Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146495.roa
File: AS146495.roa (raw, json)
Hash identifier: djE2jWEdSwX/hGCj5/tq5bZwBRtKkX5i/jBsIBW8IxY=
Subject key identifier: EE:7A:92:77:B1:B3:9D:4B:AB:0F:19:A0:F9:51:3D:98:75:FA:4C:6B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4C21C68EBC5AEFE950378C55175A6E23D28A6342
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146495.roa
Signing time: Fri 22 May 2026 06:46:22 +0000
ROA not before: Fri 22 May 2026 06:41:22 +0000
ROA not after: Fri 21 May 2027 06:46:22 +0000
asID: 146495
IP address blocks: 240a:af05::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:21:c6:8e:bc:5a:ef:e9:50:37:8c:55:17:5a:6e:23:d2:8a:63:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:41:22 2026 GMT
Not After : May 21 06:46:22 2027 GMT
Subject: CN=EE7A9277B1B39D4BAB0F19A0F9513D9875FA4C6B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:aa:66:1f:ae:3b:ee:3b:a2:49:0f:16:44:54:
c9:9f:7e:f5:51:ee:7f:a5:4c:20:2b:f9:d1:3f:83:
62:17:b1:6b:64:5d:c4:1e:b0:d7:e8:ba:63:58:c7:
11:7d:d0:b0:b1:c2:19:ee:2f:8a:54:c9:ee:1b:c4:
81:78:0e:b9:df:d7:54:88:5a:56:56:ab:e7:0c:dc:
1c:c2:56:ea:1e:85:50:2a:f3:7f:1e:07:ca:ed:68:
01:33:d6:da:e5:5c:46:ab:c5:76:3e:99:54:cb:21:
b5:4d:2a:b2:5f:35:00:62:8f:e3:9e:05:8f:59:e9:
67:d4:ca:3e:43:56:8c:65:4f:cb:d9:3e:f7:68:54:
eb:3f:52:f1:c4:05:b7:7c:a5:71:7e:bb:e1:2f:8e:
b1:c0:c0:b3:c4:33:03:7b:ea:8f:e6:d0:ce:11:4f:
fb:9f:eb:9a:d0:f3:a1:5d:60:1d:86:93:92:13:e4:
69:1d:88:4b:35:cd:d5:d8:05:0b:95:1c:93:e5:78:
b7:6b:72:11:2c:56:df:05:4b:22:92:0b:a0:82:28:
8c:2a:12:dc:67:22:e5:53:17:19:06:c1:d2:4a:7b:
22:73:76:f3:b4:dc:ad:b4:fe:d7:e7:0a:56:a8:81:
ff:9a:bf:cc:d3:e3:a8:58:73:c9:38:a3:bc:ce:c3:
18:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:7A:92:77:B1:B3:9D:4B:AB:0F:19:A0:F9:51:3D:98:75:FA:4C:6B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146495.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af05::/32
Signature Algorithm: sha256WithRSAEncryption
3e:df:6c:38:f2:5e:fe:f9:f7:56:eb:64:0b:52:42:72:df:bf:
8f:6d:1f:db:22:48:e9:b1:18:2b:7b:6a:1a:8c:ca:cc:bd:b9:
05:2b:d0:ef:3d:4b:ea:a6:20:9e:cc:b0:26:06:f4:3f:d6:5e:
89:66:4f:d3:5a:db:74:ac:27:ab:a3:27:30:05:82:c0:8d:07:
fe:8d:58:fb:a7:f7:02:26:56:9a:b2:03:df:51:85:3d:5d:b9:
4e:c2:51:22:c9:69:19:d2:0d:24:99:f0:34:3a:83:fc:33:a2:
74:17:7f:53:38:2e:ee:86:96:de:10:ad:8e:56:82:7c:41:e2:
13:08:5f:f4:29:76:19:14:51:ce:96:48:1a:1c:fa:ee:4e:85:
3d:20:e3:13:bc:20:7b:15:64:83:cf:13:b6:09:f7:f4:13:ea:
97:ae:4e:f9:28:d2:b0:6a:0d:7c:0e:9b:95:c2:af:85:90:e8:
57:a9:8f:a2:76:ca:b2:18:71:5c:d0:69:f9:10:de:b9:de:b9:
44:a7:ee:92:d7:f0:56:91:18:8a:e8:5e:bf:d6:7b:c3:83:7d:
36:ac:fe:38:60:1f:7b:b5:58:1e:f9:aa:7d:02:9c:0a:26:a0:
14:62:db:d3:54:10:40:2a:bd:de:b0:4a:09:f3:7f:7f:18:05:
37:9f:2b:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:34 2026 by rpki-client