Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146445.roa
File: AS146445.roa (raw, json)
Hash identifier: 6o6dztCnbTLsDPlPQLT8OlUj2y98G8EWoUjKOwvT4VQ=
Subject key identifier: B4:72:BD:79:EF:04:7C:49:73:B8:0E:8C:39:69:E6:3E:56:C6:DC:C9
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 468F6A033872C5852217A10547E5D809AFB33F09
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146445.roa
Signing time: Mon 25 May 2026 01:51:32 +0000
ROA not before: Mon 25 May 2026 01:46:32 +0000
ROA not after: Mon 24 May 2027 01:51:32 +0000
asID: 146445
IP address blocks: 240a:aed3::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:8f:6a:03:38:72:c5:85:22:17:a1:05:47:e5:d8:09:af:b3:3f:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:46:32 2026 GMT
Not After : May 24 01:51:32 2027 GMT
Subject: CN=B472BD79EF047C4973B80E8C3969E63E56C6DCC9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6f:4c:95:7f:1e:f3:88:38:94:fe:f0:37:fb:
dd:48:e6:c9:6e:8f:12:48:74:5f:95:12:ae:a7:57:
b8:d9:eb:7e:7c:4f:a8:ed:e4:82:59:54:8d:dd:b9:
ac:31:49:b7:dd:25:64:33:f5:0d:5a:4c:7d:66:69:
08:7f:4f:95:a3:f4:19:67:7c:e7:5c:7d:27:6e:c0:
0e:35:d8:2d:27:b5:01:bd:9c:8f:0a:b3:89:45:83:
fa:c3:aa:c6:d3:7f:1e:67:aa:43:dc:7c:ad:3f:0d:
c8:c9:0d:67:d6:e8:f8:f9:85:08:b9:3e:5a:7b:a2:
a6:15:0a:17:55:10:3b:28:89:93:7a:1a:2f:dc:fd:
c4:c0:da:b6:84:f6:2e:5f:3b:fd:5e:0c:36:a3:89:
1f:36:d6:37:f4:d4:b0:3d:10:29:8d:b8:ec:65:19:
8c:de:1e:26:3f:8a:51:cc:de:30:f6:c1:71:4f:3b:
5b:2c:6c:9f:46:b4:c3:7c:11:9e:e9:aa:d5:92:ac:
c9:90:31:d2:6b:8b:16:f2:d2:18:f9:0a:2e:f6:ba:
30:54:c8:87:12:cf:fb:fd:47:09:0d:d8:53:87:9b:
1f:11:d2:54:e4:98:dc:f3:ed:6c:8a:61:f2:fb:07:
fe:e4:4b:87:b1:41:84:59:65:d5:cd:f8:ec:09:fd:
2b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:72:BD:79:EF:04:7C:49:73:B8:0E:8C:39:69:E6:3E:56:C6:DC:C9
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146445.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aed3::/32
Signature Algorithm: sha256WithRSAEncryption
ae:e5:2c:0a:e7:fc:38:e8:8d:d6:92:7b:e4:2d:f6:b6:ff:2e:
14:cd:66:1b:39:04:e3:e6:46:d6:91:d1:10:27:39:a7:9d:c1:
f0:6f:55:9c:5e:15:af:28:fb:b2:fa:99:be:c4:72:60:81:fd:
2a:fd:19:83:48:f7:b0:da:25:69:6b:a7:07:90:8c:da:da:b7:
39:09:cd:e6:ba:2b:cf:46:76:31:22:fa:d5:b2:dc:19:35:04:
83:b2:6e:a5:43:66:b3:85:f2:fa:f7:a3:b3:fb:ec:dc:b1:36:
f7:0b:56:98:2d:2e:36:a1:95:32:36:e1:40:79:fa:79:63:45:
d1:f0:be:ba:e4:06:13:75:c4:83:15:2b:c8:77:7f:92:a4:f2:
2f:1c:c8:46:a7:9f:32:65:a3:c7:75:f4:5a:e1:5f:8e:0d:83:
7b:03:eb:bb:be:cb:96:e8:8e:bd:63:cc:ad:7a:24:3f:cf:6e:
2b:24:e3:a9:27:75:66:2e:2f:93:19:c6:51:0a:82:1f:b8:f3:
51:86:eb:92:7f:41:c9:37:98:94:21:b5:70:d8:1d:c3:b2:0d:
70:ef:20:79:21:62:b1:dc:1a:45:73:c4:c8:d3:24:ff:45:45:
07:b0:14:6d:90:2a:b8:30:83:fb:ce:2d:ce:c9:f8:b1:73:d3:
74:5d:aa:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:22 2026 by rpki-client