Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146474.roa
File: AS146474.roa (raw, json)
Hash identifier: uDGuU3+L7S7ZMAsTbq2BiKrf5rPUXdaTxcxUpLlZF50=
Subject key identifier: DA:22:63:E3:39:ED:0A:74:5D:32:77:B8:49:90:BF:CD:79:94:AF:5B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 63A71B3EECEB4A186383FB2C8E5DC9E1128A9B8B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146474.roa
Signing time: Fri 22 May 2026 04:08:18 +0000
ROA not before: Fri 22 May 2026 04:03:18 +0000
ROA not after: Fri 21 May 2027 04:08:18 +0000
asID: 146474
IP address blocks: 240a:aef0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:a7:1b:3e:ec:eb:4a:18:63:83:fb:2c:8e:5d:c9:e1:12:8a:9b:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:03:18 2026 GMT
Not After : May 21 04:08:18 2027 GMT
Subject: CN=DA2263E339ED0A745D3277B84990BFCD7994AF5B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:11:95:ff:89:3a:e9:1f:8a:57:83:68:f7:d0:
1d:1c:51:48:72:36:04:9e:19:a7:5d:97:3c:1d:60:
11:f7:60:d5:98:46:d1:c6:3a:a3:80:d1:ce:a5:9e:
3d:e4:16:93:2b:52:86:52:d8:87:86:cb:a8:60:e7:
ff:38:67:79:59:b4:e0:d4:d8:58:5e:4c:a5:7e:1d:
e6:1d:1d:0c:fd:57:9b:6c:b5:c3:f9:05:0b:6c:3a:
f0:ae:c2:e4:67:6c:0b:fd:36:67:65:21:91:ed:73:
ce:6b:f2:b8:33:58:b2:42:71:df:0c:a2:88:e5:aa:
be:65:44:8d:21:e1:44:29:1c:a6:85:c1:fb:87:31:
c5:e1:b7:b4:fa:fd:ef:db:48:bf:fd:54:8d:f8:66:
f5:ea:23:62:27:9e:5a:b4:b5:56:5e:03:bc:18:40:
7d:d7:a2:17:bf:d9:8a:37:b8:c5:7d:3e:55:f5:87:
52:2f:a0:8b:ea:56:1c:f8:81:f1:4c:da:5a:d4:01:
71:14:c8:b6:b2:19:fb:a0:a5:a6:17:34:53:1d:60:
51:b8:d2:39:ed:19:c9:94:a3:42:62:56:01:69:08:
84:2c:29:f9:75:3c:8d:de:89:90:21:8a:7c:91:cc:
35:cc:82:b4:b0:5c:be:0d:c0:03:65:a5:ee:09:68:
51:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:22:63:E3:39:ED:0A:74:5D:32:77:B8:49:90:BF:CD:79:94:AF:5B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146474.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aef0::/32
Signature Algorithm: sha256WithRSAEncryption
28:db:be:2e:45:bb:79:af:b7:67:ad:fc:cc:0b:9a:c4:1d:f9:
1b:7c:65:2a:dd:f3:db:05:2e:f4:c0:22:bf:89:e9:eb:37:d0:
13:85:59:d7:24:a4:84:26:cc:ad:c0:8a:0e:f3:35:86:5a:30:
71:2e:ec:32:cf:4f:0b:63:75:dd:81:7b:3a:ce:63:fc:a3:50:
0f:29:25:9e:43:58:0a:9a:d5:37:5b:b9:d2:f4:39:4e:45:fc:
e2:7a:ad:40:b3:dd:d6:01:42:e2:63:06:b2:fc:1a:15:e8:f2:
24:ca:02:58:25:98:60:44:fd:06:e9:09:34:00:4b:fc:64:71:
fd:6d:d1:21:41:a6:92:76:db:78:9c:63:38:fc:00:52:d7:d2:
e3:bb:9e:9d:5c:e0:de:a2:60:1b:16:96:73:ef:5a:4d:0c:33:
bc:e1:38:e0:fc:38:d7:a9:59:f3:f5:af:f5:0c:1e:0a:cb:06:
da:f3:25:a9:7d:33:78:3e:5e:50:ca:c8:6b:f3:5b:68:69:44:
c2:32:bd:00:ac:e6:7a:7d:40:c4:cf:5b:45:a6:c5:7a:f3:69:
2c:a7:b9:2a:52:f0:30:eb:83:0c:30:cc:ac:82:1a:00:12:92:
aa:b7:b5:c1:f8:18:55:11:3f:b8:83:be:f0:1d:e9:1f:c6:b4:
51:dc:e1:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:32 2026 by rpki-client