Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146481.roa
File: AS146481.roa (raw, json)
Hash identifier: ey/S3BdSb4hV4uhBf/i425/10b+LyK/ZbflOco9vuKw=
Subject key identifier: 6E:C0:2C:BB:AE:D2:A2:F0:0C:85:BF:B9:3B:F5:8E:3B:EB:B5:91:2C
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 2AA2548A1372510D30D313AEAF09D6FD80716079
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146481.roa
Signing time: Tue 26 May 2026 08:52:48 +0000
ROA not before: Tue 26 May 2026 08:47:48 +0000
ROA not after: Tue 25 May 2027 08:52:48 +0000
asID: 146481
IP address blocks: 240a:aef7::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:a2:54:8a:13:72:51:0d:30:d3:13:ae:af:09:d6:fd:80:71:60:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 08:47:48 2026 GMT
Not After : May 25 08:52:48 2027 GMT
Subject: CN=6EC02CBBAED2A2F00C85BFB93BF58E3BEBB5912C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b0:d5:7a:c7:78:95:1a:78:d3:27:54:0f:a4:
99:2a:a8:72:7c:fc:53:68:ad:32:3d:9c:0e:4c:f2:
01:65:a8:75:eb:11:fc:24:27:9b:1d:fc:a9:b2:0d:
71:d2:59:26:d8:0e:bc:d7:5a:8b:6d:04:f6:5f:69:
be:4d:3a:cf:c6:9a:9a:bd:17:f2:b1:b5:47:29:ae:
f8:6e:2d:57:55:3d:13:c8:90:0b:8c:6a:68:2f:32:
21:6f:e3:17:cf:3a:a6:c5:fc:8f:c9:66:ac:61:fc:
13:7c:37:52:0a:04:36:6c:0f:1c:bb:af:10:a9:c9:
56:50:10:0a:02:82:0e:be:d0:a5:63:fb:29:28:e4:
31:9c:8a:74:ac:f0:6b:56:3a:25:b1:7a:30:46:09:
37:1a:0b:3f:e2:07:02:37:27:15:f9:64:ce:87:a6:
d7:8d:56:95:a1:66:21:be:7b:ae:ff:14:0b:e3:1d:
d0:ee:b4:c7:07:91:3c:e1:e4:89:54:21:15:cf:a3:
a6:7c:b4:63:b0:7d:16:38:76:39:c3:a4:95:3c:6b:
00:ec:e8:2a:a3:3d:c9:89:95:46:9b:bc:fc:1b:c3:
8f:75:c7:32:e3:66:90:d7:f7:30:74:69:af:59:6f:
9c:43:0b:6b:9a:1c:ba:e6:c7:83:b0:d9:31:6c:03:
79:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:C0:2C:BB:AE:D2:A2:F0:0C:85:BF:B9:3B:F5:8E:3B:EB:B5:91:2C
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146481.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aef7::/32
Signature Algorithm: sha256WithRSAEncryption
55:3f:ad:81:05:a2:8c:02:3e:04:8f:82:ff:fd:46:bd:05:2f:
dd:a3:32:11:d4:ce:cb:2a:c8:91:96:d0:d2:9a:85:44:cb:f4:
9b:95:cb:24:ac:59:a1:d9:c3:44:18:61:31:ce:e2:91:74:11:
46:5d:6a:41:f4:31:c2:c7:5e:cd:b4:c2:5c:2c:7b:87:ca:08:
24:83:78:ed:22:dd:66:31:c1:db:7e:ee:13:52:84:43:72:db:
ae:9d:5e:8e:ef:7a:f0:20:0c:83:55:4e:86:9a:52:d2:9c:ac:
bb:77:f3:33:62:0f:69:67:b1:23:72:bc:42:84:17:95:bd:a9:
54:1f:ea:ac:3b:1f:68:50:8a:f0:69:8a:14:8b:9d:3d:7a:e5:
80:d5:f1:1c:b9:d7:87:05:b0:f9:85:59:c6:32:4a:52:bb:50:
ba:42:ac:87:38:69:9a:bc:f9:9c:d3:81:4e:90:a7:48:cc:01:
63:32:f8:7a:75:b4:e0:db:64:87:f2:42:1a:8b:08:7d:5d:b3:
a1:bc:09:40:18:d2:d9:5e:c5:d8:9a:48:08:69:45:e1:04:f2:
5a:7f:70:f8:ef:01:fd:fe:40:dd:52:f6:43:36:f2:0e:dc:65:
31:78:d2:d9:64:fb:65:37:79:05:27:b1:73:38:c6:ee:2d:ab:
24:32:5e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:41:14 2026 by rpki-client