Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146489.roa
File: AS146489.roa (raw, json)
Hash identifier: cLJkXa5H7RdAsZhXkd1O711jw0ny0bGRAPQNxS71KEU=
Subject key identifier: 17:2D:76:B6:1D:BF:07:E2:0F:B3:3B:3C:99:D1:F4:A3:97:82:34:DF
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 28F3E6F534526C703E293A48AA3AD02114ADFA8D
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146489.roa
Signing time: Tue 26 May 2026 01:12:58 +0000
ROA not before: Tue 26 May 2026 01:07:58 +0000
ROA not after: Tue 25 May 2027 01:12:58 +0000
asID: 146489
IP address blocks: 240a:aeff::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:f3:e6:f5:34:52:6c:70:3e:29:3a:48:aa:3a:d0:21:14:ad:fa:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:07:58 2026 GMT
Not After : May 25 01:12:58 2027 GMT
Subject: CN=172D76B61DBF07E20FB33B3C99D1F4A3978234DF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:29:3c:f1:04:36:fd:b8:b1:23:d5:ab:67:8c:
88:d8:ee:62:84:79:64:cf:58:f9:e9:20:e1:e7:f0:
f3:6b:00:91:c4:12:e4:fc:5a:82:83:33:d1:4b:18:
c2:be:c9:15:ca:8c:da:54:bf:64:ee:ee:1a:ac:2c:
de:98:31:a2:5e:63:6c:c4:7b:5a:25:d6:86:87:6e:
ed:eb:8e:66:60:f5:f7:24:f7:fc:fa:2f:07:3d:9e:
bb:fd:82:16:e4:fc:7c:8d:aa:cd:44:6b:2f:13:65:
9c:31:c8:ac:a3:38:e6:ab:f1:03:3a:df:87:d8:d7:
ea:38:fa:8e:d8:a4:9e:51:20:2f:6c:86:24:99:61:
14:95:b6:d8:35:bc:3b:5b:a3:42:70:26:31:cc:a6:
17:40:42:b1:32:99:30:62:2e:2b:0a:e9:96:87:63:
fb:fc:6f:b7:88:85:d2:ec:0e:e4:96:9a:fa:4b:a1:
71:a4:10:b4:0d:0c:68:54:50:aa:37:d1:e9:9e:88:
71:f7:50:61:a6:10:17:76:39:da:ae:31:aa:b4:33:
21:00:74:08:24:6f:c3:37:6d:0b:cc:df:6a:42:94:
fe:72:b3:39:b1:b6:cf:79:4e:98:da:14:a9:b1:0f:
7a:67:60:67:8a:c1:be:5b:30:d7:7d:5c:aa:19:69:
86:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:2D:76:B6:1D:BF:07:E2:0F:B3:3B:3C:99:D1:F4:A3:97:82:34:DF
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146489.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aeff::/32
Signature Algorithm: sha256WithRSAEncryption
86:93:07:e6:21:b3:26:af:aa:d5:63:4b:04:3b:a5:24:a0:64:
34:f1:85:a5:e4:8d:4d:66:76:bf:d1:cf:81:48:55:00:72:be:
de:35:44:8c:d3:80:56:57:f5:61:40:28:c9:ee:a0:58:24:36:
37:cd:c3:9b:45:84:58:60:e1:1c:31:72:d5:99:36:97:24:c8:
13:a5:5b:66:6b:a2:62:7b:34:4c:fc:79:4b:5b:9a:a2:d0:79:
02:eb:99:cd:88:d7:bf:05:c9:4d:ac:15:6f:0c:92:34:0a:ec:
21:3e:bc:50:cb:16:c0:76:be:f1:75:b7:30:d0:4d:2a:f0:46:
cb:54:09:c7:92:b2:4a:b5:4b:04:00:c8:bc:d9:ee:fa:69:3d:
bb:da:bd:1f:72:5b:7d:02:df:e9:a7:0f:5c:4a:de:fc:e5:39:
aa:bd:11:51:93:ee:38:93:51:b1:85:09:b1:7a:79:3a:91:79:
e4:fa:30:90:42:05:10:c1:7d:f8:73:16:d3:ae:56:22:75:9d:
3b:c4:30:67:07:df:dc:92:09:ed:de:f6:ba:98:61:3b:7f:9e:
83:f9:b0:e9:e7:96:b5:30:84:aa:38:af:80:ed:87:ef:0e:ef:
4b:04:ab:5d:4d:1e:05:37:9c:94:9d:f9:8f:8a:15:dc:41:f6:
c2:ad:7b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:50 2026 by rpki-client