Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146437.roa
File: AS146437.roa (raw, json)
Hash identifier: vYuGP4JpciOSN0fPX8fT4wXMuof7KnM8Hdyca2v4q5o=
Subject key identifier: 9A:54:E5:6C:2D:4D:E5:AE:26:59:9F:07:6B:4B:FC:99:B1:96:6B:36
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1CF9DADC7280D34DBB1CDB20C30A6240645D110F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146437.roa
Signing time: Fri 22 May 2026 07:40:51 +0000
ROA not before: Fri 22 May 2026 07:35:51 +0000
ROA not after: Fri 21 May 2027 07:40:51 +0000
asID: 146437
IP address blocks: 240a:aecb::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:f9:da:dc:72:80:d3:4d:bb:1c:db:20:c3:0a:62:40:64:5d:11:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:35:51 2026 GMT
Not After : May 21 07:40:51 2027 GMT
Subject: CN=9A54E56C2D4DE5AE26599F076B4BFC99B1966B36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:fb:8d:d9:e5:27:9f:aa:63:58:ef:ce:bd:69:
99:e3:41:59:4a:3c:93:83:85:d4:5e:02:6d:56:97:
e6:6b:2b:bc:26:fc:12:d9:b5:88:e4:ab:81:29:eb:
dd:48:95:ea:6f:26:2b:69:70:b1:73:72:5a:f5:aa:
16:b3:b6:c5:27:ac:b6:68:84:bb:97:b5:e1:20:3b:
b4:57:56:42:a4:ed:6e:4e:ff:6a:17:83:2c:12:6d:
82:b0:43:b3:e9:0a:e9:b0:27:2b:24:73:43:05:7b:
84:31:7e:f8:fc:20:22:0a:24:ae:72:eb:a5:f4:d7:
0f:25:eb:6c:d3:2e:cc:ee:a6:d5:bd:91:7a:1a:46:
98:11:42:60:98:43:68:42:e7:ea:3a:15:5b:bd:ca:
52:02:55:1c:e1:e3:2c:6e:92:cf:77:3a:6e:c5:c5:
af:3a:d0:80:97:bb:2c:24:64:bb:5b:1b:72:4e:62:
9c:8a:37:35:5e:d5:56:0e:bb:bf:3d:88:1e:6e:34:
40:ba:15:fb:c0:05:bf:7d:ba:58:27:a7:89:5c:04:
78:d0:b1:44:1e:eb:2d:32:6c:54:0b:94:bb:13:d4:
8c:d2:be:e5:ac:64:22:11:96:df:96:31:2d:84:70:
2c:8f:bd:d0:2e:1e:81:ed:c7:32:a1:e3:81:4f:f9:
21:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:54:E5:6C:2D:4D:E5:AE:26:59:9F:07:6B:4B:FC:99:B1:96:6B:36
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aecb::/32
Signature Algorithm: sha256WithRSAEncryption
97:39:ca:e2:9c:7f:10:1b:80:ca:bd:b4:2b:af:c5:a1:6c:e2:
98:9f:fa:a2:eb:53:97:f7:3d:c4:72:eb:f2:c6:df:e1:b0:cd:
95:42:ef:7c:10:63:21:70:42:18:ab:a7:aa:e4:de:a7:8b:db:
6f:0c:37:9a:f8:5b:13:00:d4:d9:3c:02:4c:55:fb:e7:13:6d:
2a:3b:37:53:71:e1:9a:ec:5f:30:7d:92:7e:58:e4:e6:06:2c:
57:e3:aa:c5:5b:f7:5d:a6:2e:65:13:14:74:07:b5:cc:37:b0:
42:de:84:0b:9f:88:c0:68:c7:e6:2e:aa:09:7d:55:d9:9d:8c:
d2:15:af:bb:df:ba:31:cb:c9:30:1f:b8:22:8d:16:01:e1:8f:
b8:19:2e:4f:77:57:72:35:fc:62:f3:d7:07:b8:19:46:16:cb:
a0:63:38:f0:c1:07:c7:66:71:30:13:65:04:f8:20:7a:e0:b1:
99:c6:3d:bf:6b:f7:be:eb:cc:0d:7a:0a:d9:76:72:7f:df:fa:
a4:07:26:83:fe:47:19:e7:6a:a9:fb:ef:b0:d0:50:6a:17:2c:
9b:ef:3a:7c:ed:7a:e0:52:4b:98:15:59:67:20:59:e2:c1:5d:
02:aa:dc:54:da:a7:0a:d7:00:91:8d:41:d6:8e:14:4a:4e:f8:
82:bd:a4:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:39 2026 by rpki-client