Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146472.roa
File: AS146472.roa (raw, json)
Hash identifier: QBPyULiPiAVZJAguTlMHdZD+WSdDrQgkzztuortI9Js=
Subject key identifier: C6:73:60:10:B7:03:18:1F:DF:3E:AF:1F:F8:2D:A7:C5:09:33:0E:95
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 494F257A0443C5FBE20FC47FA8F60913C26F3D36
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146472.roa
Signing time: Tue 26 May 2026 01:13:23 +0000
ROA not before: Tue 26 May 2026 01:08:23 +0000
ROA not after: Tue 25 May 2027 01:13:23 +0000
asID: 146472
IP address blocks: 240a:aeee::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
49:4f:25:7a:04:43:c5:fb:e2:0f:c4:7f:a8:f6:09:13:c2:6f:3d:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:08:23 2026 GMT
Not After : May 25 01:13:23 2027 GMT
Subject: CN=C6736010B703181FDF3EAF1FF82DA7C509330E95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4e:74:cf:a4:22:c7:e6:70:04:5b:c6:94:50:
e7:13:7d:08:f3:e8:04:f1:32:f5:3c:28:c2:d0:cf:
b4:34:f2:4d:17:03:7d:3b:17:b2:c6:23:33:ac:e8:
35:ae:38:eb:18:a7:1c:65:d9:af:c6:ab:a5:fc:01:
7e:db:a6:67:fe:65:a2:92:bd:8e:66:29:6c:4b:95:
ba:cf:3c:cc:f5:1f:96:6d:1b:6b:30:2d:78:51:b2:
aa:91:d4:af:81:2c:65:92:ff:6f:38:78:33:dd:a6:
b6:50:34:f0:9a:67:37:e3:48:38:79:34:90:c1:50:
b9:8e:ab:17:c4:25:05:a0:42:21:83:32:91:2b:4d:
df:99:2e:84:68:26:e2:78:46:52:81:e7:e6:1f:c4:
ae:9d:96:93:94:af:ea:28:32:e2:1e:ca:b1:c4:a3:
22:cf:d6:e5:b4:88:7a:90:93:37:d4:a1:87:c5:10:
5a:c1:6e:9b:b3:56:32:c0:86:6b:2f:78:f3:3a:68:
08:47:c3:ea:da:99:bd:21:0f:d0:38:f9:97:17:5d:
27:5a:1e:0f:71:1e:3c:88:4e:c2:20:08:d0:d0:7b:
b1:70:84:6f:af:a1:72:74:7c:82:a5:9b:f7:44:83:
44:79:e2:3d:23:1f:43:f3:6a:82:fc:e2:cd:9f:72:
e6:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:73:60:10:B7:03:18:1F:DF:3E:AF:1F:F8:2D:A7:C5:09:33:0E:95
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146472.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aeee::/32
Signature Algorithm: sha256WithRSAEncryption
42:88:d5:2a:ff:19:ec:0b:61:02:e5:39:9a:8f:74:04:dd:f6:
ba:77:e1:73:4b:d3:d1:d6:73:7d:c0:a2:9e:8f:f4:00:5f:6e:
35:f4:7d:70:07:1c:8c:52:03:50:33:5c:b2:34:80:26:c5:6d:
2e:b3:26:b6:81:68:91:05:0a:7f:46:0a:97:0f:0b:be:09:e4:
8d:d3:e9:c1:e3:77:8e:b5:f5:59:36:31:99:16:9b:44:a9:a5:
73:87:34:5e:23:f7:fd:30:35:48:14:e3:5b:c6:fd:e1:a6:da:
93:69:85:c4:ea:bb:b9:c5:26:06:8f:8f:45:30:db:48:38:3a:
58:29:82:d4:01:0a:af:23:99:a4:af:00:7b:84:4f:31:6e:f3:
30:cc:2f:d5:16:8d:82:f8:9b:88:77:4d:bc:97:b1:3f:36:c5:
8b:a7:30:64:63:90:4a:3f:fa:cc:2c:90:af:d9:54:db:b2:6e:
c2:be:03:c0:1c:f3:85:a9:41:68:1e:66:55:22:25:39:42:35:
bf:2b:fa:10:14:c2:70:db:11:ea:d5:64:9b:d6:89:32:9c:f0:
c5:8f:2d:ee:fe:ed:c1:17:e0:ca:b2:cf:4c:1a:5c:13:e8:f0:
b4:bf:47:7a:dd:ad:e7:d0:76:94:d7:25:19:70:5f:c6:59:3b:
3b:88:16:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:47 2026 by rpki-client