Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146002.roa
File: AS146002.roa (raw, json)
Hash identifier: zUpmzRxhHNhrIGflNrmjnToqqagzeV+45kc8H/Fnmhg=
Subject key identifier: 57:49:55:51:3C:32:18:4D:03:EF:5B:FF:EA:B0:3A:7D:00:FF:FF:C5
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 59D1998CEE43E67BD26CFCF83AC4967DD78D81BB
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146002.roa
Signing time: Tue 26 May 2026 02:35:04 +0000
ROA not before: Tue 26 May 2026 02:30:04 +0000
ROA not after: Tue 25 May 2027 02:35:04 +0000
asID: 146002
IP address blocks: 240a:ad18::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:d1:99:8c:ee:43:e6:7b:d2:6c:fc:f8:3a:c4:96:7d:d7:8d:81:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:30:04 2026 GMT
Not After : May 25 02:35:04 2027 GMT
Subject: CN=574955513C32184D03EF5BFFEAB03A7D00FFFFC5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a7:86:19:04:a3:9a:a1:02:9a:ed:e8:55:c2:
4e:9a:f6:37:f7:6a:26:e1:22:52:6f:4f:ae:17:79:
58:36:88:9c:94:d7:13:f9:e8:e1:d7:13:81:b3:78:
94:21:26:3a:50:2b:93:10:6a:5d:67:b9:fc:5c:3e:
68:52:0c:e5:52:36:3b:37:0c:4f:47:72:b8:de:89:
88:3f:24:44:dd:90:64:b4:9b:03:8a:aa:3f:b4:4a:
23:a8:1d:ce:36:46:1f:06:7d:de:39:f2:09:bd:06:
6f:2f:f4:be:70:bc:ad:50:e2:d9:4b:7c:4b:cb:06:
0d:dc:f1:34:be:bd:a3:76:b2:8a:f2:f6:df:dd:43:
0b:a0:ec:6b:83:ba:26:f2:b9:f9:cd:09:d1:1c:a0:
f3:26:97:d9:01:7d:56:f2:4b:f7:6a:19:e1:57:d8:
cc:1c:15:31:16:0e:98:69:62:ab:c6:4e:1b:1d:83:
9a:0c:70:83:9d:17:6e:30:82:b7:a3:bc:d9:f9:9b:
60:77:98:56:4d:16:ff:89:88:89:43:df:d2:35:8a:
47:ab:66:16:c5:d6:b8:5f:9d:01:82:a2:2d:76:11:
36:e4:4a:4b:17:09:44:8c:f3:73:e1:b7:96:36:41:
66:20:91:a6:94:2d:43:fd:35:0f:d3:9f:6c:e8:b2:
26:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:49:55:51:3C:32:18:4D:03:EF:5B:FF:EA:B0:3A:7D:00:FF:FF:C5
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146002.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:ad18::/32
Signature Algorithm: sha256WithRSAEncryption
0a:d6:94:8e:b0:47:20:a3:87:71:56:73:45:e0:00:2e:4d:d3:
40:c4:eb:1f:ad:fc:34:82:7c:b9:3e:12:70:08:66:f6:24:6c:
0f:03:c3:5e:95:38:d1:7a:f7:20:8d:17:89:f4:30:45:d2:1e:
9d:20:03:ef:06:1a:d7:d1:25:59:80:5e:90:76:a9:7c:85:e5:
a0:13:ae:14:6d:ea:83:df:4a:86:12:f1:78:03:ad:75:81:3b:
b8:b4:c4:a9:ae:cd:8d:6f:1e:45:88:10:05:3f:f1:95:a5:6e:
52:a0:c5:6a:c8:2c:a4:0b:af:8d:3d:04:c5:a2:fd:96:b4:cb:
27:7f:7e:57:45:63:6b:44:4a:fd:e2:6e:17:d0:b8:c7:18:9b:
dc:26:6e:ab:0d:a7:c5:82:74:d6:0e:25:28:b6:2a:7d:41:39:
d8:db:3d:7c:81:fc:5e:15:e9:78:0d:d9:d0:93:fd:41:a0:85:
84:ad:23:2e:c3:03:0c:46:4f:a7:97:c8:d4:fa:d1:11:1e:6e:
85:39:12:78:2c:16:4b:5d:3a:27:11:d9:6e:25:7a:ff:e5:5c:
05:ee:91:49:1c:0b:2c:db:da:0f:d9:04:89:32:87:0c:0d:db:
7a:f1:96:09:d6:3a:b8:22:80:af:10:d9:38:50:b7:4c:eb:b8:
05:11:8e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:49:50 2026 by rpki-client