Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146450.roa
File: AS146450.roa (raw, json)
Hash identifier: iNWbYnHumpFqlgQWJyqW74/DHzVgzAyaq5+RBO/tVdo=
Subject key identifier: CD:6C:89:6E:F8:10:DD:79:70:A6:30:FD:8A:38:E0:57:B1:9E:BA:C5
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 52F1EF10B7A3C0DA47F1B20ADD4D80F8803F124E
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146450.roa
Signing time: Mon 25 May 2026 01:20:24 +0000
ROA not before: Mon 25 May 2026 01:15:24 +0000
ROA not after: Mon 24 May 2027 01:20:24 +0000
asID: 146450
IP address blocks: 240a:aed8::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:f1:ef:10:b7:a3:c0:da:47:f1:b2:0a:dd:4d:80:f8:80:3f:12:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:15:24 2026 GMT
Not After : May 24 01:20:24 2027 GMT
Subject: CN=CD6C896EF810DD7970A630FD8A38E057B19EBAC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ec:34:29:8c:e4:c0:b3:2b:b5:6a:7f:25:19:
b9:db:b1:de:12:ee:af:2c:aa:4a:99:0f:ca:35:be:
95:32:45:c5:81:0d:5b:dc:d6:4a:eb:02:d2:13:be:
dd:56:35:5b:98:82:3b:27:a5:9d:90:8f:09:f6:72:
d5:ac:67:38:06:fe:62:4a:2a:88:22:6b:55:d2:ab:
47:18:d9:05:c4:40:ee:a5:5d:01:9e:6b:bd:07:0f:
8d:29:9a:95:c3:cf:90:63:9f:b2:58:6e:04:b8:99:
c2:7c:1a:b6:27:03:62:dc:f3:5a:e6:48:ac:90:84:
04:20:1d:f7:9c:d2:4d:74:f0:19:74:fe:2f:f7:cf:
66:b9:f4:e9:8a:8f:67:13:7d:8b:44:9e:ab:68:10:
e3:fa:24:38:10:a7:67:04:47:3c:af:a2:e3:40:c2:
9d:a4:c3:3d:29:26:b5:3a:18:b3:e5:81:4e:91:ea:
20:2f:d7:19:76:b7:34:b9:fb:00:69:14:9f:88:fb:
11:72:99:2a:65:ef:40:95:66:8c:8e:cb:64:fc:46:
45:77:c4:98:58:08:4a:90:6f:57:e8:ee:ac:05:ce:
b3:7e:9c:d0:7b:c4:3c:7e:bd:00:6f:b7:6a:73:0b:
46:99:df:e3:0d:30:58:d0:2d:e0:b7:94:13:bb:89:
b3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:6C:89:6E:F8:10:DD:79:70:A6:30:FD:8A:38:E0:57:B1:9E:BA:C5
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146450.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aed8::/32
Signature Algorithm: sha256WithRSAEncryption
8a:d2:ea:a7:6f:5c:59:49:a7:6c:f4:e3:b5:29:bf:62:d4:a6:
d8:07:91:6d:c4:6e:d8:b3:08:c7:de:22:a2:cb:95:e8:34:f5:
66:7e:27:5c:bf:08:ea:44:ba:c4:d4:1e:66:50:b2:c6:2c:0c:
1d:bb:35:ef:03:81:aa:36:52:34:53:55:97:cf:67:59:2d:43:
01:a6:fa:7f:8e:0e:95:1f:d1:09:ce:16:0e:6a:39:c5:d8:85:
d9:f3:fd:d2:8a:f3:de:46:c1:e9:9d:da:df:47:67:23:a5:6c:
62:02:da:c1:6b:31:fc:43:40:27:f2:f7:0f:6d:09:ae:cd:5c:
bc:8b:58:82:67:cb:0b:c9:76:a1:49:56:e3:22:b0:77:a7:66:
91:af:f4:8f:68:16:1d:ba:60:94:2d:b4:e2:34:f1:23:e9:56:
2d:41:38:25:fb:b0:83:bd:5f:c5:12:15:94:be:03:ed:c2:52:
ef:00:69:82:b4:94:59:14:d1:18:7b:b4:b7:a7:c9:c0:b3:bf:
12:97:0a:6d:b9:55:67:78:9e:09:91:77:58:74:b1:20:45:45:
89:05:d7:93:ee:40:25:4a:25:ba:4c:38:7f:8b:62:ac:ef:2f:
cd:2a:d9:87:99:c6:eb:ac:15:35:df:24:df:8d:c1:77:6e:cf:
e4:d4:7e:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:57 2026 by rpki-client