Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146469.roa
File: AS146469.roa (raw, json)
Hash identifier: qDmySKc8ajuHlULlaQcQqgjZEFRPAUKeTy1rD6YDQTo=
Subject key identifier: DA:BF:C8:83:DB:49:84:27:CC:DD:B2:3A:8D:B1:B5:E2:A4:3F:76:4D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 755FA128C4F8B5E9EEFD206FB36FE73C5CB2A7C1
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146469.roa
Signing time: Tue 26 May 2026 01:13:08 +0000
ROA not before: Tue 26 May 2026 01:08:08 +0000
ROA not after: Tue 25 May 2027 01:13:08 +0000
asID: 146469
IP address blocks: 240a:aeeb::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:5f:a1:28:c4:f8:b5:e9:ee:fd:20:6f:b3:6f:e7:3c:5c:b2:a7:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:08:08 2026 GMT
Not After : May 25 01:13:08 2027 GMT
Subject: CN=DABFC883DB498427CCDDB23A8DB1B5E2A43F764D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:cd:aa:23:9b:8a:b9:9b:15:fc:e0:80:f5:c9:
49:37:32:fc:0e:74:77:f2:90:5a:cb:ee:6c:c5:f3:
ea:7f:8e:d0:42:dc:6e:e6:c1:bc:b7:e3:3a:8e:08:
32:46:ab:e7:cf:53:05:c9:fb:30:66:4c:01:e8:ce:
59:55:e3:37:14:e8:56:a3:5b:47:bb:76:e8:d2:6e:
4e:b7:35:20:98:83:66:c0:9c:3f:82:1e:cf:8d:f4:
bd:c6:90:25:6c:a8:9f:b6:7b:b5:f1:11:b5:d8:30:
66:4f:21:45:75:a9:1f:0f:f2:35:f5:20:77:92:88:
41:83:8e:0f:b4:6b:04:76:3e:3c:93:07:cc:25:54:
01:9e:dd:d5:e6:80:40:4c:1d:cd:70:7e:7f:c0:b1:
dd:3a:4c:0a:7c:ee:28:84:b2:8d:8f:4a:ef:e9:1e:
5b:9c:84:ab:a5:28:1a:83:5e:96:cf:84:66:fd:9d:
f0:48:ad:2c:47:2e:15:c7:91:ba:d9:38:47:75:2f:
c5:87:16:f7:45:f6:6b:cf:96:e8:5c:eb:a1:15:7e:
b6:44:1f:44:a0:f7:74:21:65:63:f2:30:95:ce:b9:
99:c3:a7:e2:8e:1b:0c:5f:0a:29:51:cd:ff:08:6c:
08:32:0c:dc:ed:9d:ee:ea:04:49:cf:bf:1a:7d:8d:
cc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:BF:C8:83:DB:49:84:27:CC:DD:B2:3A:8D:B1:B5:E2:A4:3F:76:4D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146469.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aeeb::/32
Signature Algorithm: sha256WithRSAEncryption
25:cb:45:78:f3:69:47:f1:99:9f:1e:26:6d:1e:6b:9b:60:db:
4a:13:94:11:72:3b:72:e4:01:df:35:51:41:ae:69:1a:96:d1:
bd:df:14:46:f9:f8:c1:76:a4:60:50:50:96:4c:b7:61:68:0c:
d6:4f:60:a0:a8:3f:88:24:fe:4c:d1:23:07:2d:76:7e:d2:16:
a2:bb:5f:16:66:eb:30:4d:25:93:69:13:59:f9:82:63:0a:82:
e7:a3:97:fc:c0:6b:f1:87:3d:f1:4b:79:79:be:6c:fd:f0:9c:
56:68:19:1b:19:7d:89:ec:dd:6e:df:e5:8b:30:a5:4c:6a:c5:
39:84:f7:4b:42:06:35:f8:21:c1:92:95:15:a9:b5:11:04:71:
9c:e8:c8:33:95:43:df:ee:b7:cc:82:71:a1:72:02:50:8b:b2:
85:a9:d5:4e:ce:25:24:7a:9d:76:a6:c2:db:a6:12:71:e6:4d:
9f:11:44:e2:7a:e3:51:11:f0:69:17:90:18:5c:98:7b:21:b9:
98:f4:a6:a9:2b:5a:37:d5:49:2b:58:a7:cb:e4:1d:cb:ae:fb:
79:53:34:f9:b5:d6:bc:a4:48:7a:f4:1c:3e:e3:90:af:5f:b8:
24:0a:b4:c0:ae:c8:6e:97:91:0c:38:95:42:64:05:76:c9:58:
c7:ac:b1:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:35 2026 by rpki-client