Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146461.roa
File: AS146461.roa (raw, json)
Hash identifier: 37ed19iJ0f3D31DDRW795wMcWAByIYdBtpVwWf3bYw0=
Subject key identifier: 65:5A:78:9A:0E:39:98:AE:BB:35:01:12:BF:0E:09:2D:24:2F:EC:0F
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 1A0E915878FE1E7EDB0E75F3C996CD55EB08101C
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146461.roa
Signing time: Fri 22 May 2026 06:46:15 +0000
ROA not before: Fri 22 May 2026 06:41:15 +0000
ROA not after: Fri 21 May 2027 06:46:15 +0000
asID: 146461
IP address blocks: 240a:aee3::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:0e:91:58:78:fe:1e:7e:db:0e:75:f3:c9:96:cd:55:eb:08:10:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 06:41:15 2026 GMT
Not After : May 21 06:46:15 2027 GMT
Subject: CN=655A789A0E3998AEBB350112BF0E092D242FEC0F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5c:8b:01:6f:f2:52:73:2b:bb:db:6e:f9:92:
51:07:1e:eb:19:a1:c1:fb:36:85:94:d3:ab:a5:19:
38:32:aa:5f:1d:5f:94:18:5e:5c:cf:f7:89:82:78:
06:59:bb:ce:a9:c6:2b:b1:18:ec:62:76:9d:8a:7e:
93:6f:12:dc:27:50:bb:f5:f9:55:4e:b1:ea:01:b5:
eb:e9:cd:30:b4:7b:a4:83:7b:c7:28:c8:59:00:bb:
51:c0:50:9e:5c:ef:fe:ac:fd:84:0a:72:4f:56:28:
43:b5:d0:de:99:92:0c:1d:c9:b0:a3:d7:79:f0:5e:
ce:02:0d:b3:e5:c3:b6:1a:fc:29:bb:83:bb:f6:12:
79:0c:bb:8b:b4:24:e2:f0:6e:60:a9:2d:6f:22:71:
fc:d7:f8:4b:cc:c1:91:7c:e8:ef:51:0a:01:cb:1a:
d4:0a:08:0f:8b:65:8c:68:8f:8b:5f:5e:e1:86:82:
11:4e:c8:6a:aa:51:48:bc:7f:5a:6f:0a:9c:6a:4a:
f3:4b:0a:16:b9:3f:ec:75:10:a1:ec:1c:3f:cb:1b:
45:cc:f6:0b:b8:bb:77:43:69:5c:33:92:21:bd:d1:
16:a1:93:be:ff:61:4c:8f:36:94:1f:a9:2e:38:97:
c9:6a:93:e7:5c:a1:bc:a2:b6:c0:d3:63:33:d1:0c:
98:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:5A:78:9A:0E:39:98:AE:BB:35:01:12:BF:0E:09:2D:24:2F:EC:0F
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146461.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aee3::/32
Signature Algorithm: sha256WithRSAEncryption
6b:9b:b3:eb:2e:6d:5a:b7:fa:95:48:e4:b3:6d:86:8b:01:4c:
dd:e2:a6:73:5d:a0:10:54:4f:be:d0:08:6c:63:ac:bd:b2:dc:
5e:a4:99:77:58:3c:10:e3:f9:76:98:04:13:e8:4e:7b:b7:b9:
3a:de:1b:6d:00:e8:38:ef:d9:21:7a:15:71:8c:52:46:98:ad:
57:48:aa:a9:37:72:fa:a5:f3:cc:64:69:b4:8e:49:73:87:6a:
07:be:ff:10:d2:21:ce:73:1e:b3:29:03:53:9a:03:c6:69:2a:
ae:38:fe:d4:9b:16:d9:e9:6a:16:b7:07:0c:e6:ad:49:5d:54:
ef:fd:bd:22:bc:17:f1:58:83:79:93:32:a1:01:9c:c4:74:6d:
5c:a5:06:74:21:52:f0:c4:a9:b5:a6:65:13:bf:d2:1f:5e:3e:
68:4a:1d:e7:7f:5d:07:5b:7a:a3:39:1c:dc:39:45:ed:b4:35:
8a:99:ee:1f:b7:8b:cf:4b:14:a2:4d:c1:5e:7d:ae:82:0f:b3:
6c:45:22:78:89:5b:71:29:2c:b2:69:51:bb:ab:9d:62:ee:7d:
67:ab:9b:2d:b4:3a:fc:27:16:e9:8d:03:86:4b:c8:41:75:d3:
47:6b:1c:23:19:18:13:d5:98:a3:45:54:88:4b:22:40:2b:9f:
1a:a8:70:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:39:58 2026 by rpki-client