Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146487.roa
File: AS146487.roa (raw, json)
Hash identifier: BIedFxEir5cciptd8zb/M1hM1HTTjfgLFcOpDoOdN98=
Subject key identifier: C2:49:F2:36:40:AF:76:B9:0A:BA:C3:82:2E:B0:FB:A1:30:CE:EB:74
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 7EA029ACFE1568FD980AF18C9CBCAD4416E3FC19
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146487.roa
Signing time: Mon 25 May 2026 01:51:08 +0000
ROA not before: Mon 25 May 2026 01:46:08 +0000
ROA not after: Mon 24 May 2027 01:51:08 +0000
asID: 146487
IP address blocks: 240a:aefd::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:a0:29:ac:fe:15:68:fd:98:0a:f1:8c:9c:bc:ad:44:16:e3:fc:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 01:46:08 2026 GMT
Not After : May 24 01:51:08 2027 GMT
Subject: CN=C249F23640AF76B90ABAC3822EB0FBA130CEEB74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:fb:fe:fd:da:7c:1b:10:c2:72:81:27:b0:85:
c8:ce:3e:7c:0a:5c:d4:49:33:35:68:71:7e:21:06:
4d:a9:e8:46:72:f2:50:48:d7:3b:24:e1:f5:f5:c7:
8c:55:1c:ea:cb:26:4c:c5:56:9f:d5:a8:02:a5:a0:
fe:a2:56:d6:45:16:6a:ca:2c:2f:b1:cc:71:11:79:
43:d5:cd:13:08:23:9c:4d:8c:72:f2:c9:06:4f:ba:
d8:5e:20:b9:27:aa:b4:98:a1:76:4f:bf:5c:a8:71:
35:48:bc:56:76:4e:40:16:2e:fb:4a:6d:58:71:05:
40:6a:55:db:40:b6:7a:5c:52:a4:8a:91:b0:3f:65:
d0:8b:bf:de:8c:fa:91:21:d3:ae:82:9c:4a:7b:de:
cb:8d:f5:d1:4e:dd:a7:83:eb:fb:0d:e8:59:af:52:
15:fe:43:c9:47:2b:f8:4d:ed:e0:c4:ce:11:34:eb:
df:3f:9a:89:15:1b:7a:e9:e6:d7:7f:3c:30:30:ad:
d4:98:38:64:57:34:87:7f:c7:3f:bf:25:38:6b:23:
ff:42:bd:e9:c8:25:6f:01:d6:23:d8:ae:59:a6:84:
68:16:72:96:f4:c1:a9:d9:65:40:3a:67:c3:86:cd:
10:a3:93:89:ae:2f:94:ea:13:b6:ee:e7:7c:7d:b4:
6d:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:49:F2:36:40:AF:76:B9:0A:BA:C3:82:2E:B0:FB:A1:30:CE:EB:74
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146487.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aefd::/32
Signature Algorithm: sha256WithRSAEncryption
58:44:5a:c1:93:91:f4:59:7d:f9:2a:b0:aa:3c:f4:c6:04:12:
02:e7:01:9a:14:b0:6e:63:54:53:fd:ab:0f:f2:3e:6e:18:37:
7c:00:69:c1:23:ba:f0:38:a5:d2:9d:7c:26:ff:f3:6b:15:f6:
ae:70:61:05:24:01:6b:35:0b:13:41:6a:08:ce:84:78:ca:09:
9b:f8:3c:51:cd:4f:59:17:42:5b:9e:31:ab:82:a0:32:76:bb:
9b:c1:2f:62:ff:15:34:c7:f1:c2:c1:f5:d4:b9:8b:fd:07:c5:
8b:d7:72:37:bc:d6:c2:07:c0:98:5e:b6:9f:d1:ac:dd:bd:4d:
59:6f:2e:38:ea:cc:ba:16:24:9d:6b:d8:3e:04:be:be:6a:eb:
57:bc:6d:2c:ec:92:7c:8d:2d:09:7f:c7:86:31:9f:c8:73:32:
2c:e0:b7:37:2c:1a:66:fb:8f:f9:10:02:0d:99:db:a7:c6:5a:
44:b6:b9:dc:52:8d:ec:4e:e0:9e:d8:75:f2:8e:0b:58:60:d2:
e4:a8:ad:e3:a9:d7:04:3d:27:79:69:58:d2:0c:fb:54:7b:c4:
d4:8d:10:19:55:7f:cf:9b:7f:1c:e2:17:8e:d9:5a:66:28:08:
0c:0c:e9:7c:ba:bd:4d:09:af:e0:ee:20:59:df:44:c0:52:42:
5a:f4:4f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:41 2026 by rpki-client