Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146478.roa
File: AS146478.roa (raw, json)
Hash identifier: fkjwl2ZmgG3VMDUM+B0rlqc7RE8oCWNUaUkmFqM89PY=
Subject key identifier: A1:E9:D3:4C:EF:41:73:4E:7B:54:E9:CB:7D:13:77:B3:A4:7F:F4:DE
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 582ED3A31A4D7043E332C843813B63941E9F8395
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146478.roa
Signing time: Tue 26 May 2026 01:13:21 +0000
ROA not before: Tue 26 May 2026 01:08:21 +0000
ROA not after: Tue 25 May 2027 01:13:21 +0000
asID: 146478
IP address blocks: 240a:aef4::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
58:2e:d3:a3:1a:4d:70:43:e3:32:c8:43:81:3b:63:94:1e:9f:83:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:08:21 2026 GMT
Not After : May 25 01:13:21 2027 GMT
Subject: CN=A1E9D34CEF41734E7B54E9CB7D1377B3A47FF4DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e2:be:b4:64:92:d2:5f:36:98:7a:ca:9f:d7:
ca:b9:77:b7:b5:36:46:80:47:48:7b:cb:af:f8:a5:
a1:cb:40:7d:85:bb:2e:54:ca:5e:98:d2:c3:d1:53:
d9:50:87:39:0a:b7:5e:7a:f8:88:ce:ce:b8:c4:fe:
6f:23:5a:8d:81:ec:06:89:88:2c:f7:08:f4:64:cc:
c1:5c:82:16:bb:e8:d7:e1:ed:42:aa:00:91:8a:37:
d8:b7:58:43:dc:53:3c:6a:56:ad:af:e5:9f:ce:86:
a8:4c:0d:85:e3:af:17:39:3f:2d:a5:f7:85:84:21:
97:57:d4:44:f0:83:1a:bb:92:e3:87:2e:16:46:1b:
51:7b:58:bb:2e:03:b8:50:e5:8a:69:a1:f4:eb:3c:
08:96:8c:25:ab:40:b3:1f:59:d8:a8:b6:6e:eb:12:
16:e8:91:73:3d:b7:c7:cb:2f:e7:a1:52:62:5e:b5:
06:1e:e5:1d:20:36:82:55:a0:30:dc:67:8e:53:84:
aa:fb:a9:9d:4a:4b:7c:14:ab:c5:e1:6f:6f:41:5a:
12:09:57:58:9d:71:2d:21:05:b8:10:40:50:63:71:
f1:52:0a:dc:44:20:97:3b:ad:26:26:f9:ba:af:b8:
91:3c:a0:a5:0b:f0:de:6b:bd:a1:2f:ca:fb:a4:2b:
45:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:E9:D3:4C:EF:41:73:4E:7B:54:E9:CB:7D:13:77:B3:A4:7F:F4:DE
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146478.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aef4::/32
Signature Algorithm: sha256WithRSAEncryption
a8:06:2b:bd:1d:d2:59:a6:7a:91:86:09:1e:34:ae:e9:f8:bf:
c2:2d:a5:08:d1:71:06:16:4f:c2:88:0f:7d:15:76:74:c0:37:
9b:47:0d:a5:ad:5d:b2:5e:ac:e8:3f:8b:2a:45:69:79:7f:ad:
de:09:ab:bc:4e:93:a0:44:ed:6e:80:59:4c:9c:23:57:f1:92:
74:0f:2b:cf:de:3b:c1:91:1a:79:dc:23:cb:2e:61:b3:7d:17:
d6:ae:32:0c:7e:9e:61:06:4b:58:bf:68:7b:f0:eb:b7:6e:23:
69:7f:1c:a7:71:fd:94:c4:2d:8c:93:05:c1:29:ce:ab:fc:62:
fe:bf:63:e0:4a:a4:11:cb:0f:e6:64:b4:b2:24:15:1b:e2:a6:
e0:06:f7:21:4c:7c:48:bc:46:59:cc:0c:be:0d:c8:b9:97:d8:
bf:63:6b:6d:3b:65:e9:17:f2:36:db:d5:e9:82:ce:99:85:ef:
b7:62:53:eb:c6:ba:c6:83:af:c4:1d:bb:1f:fc:37:d8:af:e3:
9c:2e:f2:aa:37:bd:26:96:ee:13:9a:ab:71:92:a4:13:c7:81:
e2:86:d0:ea:25:91:d3:66:51:e4:50:1e:51:7e:d9:2a:36:ee:
30:8a:05:46:e4:1c:8a:f7:78:aa:e4:3c:e6:06:e2:f6:e2:84:
f7:d7:66:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:43 2026 by rpki-client