Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146483.roa
File: AS146483.roa (raw, json)
Hash identifier: lzOsLsIXm1iCq0BNKKoDmrrn0z5ObvWJ60wdnbPvD3o=
Subject key identifier: 48:4D:6B:DE:7D:2E:DD:5D:C8:BB:55:C0:78:AD:9C:74:92:CE:6A:F0
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 373970B17F41E5BFFBD62920610C76DFDF0384
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146483.roa
Signing time: Mon 25 May 2026 03:19:07 +0000
ROA not before: Mon 25 May 2026 03:14:07 +0000
ROA not after: Mon 24 May 2027 03:19:07 +0000
asID: 146483
IP address blocks: 240a:aef9::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
37:39:70:b1:7f:41:e5:bf:fb:d6:29:20:61:0c:76:df:df:03:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 03:14:07 2026 GMT
Not After : May 24 03:19:07 2027 GMT
Subject: CN=484D6BDE7D2EDD5DC8BB55C078AD9C7492CE6AF0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:dd:79:60:20:ee:c4:c1:d6:9b:c3:e8:17:82:
98:71:3e:d8:fc:0f:3d:52:ec:30:ee:88:07:09:30:
aa:93:85:f9:c3:10:dc:1c:3d:72:ee:48:3c:6e:c7:
b0:0d:16:38:68:02:9e:b2:0d:34:5e:8d:1f:47:2a:
57:b1:4e:29:8b:80:dd:0f:54:ad:a6:75:91:85:48:
11:b1:f0:23:50:28:82:a6:a1:09:09:20:0e:a4:5b:
a5:e1:d1:94:7a:b1:53:8e:cf:e6:d6:8d:a2:a6:31:
e9:35:fb:4c:8f:2e:c4:02:2c:02:b0:a6:d0:70:9b:
cf:ea:10:7b:ac:29:e2:6c:55:53:94:a6:c5:5c:b6:
6f:47:e8:1c:20:50:cc:c4:b3:f8:dd:5d:fe:1d:9e:
a3:14:e6:b9:ba:08:21:50:af:71:7e:d0:af:8d:6d:
d1:75:92:29:a4:19:85:fc:2a:50:2c:08:f1:e6:05:
dc:d4:58:2e:55:96:8f:d8:3d:cb:21:f9:2e:02:b2:
b5:64:cc:87:76:c1:2e:82:73:af:fb:8d:d1:eb:40:
00:4f:98:eb:e2:87:87:c1:5b:51:7c:5c:a7:cb:bc:
57:c0:e1:13:cb:bd:11:7b:bc:3f:65:fd:69:2d:e7:
f9:10:43:2f:34:ee:5b:86:68:a8:d5:5a:b9:96:82:
7e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:4D:6B:DE:7D:2E:DD:5D:C8:BB:55:C0:78:AD:9C:74:92:CE:6A:F0
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146483.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aef9::/32
Signature Algorithm: sha256WithRSAEncryption
27:bb:58:0f:fb:a1:09:c5:66:e5:55:8a:33:fa:62:0d:9b:cc:
b4:86:27:16:22:44:e5:38:cb:a1:b0:c8:a5:91:1a:f5:0e:d2:
12:ca:0b:1e:6f:15:58:7e:67:c0:76:76:e2:da:d8:ac:15:76:
6b:78:e9:29:6c:4d:ed:eb:47:da:e1:bd:0d:2f:10:bb:43:a1:
ad:9f:03:9a:0b:55:d2:69:51:a9:01:04:75:6d:1b:de:35:b1:
3b:89:d2:14:54:38:13:46:f8:6c:d8:8d:50:11:50:2e:f1:5f:
75:10:85:96:4e:73:ed:32:8e:c5:1a:a7:72:87:60:98:66:2c:
2f:15:1a:2f:93:4f:e9:c3:70:67:84:a8:55:c5:20:7a:74:12:
6f:d6:f4:5e:e6:2c:a8:c3:2c:9e:80:e9:cf:3f:cf:a8:c5:22:
b3:9e:df:47:ee:90:9e:59:c8:86:21:a4:35:db:3a:d7:75:88:
30:45:f8:de:49:3f:ad:d9:56:c2:ef:89:17:f3:ac:8b:cc:04:
fa:f6:d8:d6:24:76:4a:c1:33:70:10:c3:6b:c3:9e:b9:c8:f0:
36:f9:0e:b5:fc:f7:da:7e:3f:ef:83:2f:9d:d1:10:26:58:eb:
f1:9f:65:d7:c9:ac:a3:f3:47:42:35:cc:71:06:a4:31:bd:e1:
07:df:6b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:48 2026 by rpki-client