Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146732.roa
File: AS146732.roa (raw, json)
Hash identifier: PPyv6ajQJBSwI6GFoPZQ/+te17dywxmFmI/U17ycU4M=
Subject key identifier: E2:AE:AF:78:62:B0:C7:97:72:27:A4:9D:E8:7A:7C:FA:E1:05:DB:D2
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2F9D170FDE671F70C1B27BD425DB493BA1C85259
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146732.roa
Signing time: Fri 22 May 2026 07:24:55 +0000
ROA not before: Fri 22 May 2026 07:19:55 +0000
ROA not after: Fri 21 May 2027 07:24:55 +0000
asID: 146732
IP address blocks: 240a:aff2::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2f:9d:17:0f:de:67:1f:70:c1:b2:7b:d4:25:db:49:3b:a1:c8:52:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:19:55 2026 GMT
Not After : May 21 07:24:55 2027 GMT
Subject: CN=E2AEAF7862B0C7977227A49DE87A7CFAE105DBD2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2d:e7:93:fd:d9:c7:b3:56:8c:2f:45:85:3e:
d8:c7:74:49:a6:32:14:a7:33:85:e6:de:79:49:68:
a0:96:5c:07:57:53:16:4f:01:2e:f3:d4:00:29:83:
06:74:f4:98:a2:bc:2d:6f:2f:2a:bf:ea:e8:6f:71:
19:35:34:e7:5b:0c:54:76:84:00:b3:6b:f0:78:18:
f1:6f:57:d6:f3:78:35:d3:28:04:f8:e4:84:3d:ce:
aa:e5:94:4a:cf:e6:c8:7d:be:3d:7e:93:0d:6e:d7:
07:64:3c:e4:88:6e:06:a7:d6:d0:64:3b:2b:66:95:
99:1c:94:64:f1:b9:d6:05:fb:f2:f7:51:df:b9:e8:
fe:11:56:33:28:83:49:4e:17:0e:97:60:21:30:f6:
a3:63:12:bd:c0:5c:d6:c5:84:22:66:2a:fb:6c:d3:
53:2b:77:22:63:bd:2a:70:4c:fa:6e:4f:6c:78:bc:
da:a1:43:f6:9f:3b:57:1e:11:73:17:8e:82:65:80:
49:1c:13:6d:89:0d:48:b0:20:e3:e3:95:35:51:6c:
df:9e:39:21:b5:7b:e6:84:e1:f8:41:40:f0:b3:6a:
b8:98:53:be:d4:2a:bf:60:82:f8:51:a3:5c:ff:ca:
1e:2e:db:10:bc:69:35:ad:03:33:8b:c2:dd:cf:89:
7a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:AE:AF:78:62:B0:C7:97:72:27:A4:9D:E8:7A:7C:FA:E1:05:DB:D2
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146732.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aff2::/32
Signature Algorithm: sha256WithRSAEncryption
3f:6a:61:48:17:f2:13:ce:c1:19:d7:49:9a:82:aa:b5:e0:fc:
94:09:04:39:81:84:44:2b:7e:92:de:92:33:f9:c9:cf:ce:44:
e4:84:f0:a7:6e:0d:be:6e:c7:c3:9b:20:af:10:12:65:fd:ad:
c8:66:34:fa:b7:5f:0b:b9:3c:04:3a:86:e8:ac:c8:be:cf:e2:
89:3e:d3:08:73:41:eb:00:c6:68:a3:a3:92:67:3b:2e:6b:0d:
dc:48:ed:ab:62:da:48:39:f1:0b:42:89:61:ca:fa:39:ff:94:
0a:69:a3:e5:73:25:fa:0f:0e:c1:35:b5:3a:8b:e9:f3:8d:a9:
d7:05:b7:8a:4a:75:4d:43:c5:52:bf:d2:3d:7c:61:a2:54:53:
91:32:be:a0:2c:a6:f0:36:5c:ca:80:1f:80:95:5e:2b:76:62:
28:b8:b2:42:ed:ab:14:f2:92:58:e8:4a:d1:5e:6c:57:b3:da:
f5:17:0b:4d:ae:67:96:79:b5:00:54:c6:60:c6:ed:24:f9:37:
87:00:4a:3e:9f:20:e9:2b:b2:62:1a:b6:2b:08:3e:17:25:18:
32:18:06:a7:76:6d:f6:3f:3f:04:52:4c:a4:0b:14:46:7f:c1:
c0:7a:73:17:40:b4:5a:97:52:a6:ea:70:2d:f9:cd:d8:2b:1e:
5f:47:b1:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:44 2026 by rpki-client