Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146452.roa
File: AS146452.roa (raw, json)
Hash identifier: iXIBAD0icYMhcNSqnz2ZjMnFireFjMB7Q0I5e5rZcBY=
Subject key identifier: 88:DA:43:4A:75:81:9D:C0:57:D1:A2:CE:84:A1:D1:66:C4:1D:05:D9
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 31A7E5CB884212AC1827B165DE4C6A6C493FB710
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146452.roa
Signing time: Tue 26 May 2026 08:52:50 +0000
ROA not before: Tue 26 May 2026 08:47:50 +0000
ROA not after: Tue 25 May 2027 08:52:50 +0000
asID: 146452
IP address blocks: 240a:aeda::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:a7:e5:cb:88:42:12:ac:18:27:b1:65:de:4c:6a:6c:49:3f:b7:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 08:47:50 2026 GMT
Not After : May 25 08:52:50 2027 GMT
Subject: CN=88DA434A75819DC057D1A2CE84A1D166C41D05D9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:bb:02:86:a7:e2:9d:6d:22:49:30:f2:06:1b:
48:03:90:41:a9:05:f6:d3:66:0e:21:7b:9d:ca:80:
ac:a0:ac:f8:51:10:38:0f:de:6a:45:0c:3c:7c:a2:
ad:cd:fa:92:e7:38:a5:d7:cb:34:91:1b:ab:7e:be:
14:4e:8d:60:6b:cd:a5:50:5e:67:14:27:1a:ee:2b:
e7:87:00:44:6d:9e:16:43:25:16:14:28:12:36:8b:
d2:4c:81:fb:86:5b:a2:fa:76:2f:af:02:07:a6:19:
8b:34:e6:0a:e3:32:2b:63:e8:47:c0:54:92:e6:66:
ce:aa:e5:b7:68:89:a3:83:d1:74:b0:5f:07:55:0a:
01:ed:d3:dc:37:56:e3:7c:01:4d:6f:11:75:e6:0e:
bb:66:c7:ad:63:6e:c1:f9:6d:d4:ce:07:e9:6d:bc:
98:09:1c:9d:96:a1:d8:11:2a:52:4d:5e:19:a0:fa:
97:64:c7:47:17:7c:ff:54:63:db:68:14:79:2f:2e:
91:f1:2a:14:91:e7:81:74:f0:eb:8c:23:85:f1:1a:
d1:6e:47:a3:c3:60:9a:ae:88:01:3b:2b:19:41:7b:
0c:03:ff:04:88:42:b9:31:a8:8c:9f:82:d5:93:33:
6b:b0:52:0e:88:dd:75:04:05:c9:6b:6a:72:07:73:
c4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:DA:43:4A:75:81:9D:C0:57:D1:A2:CE:84:A1:D1:66:C4:1D:05:D9
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146452.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aeda::/32
Signature Algorithm: sha256WithRSAEncryption
78:b3:d3:9d:82:d6:f7:ff:2f:c7:8e:94:a2:02:79:85:6a:d1:
38:6e:9d:0f:39:0e:04:6d:4e:f7:cb:9b:e7:eb:13:a7:9e:93:
4e:f3:c3:35:6b:95:12:10:28:44:11:6f:84:8b:be:ca:62:33:
0b:ad:15:66:6b:8f:02:55:03:80:5e:16:f2:bc:18:78:46:30:
c5:88:84:80:37:a7:5c:b8:95:43:ed:18:f3:66:a4:db:d1:3a:
3f:9e:1c:18:72:21:8b:52:c8:e3:a0:a0:1f:5e:eb:be:02:27:
fe:97:c3:3c:83:ac:5c:5d:d4:c9:15:ad:40:54:d6:0e:44:bd:
b0:e2:09:4f:34:a1:00:50:14:14:60:54:50:cf:5f:e2:2d:2a:
c6:b2:ec:7d:18:66:65:9e:78:03:bc:8d:a2:3e:61:eb:6e:75:
13:9f:90:74:7d:c3:07:84:ef:9c:67:ff:02:d5:04:77:c5:62:
64:a7:09:1b:0b:7e:1f:6b:59:0f:72:c1:20:ac:35:0e:23:8c:
06:a9:80:f2:4a:07:60:60:df:4b:3c:47:68:dc:6e:ce:8f:e6:
e0:b1:10:6c:dc:ce:07:5e:c7:e3:68:ba:60:c2:6b:98:5d:8b:
fc:67:1d:69:9e:7f:ac:d4:38:92:cf:03:24:02:ec:ca:a5:a7:
31:05:f7:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:17 2026 by rpki-client