f:63:36:b2:c7:37:91:d0:03:a8:0c:a3:10:2e:54:6e:63:
1c:d3:a3:81:44:8f:b4:06:c1:f7:f1:52:d7:fd:d3:0e:84:17:
e3:fd:88:39:91:98:32:f7:ac:96:17:2a:a9:7c:f1:cc:ed:11:
1e:e0:0b:00:a0:22:13:0b:39:7c:be:c8:e3:00:87:63:ee:b0:
8b:4b:3d:bf:32:69:ed:9b:29:78:b2:6b:c7:d6:08:b9:d4:60:
ff:71:f8:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:42 2026 by rpki-client