Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146475.roa
File: AS146475.roa (raw, json)
Hash identifier: XJ44gT4p7QEsC8aY0dc718GoDXfA3A07E+lukmXJZdk=
Subject key identifier: 1B:77:9F:74:E8:BC:07:5D:33:CC:F7:84:7D:C8:38:69:BE:44:C7:6C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 3485C412C5141C353AB1F7076F37D45A50E0D7E0
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146475.roa
Signing time: Mon 25 May 2026 03:19:41 +0000
ROA not before: Mon 25 May 2026 03:14:41 +0000
ROA not after: Mon 24 May 2027 03:19:41 +0000
asID: 146475
IP address blocks: 240a:aef1::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:85:c4:12:c5:14:1c:35:3a:b1:f7:07:6f:37:d4:5a:50:e0:d7:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:41 2026 GMT
Not After : May 24 03:19:41 2027 GMT
Subject: CN=1B779F74E8BC075D33CCF7847DC83869BE44C76C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ff:8f:ec:82:95:46:eb:03:fe:26:fa:15:cb:
99:f8:63:e6:82:24:4f:38:a9:5d:db:8e:87:e6:bd:
cd:bf:33:b1:35:3b:c7:f3:19:6d:db:d0:7f:2d:97:
7a:ea:94:24:6a:53:22:6d:fc:7e:19:19:bf:9c:74:
5a:62:f8:a2:c7:54:4e:a9:3c:e8:0f:e5:90:97:e1:
c0:ba:ff:f1:5b:37:c0:f4:c9:21:0d:c7:86:1f:e9:
7b:9b:39:a5:c2:9e:28:18:1d:40:a5:6d:e6:13:10:
13:25:7c:14:56:43:45:59:b1:03:57:0d:2f:fc:3a:
3c:af:95:fc:e0:ca:88:fe:99:dc:63:e6:d2:2d:3c:
d2:3a:5e:9c:a3:ea:6c:7c:d8:b2:d1:63:25:6d:09:
de:b9:29:1c:fb:d9:db:36:b9:15:51:4f:ef:0e:84:
dd:0f:6d:5a:a2:61:7f:b1:01:6a:a9:f4:8e:0c:2c:
d5:e3:34:6d:2f:f1:45:6f:8b:d3:36:77:80:24:27:
0a:c1:16:7b:e3:4a:ff:b7:cd:48:53:d8:fb:59:55:
24:f7:3a:a1:00:f6:1f:b2:72:e6:a6:ef:a8:4e:d7:
c4:d6:92:20:84:2f:28:38:fe:2b:a6:af:1c:8d:7d:
91:d3:b0:b8:d0:61:5d:fd:f1:e4:f6:70:72:38:6b:
3c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:77:9F:74:E8:BC:07:5D:33:CC:F7:84:7D:C8:38:69:BE:44:C7:6C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146475.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aef1::/32
Signature Algorithm: sha256WithRSAEncryption
8a:d2:62:26:69:c7:5b:d9:56:b2:20:8b:e1:6d:3a:b9:57:aa:
50:ab:37:6b:29:79:0d:ca:ef:26:c7:96:54:03:60:3d:be:bb:
96:12:55:6e:8c:0e:e4:67:ae:f5:80:6d:46:89:3d:9c:c2:38:
92:93:12:38:7f:a3:8e:ad:bf:f6:a1:b6:56:f8:44:32:ad:51:
92:be:b5:78:00:9e:ef:41:16:bf:a1:31:71:0e:fe:0e:f6:89:
08:40:08:47:9b:99:27:8f:39:8c:b5:13:02:64:1b:28:f3:98:
0d:8d:f3:ec:a6:2a:8f:bb:28:e1:d8:cb:15:8a:92:c6:37:0c:
ad:46:00:05:69:cb:66:2f:0f:c3:30:e0:c3:eb:fb:26:ee:d3:
db:34:74:bd:1d:c1:16:9a:8c:ad:25:0f:34:7d:b9:ff:18:38:
5f:0f:c6:0f:0f:0f:57:30:29:91:4c:30:85:50:b7:84:c1:67:
c4:f6:fc:60:a3:54:88:96:c8:f3:c3:91:a8:5c:e6:37:12:92:
41:ee:f3:41:d7:72:2e:a1:e6:ba:91:59:1a:2a:a8:a4:c0:3b:
6d:03:81:b8:79:e2:50:6e:94:5c:4a:02:e8:e2:43:ab:3a:4f:
f0:5b:59:1d:e7:c5:9c:34:18:6f:6e:c7:1a:13:6d:d5:ca:65:
09:d8:f9:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:36 2026 by rpki-client