Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146494.roa
File: AS146494.roa (raw, json)
Hash identifier: 7juK7Epn4uFH5XPe0IPlPAluhPwFrLg4srJYjmkHsp8=
Subject key identifier: 38:F3:FE:2C:E3:AF:0B:50:84:2E:72:C7:A6:72:62:1D:F5:CD:71:C5
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 79763BBA715F20AE2D8B9CA69A7610FEF76B7348
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146494.roa
Signing time: Fri 22 May 2026 07:32:10 +0000
ROA not before: Fri 22 May 2026 07:27:10 +0000
ROA not after: Fri 21 May 2027 07:32:10 +0000
asID: 146494
IP address blocks: 240a:af04::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:76:3b:ba:71:5f:20:ae:2d:8b:9c:a6:9a:76:10:fe:f7:6b:73:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:27:10 2026 GMT
Not After : May 21 07:32:10 2027 GMT
Subject: CN=38F3FE2CE3AF0B50842E72C7A672621DF5CD71C5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b1:a2:66:87:71:64:3c:c1:3d:09:3d:d5:4d:
c2:56:07:22:fc:a9:e7:a7:86:a0:71:24:7e:55:a9:
30:c5:c5:84:37:d8:fb:2b:ed:35:a6:a8:29:08:03:
56:46:62:2f:7d:69:9c:3b:ee:67:3a:e9:db:51:a6:
b6:2c:df:d3:b9:f8:5c:59:1b:3c:e2:5f:00:65:af:
cc:75:53:a3:7b:1c:f4:a6:43:65:b6:f6:4b:ca:40:
a4:de:43:6f:69:e2:51:80:ab:c4:35:87:93:12:ee:
0f:45:88:c5:f7:5f:5b:68:3b:51:18:6a:04:09:cc:
ee:40:ac:f8:98:29:45:7f:69:aa:49:a5:1b:ef:31:
0f:a2:ec:a8:61:1d:1d:2a:c6:52:7f:dd:90:5b:1b:
8e:66:95:0a:fa:f3:9d:57:4d:28:90:e1:9e:57:2e:
1b:1c:d9:26:64:3a:92:d5:19:44:03:67:a2:42:61:
e1:f9:4a:67:32:f9:72:25:a2:a4:9a:fb:0f:6d:5c:
2e:76:3b:e0:4f:54:bb:01:d8:0c:6c:a3:ce:ff:77:
eb:90:ff:56:13:16:6a:77:89:47:5d:7b:89:11:e8:
c6:6a:42:af:63:cf:2f:f5:2c:12:4c:a6:6f:ac:c4:
3b:00:e1:d0:54:0a:54:e6:57:93:c4:9b:8d:f4:4a:
b4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:F3:FE:2C:E3:AF:0B:50:84:2E:72:C7:A6:72:62:1D:F5:CD:71:C5
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146494.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af04::/32
Signature Algorithm: sha256WithRSAEncryption
4f:16:01:97:00:b9:2e:9d:bd:8e:14:04:85:0a:c9:56:c8:09:
ee:9f:9e:0d:ef:bc:b4:7e:85:12:ba:21:81:67:89:28:e5:53:
8d:04:23:e0:88:a7:43:d2:57:91:e3:1b:5f:9c:a1:be:cb:6e:
1f:68:ec:d5:6f:ca:ad:ee:ce:3b:11:3c:e6:79:ff:45:cd:f1:
75:25:7f:32:f0:5c:c9:a3:35:3c:48:36:0e:ac:ed:f1:b8:75:
5f:25:67:cb:76:e5:66:c0:e2:aa:78:a5:45:2e:c0:35:90:de:
37:ef:26:a9:22:90:62:2e:28:f2:2b:cb:a0:f5:d6:e2:1a:a9:
da:55:b2:00:ee:83:ef:37:11:a9:b8:64:24:42:f0:36:6f:85:
04:2c:9c:37:bb:9e:92:26:14:9d:65:63:96:8d:b4:52:26:fe:
a0:c0:80:5f:94:c1:7e:08:10:50:59:2a:d7:0a:6c:20:dc:d2:
30:d3:f8:0d:76:8c:aa:3c:56:eb:eb:95:9a:3e:d3:35:d1:bc:
1a:9e:77:9f:d0:55:59:6c:ba:da:a0:8c:d9:81:d0:c6:2a:2c:
7c:e6:0e:82:ee:17:ab:be:ac:7d:b3:e6:1d:1b:94:c0:e4:60:
29:29:6b:41:b9:73:94:75:40:0a:4c:9f:64:b6:57:f0:e5:c2:
e0:7d:52:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:35 2026 by rpki-client