Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146488.roa
File: AS146488.roa (raw, json)
Hash identifier: ysPGsblLbtQhX6n1XSW259Yw31tBp60/yb/rHUobtyY=
Subject key identifier: BA:9F:37:AD:C7:E2:FC:8D:FC:2C:00:96:A5:3A:8D:28:3C:99:2F:F7
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 65BBCB412E4877B409F1B0877C930D8005A9C24B
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146488.roa
Signing time: Fri 22 May 2026 04:08:18 +0000
ROA not before: Fri 22 May 2026 04:03:18 +0000
ROA not after: Fri 21 May 2027 04:08:18 +0000
asID: 146488
IP address blocks: 240a:aefe::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:bb:cb:41:2e:48:77:b4:09:f1:b0:87:7c:93:0d:80:05:a9:c2:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 04:03:18 2026 GMT
Not After : May 21 04:08:18 2027 GMT
Subject: CN=BA9F37ADC7E2FC8DFC2C0096A53A8D283C992FF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:24:b3:66:3c:fc:0f:a7:ff:41:d4:cf:52:75:
8b:79:28:14:e9:04:55:07:75:70:52:3c:27:b9:8a:
dc:4f:5f:ca:3a:45:72:1e:f3:9f:c9:6b:49:c5:64:
09:b9:33:04:9b:29:b9:51:ae:85:8f:37:1e:b4:41:
58:c1:21:1b:4d:03:6c:d3:c0:1e:a3:19:23:ba:b2:
e3:57:99:c1:f8:c0:9d:a4:1a:e4:a1:63:0b:2b:a4:
06:35:a4:05:a2:2e:f4:1d:1d:35:fa:e7:ac:84:84:
f1:d8:7b:72:b0:83:8d:a8:dd:c4:34:8f:d3:dd:1c:
24:55:64:0e:7b:57:38:99:b4:4f:cd:78:ca:9f:03:
01:9f:ce:7c:92:66:78:9f:61:d6:e5:b3:3c:77:9d:
4a:a3:26:91:6a:a0:22:12:8f:3c:2b:8b:50:9d:8d:
6a:93:f4:df:ae:18:92:09:fd:9f:65:81:3a:24:f8:
89:3b:8a:1b:22:78:23:1f:78:12:d1:a7:3f:e6:4f:
84:6c:dc:36:ea:1a:5e:b8:21:a9:bb:4f:35:c1:71:
2d:37:59:ef:1a:af:94:d2:8f:6b:0f:d6:e6:17:e6:
fe:bf:69:ca:4c:6a:03:d6:97:fb:45:51:50:50:f4:
a2:45:da:82:8b:3f:d3:17:66:b0:0b:92:c8:10:59:
0c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:9F:37:AD:C7:E2:FC:8D:FC:2C:00:96:A5:3A:8D:28:3C:99:2F:F7
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146488.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aefe::/32
Signature Algorithm: sha256WithRSAEncryption
5c:f0:e7:67:74:68:08:82:04:cf:1a:a3:dc:ab:7d:53:d0:41:
ff:51:3c:e7:bd:c3:15:13:83:b6:e2:95:30:04:c1:1d:e4:27:
9e:55:86:76:c3:95:08:78:30:e3:5d:c6:94:e0:73:f3:10:02:
d1:73:fb:ec:d4:7d:e6:86:7f:3e:58:f8:a4:c8:ee:22:d1:f4:
00:01:42:8f:b2:ef:7f:e1:04:3e:de:f5:25:e6:67:b4:db:91:
ad:d1:ee:d8:53:d2:b2:8d:2a:73:8b:3e:47:31:52:e3:28:91:
df:ac:65:24:71:34:a5:96:df:b7:65:e0:e4:58:e8:38:4f:63:
d5:6f:a6:93:35:05:fe:c9:ab:18:5a:ed:d0:c3:b0:06:88:c6:
05:bf:c4:75:7e:35:8e:82:4d:f0:d9:83:dd:01:88:82:a3:51:
f4:48:79:d5:ac:f1:bc:ac:2f:1d:c4:7d:b8:31:1b:67:f8:2c:
f7:dd:9f:9a:c8:26:f8:dd:c5:99:1b:e8:7f:61:43:5e:7b:ea:
a2:fa:93:c2:0c:5c:bb:85:e6:b0:83:ab:4b:6c:e8:96:bf:45:
a9:d8:68:c6:63:25:20:bd:a0:71:3f:38:cd:d7:27:13:5d:f6:
3a:0e:d5:86:c8:ef:1a:53:fb:90:e5:c0:04:29:cf:8a:dd:ab:
0c:d5:71:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:27:04 2026 by rpki-client