Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146534.roa
File: AS146534.roa (raw, json)
Hash identifier: 2kbpBGMIdbDikrUYs1iOwGcLVxZsCRdti7M4S+Q9myc=
Subject key identifier: 42:91:5A:B3:D2:E1:6A:C2:3F:79:6D:E5:B5:6C:82:A2:7B:C3:70:2D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 79A97144FD910853122B632F8934C466DE9BB729
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146534.roa
Signing time: Tue 26 May 2026 06:30:29 +0000
ROA not before: Tue 26 May 2026 06:25:29 +0000
ROA not after: Tue 25 May 2027 06:30:29 +0000
asID: 146534
IP address blocks: 240a:af2c::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:a9:71:44:fd:91:08:53:12:2b:63:2f:89:34:c4:66:de:9b:b7:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:25:29 2026 GMT
Not After : May 25 06:30:29 2027 GMT
Subject: CN=42915AB3D2E16AC23F796DE5B56C82A27BC3702D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:04:93:8e:52:ce:00:21:6c:c8:78:cb:66:82:
c0:6b:9b:2f:3c:9b:89:2b:2f:be:9e:eb:4d:2b:5a:
d4:d3:85:b3:19:b8:e1:76:46:b7:c5:b0:7e:6a:fa:
fd:78:5b:46:1a:2c:ee:05:44:fc:4f:15:ad:28:e1:
c7:05:4d:39:a3:ed:07:71:f0:c5:66:5f:b6:58:72:
ef:0a:75:19:01:b7:a3:4a:4a:d4:13:7e:60:ba:ba:
95:7e:88:eb:a2:9f:63:d7:03:3e:77:63:34:ca:00:
49:4c:cc:02:b3:eb:f1:65:d3:67:d6:2c:b7:9d:f1:
4e:f1:25:5b:41:d5:4f:90:e7:ad:e3:33:36:9e:22:
ce:c9:1d:24:03:84:b7:e8:0d:45:c4:9d:bf:ab:4d:
f5:21:54:3e:71:15:a0:4b:52:b3:64:8e:64:d1:b5:
d4:9f:39:b9:88:d1:b8:96:a2:11:45:d3:b0:55:90:
b3:db:c8:47:1b:8a:96:e5:f9:09:0a:7d:df:cb:79:
86:8e:b7:47:1a:81:5e:90:a9:9f:39:47:a8:ed:d0:
05:d4:63:77:c2:63:95:9d:e0:b8:25:82:10:92:1b:
b4:58:08:b5:0c:d8:60:b5:c9:d9:fd:7f:e6:0a:66:
92:96:e1:ec:68:7b:69:5c:67:19:3e:91:8d:75:12:
8b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:91:5A:B3:D2:E1:6A:C2:3F:79:6D:E5:B5:6C:82:A2:7B:C3:70:2D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af2c::/32
Signature Algorithm: sha256WithRSAEncryption
76:db:41:a5:7c:b0:9b:e1:af:bb:c9:8c:3b:cc:95:11:bc:63:
31:c7:08:17:09:8a:31:32:88:b6:4a:fb:f5:83:ee:74:11:12:
f5:09:b4:c8:92:56:b3:8f:3b:9f:6c:e0:27:c4:46:9b:9a:be:
e3:4e:68:79:00:51:16:50:26:7d:fe:87:97:90:86:eb:b3:9e:
8d:4f:70:f9:f0:a1:1f:82:48:8b:a8:f4:b0:5f:1b:6f:67:ab:
0c:5b:12:14:e2:d5:14:21:d7:b8:8a:99:ff:df:7a:82:75:21:
d6:89:de:93:77:84:5a:a6:24:7a:a4:35:3f:b9:fc:e8:f5:df:
b0:f8:75:b4:f0:a5:9a:2c:9e:7d:33:f2:04:be:b3:35:5b:27:
25:59:b4:cf:d9:66:83:03:fe:20:ae:42:ab:21:0a:32:30:11:
a5:bd:5f:1a:f3:e8:05:66:60:c4:35:d4:12:61:95:29:d8:58:
4e:f2:68:8b:e2:89:7b:66:a6:e1:87:28:6e:f7:3f:4b:fd:ac:
8f:ef:d9:f0:c3:b2:bc:9d:2f:e8:a3:ad:b0:3e:54:d6:bd:9c:
78:02:9e:04:c9:86:1b:8c:b6:ba:1e:47:d0:95:70:2a:31:94:
9b:06:99:c9:d2:d0:d4:dc:49:3c:7d:e8:9f:43:52:d1:bc:a1:
69:eb:a1:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:26:20 2026 by rpki-client