Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146465.roa
File: AS146465.roa (raw, json)
Hash identifier: tEpE5iKfJq6rJnFAd0qo+PomyyEUpiqBQjcEPmL4GD0=
Subject key identifier: 73:63:78:5D:BD:78:A7:D6:0F:5B:10:22:D0:B9:3E:3E:57:94:63:92
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1A2C6883C02F5DBE129142FF2468ED7D62C58764
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146465.roa
Signing time: Fri 22 May 2026 04:08:00 +0000
ROA not before: Fri 22 May 2026 04:03:00 +0000
ROA not after: Fri 21 May 2027 04:08:00 +0000
asID: 146465
IP address blocks: 240a:aee7::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:2c:68:83:c0:2f:5d:be:12:91:42:ff:24:68:ed:7d:62:c5:87:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:03:00 2026 GMT
Not After : May 21 04:08:00 2027 GMT
Subject: CN=7363785DBD78A7D60F5B1022D0B93E3E57946392
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b2:23:37:34:f6:d2:2d:d9:7d:a8:66:02:db:
44:06:f9:d4:07:03:ea:e9:6b:23:b8:09:21:60:f9:
c4:62:56:90:52:9d:69:d4:aa:62:b9:f2:11:a0:57:
00:79:a2:7b:ff:f8:01:fd:68:c9:4d:a4:41:5e:34:
85:5f:ed:16:fa:9f:a9:f6:4d:f8:71:3e:84:f9:b4:
7e:fe:7e:82:af:92:50:aa:fb:1a:0b:62:5b:5a:50:
70:10:75:ac:c4:cc:5d:55:26:50:36:d2:cf:e6:95:
6b:38:ba:9c:b7:7e:13:b9:f4:26:95:58:f2:e6:28:
ae:7a:8b:de:7a:88:3c:e9:c3:5a:7b:13:d9:be:5e:
f0:2b:0f:7b:4e:8b:3f:57:68:af:c4:a3:73:ed:08:
1a:8e:42:2c:2b:5d:b3:d0:a3:bc:31:9f:60:70:7e:
56:e5:97:1c:01:46:e4:d2:e5:d0:75:37:b4:f5:bd:
b5:ac:b9:83:ca:8c:1a:ec:23:cc:b5:72:ac:eb:a7:
63:de:3f:86:5b:34:2c:7b:e3:b5:92:cb:75:86:25:
ed:e9:25:09:af:47:3c:70:e4:0d:f2:e5:48:40:2e:
b6:03:75:93:90:f4:da:d4:15:b1:65:0d:83:da:9a:
0e:96:66:db:fb:97:89:79:36:66:67:24:f2:94:45:
cb:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:63:78:5D:BD:78:A7:D6:0F:5B:10:22:D0:B9:3E:3E:57:94:63:92
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146465.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aee7::/32
Signature Algorithm: sha256WithRSAEncryption
44:dd:98:ce:b9:5c:75:59:c8:aa:d6:50:23:00:df:c5:bd:3a:
e9:43:73:e8:ab:82:35:0d:b9:73:01:ea:46:ef:24:3d:17:bc:
b4:d3:89:58:66:5b:ac:54:39:37:be:c0:e8:f1:23:a8:6b:a0:
98:7f:1b:8e:6b:dd:ca:03:86:5e:f1:3a:1b:71:11:af:54:9d:
1a:80:1e:4d:8c:c0:96:ab:8d:ca:93:62:f5:57:16:b9:04:6d:
87:66:da:a9:31:84:ad:c9:af:50:ea:0c:31:66:1f:f6:ab:11:
ba:7e:89:fc:8d:0a:1f:9d:c4:6b:79:a3:22:e6:1f:d3:f5:d7:
ef:6b:11:e2:91:3d:6e:f8:51:49:8c:3e:6f:d3:ef:53:3e:56:
37:48:66:f7:7a:72:c2:58:da:09:12:e7:2d:88:45:9f:96:49:
6f:21:3a:5c:6a:d9:37:13:1b:e7:62:71:78:59:23:4b:f8:09:
07:b7:99:71:df:4d:7a:77:16:f1:1e:27:d7:92:a1:28:b5:32:
0f:21:41:13:6b:e4:d2:8c:d1:3b:e1:7f:21:5b:02:1a:2d:5a:
c9:20:b2:f1:3f:2c:f7:a1:4f:0c:24:ee:a9:d7:70:b7:00:fe:
54:8e:ee:69:7f:eb:66:a1:24:28:a0:27:af:13:61:b3:e7:a2:
a3:f9:32:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:48 2026 by rpki-client