Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146486.roa
File: AS146486.roa (raw, json)
Hash identifier: wK6SbB817lCau7qIQ92in6A5kc2nBtI6znvsCkMsesI=
Subject key identifier: FE:18:07:07:14:43:68:86:35:F7:CE:64:3E:D7:1E:F3:D0:4F:20:6B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7A2BBC702DCF65C22DB97C3744A3A67B2CBB1FA4
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146486.roa
Signing time: Mon 25 May 2026 01:51:25 +0000
ROA not before: Mon 25 May 2026 01:46:25 +0000
ROA not after: Mon 24 May 2027 01:51:25 +0000
asID: 146486
IP address blocks: 240a:aefc::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7a:2b:bc:70:2d:cf:65:c2:2d:b9:7c:37:44:a3:a6:7b:2c:bb:1f:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:46:25 2026 GMT
Not After : May 24 01:51:25 2027 GMT
Subject: CN=FE1807071443688635F7CE643ED71EF3D04F206B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:46:53:6c:71:77:70:8f:b6:9c:6b:8a:90:b2:
bd:6e:98:7f:02:20:7b:44:21:c3:d6:e3:73:d2:db:
6e:f8:2e:1d:f9:27:7b:22:4d:2c:20:a3:e4:87:86:
f2:37:74:72:41:ba:d1:70:4b:63:5d:90:42:27:fb:
6a:a8:96:9d:df:a9:9f:a3:09:f5:76:7d:2b:67:e5:
25:5a:55:f2:ae:54:b8:cf:16:86:82:6e:a5:8d:7d:
ab:e7:68:61:e8:13:07:1b:b5:4d:eb:76:29:b5:9f:
7b:91:cf:33:df:8e:22:19:12:8d:a7:4b:87:63:22:
35:f9:01:d2:ae:a3:53:b7:18:42:5b:30:6b:56:4b:
dc:42:4c:53:38:2d:75:38:d5:05:c7:e1:b3:5a:ff:
c5:ec:12:13:3f:59:1e:f8:e5:d2:af:db:b8:fa:c3:
37:27:57:ad:6b:ea:87:5b:4b:96:81:bb:5d:6e:9f:
f0:fc:9d:b8:72:d9:d8:8f:93:bf:02:43:d1:8d:a7:
52:c1:9d:97:8c:a5:a5:c0:a8:ba:f2:d0:07:8a:67:
5c:71:b0:c0:cf:ec:8a:87:0f:63:8a:95:64:2a:32:
f4:92:11:5e:f1:56:19:81:4c:a1:4c:ae:fa:19:cd:
40:6c:3e:b3:5f:c5:8a:69:02:cc:67:c1:0c:ab:9a:
a3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:18:07:07:14:43:68:86:35:F7:CE:64:3E:D7:1E:F3:D0:4F:20:6B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146486.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aefc::/32
Signature Algorithm: sha256WithRSAEncryption
09:17:47:23:a0:da:de:0b:71:29:30:b0:27:7e:fa:cf:79:40:
24:44:a5:b5:2a:90:e2:0a:62:a5:f0:fe:fb:41:d8:ac:4a:55:
29:27:34:0c:c4:e3:bd:cf:11:4f:36:64:bc:a2:0a:3e:31:d4:
2f:7b:70:e8:12:30:8f:16:d7:6a:2b:18:b8:6a:e3:97:ab:71:
5b:88:f0:a4:04:8f:f7:82:83:fb:8f:67:3e:a9:0a:43:9b:d5:
66:a9:f2:26:9c:b2:1a:db:61:b9:cf:9b:5b:06:7b:c7:f5:e7:
1d:50:39:a7:72:31:f4:6e:54:b5:86:a3:62:8b:72:90:c4:bf:
3f:d0:52:91:c1:86:50:ec:d2:f8:26:13:d0:d6:30:68:b3:2e:
ae:68:fe:82:01:98:f1:ca:12:37:92:f2:3d:08:43:5b:e7:f9:
3a:2e:d6:bb:16:0d:7c:6e:de:51:cb:c4:84:fc:81:94:b3:37:
53:48:c2:77:d5:81:6e:ea:dc:fe:9b:38:15:76:98:fb:c7:97:
be:aa:21:20:70:95:83:00:db:69:9e:d6:9e:46:a1:67:42:d6:
f2:1e:98:09:0d:51:55:58:1e:e0:5a:ce:bd:65:49:19:c9:de:
94:ff:9c:ec:20:73:bf:fd:2b:18:dd:60:55:fa:bd:fd:97:d8:
f2:ad:55:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:37 2026 by rpki-client