Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146485.roa
File: AS146485.roa (raw, json)
Hash identifier: aHOQDgOFx+D+rZ3//Fwv75TYVBGbVNokg16k22uyXb4=
Subject key identifier: 63:B3:1D:AB:73:A4:AE:87:7E:44:0A:A0:0D:FB:63:87:44:18:84:A5
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 040D18764D3E7058F3EFCAED7C05DB44F31C65A6
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146485.roa
Signing time: Mon 25 May 2026 02:22:38 +0000
ROA not before: Mon 25 May 2026 02:17:38 +0000
ROA not after: Mon 24 May 2027 02:22:38 +0000
asID: 146485
IP address blocks: 240a:aefb::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
04:0d:18:76:4d:3e:70:58:f3:ef:ca:ed:7c:05:db:44:f3:1c:65:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:38 2026 GMT
Not After : May 24 02:22:38 2027 GMT
Subject: CN=63B31DAB73A4AE877E440AA00DFB6387441884A5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2a:40:06:b2:07:e6:0a:57:8e:a0:f8:bd:99:
b0:88:6a:a1:ce:b1:79:af:fa:57:27:77:6a:68:c3:
44:d5:68:04:4a:82:6a:cd:f1:2e:32:3b:ce:15:0d:
e5:94:61:19:7d:a8:73:7b:87:b2:98:bf:8d:d6:de:
4a:f5:a8:93:2a:5c:94:d4:ec:d6:09:96:c1:76:1f:
a3:19:95:c0:72:6c:f7:1f:38:11:d6:69:0f:aa:78:
4d:f2:de:08:f3:0d:ac:4b:1f:79:c0:02:c6:aa:f2:
1a:23:88:73:91:75:da:36:52:db:f8:ff:ea:be:a0:
24:9a:5e:3a:29:5f:8a:64:93:98:5d:e2:84:b7:53:
6b:ec:81:b0:a3:e5:59:56:69:9e:14:9b:77:ed:a5:
91:d0:50:20:8c:88:0c:92:8c:66:89:90:d9:ff:0e:
c3:65:6a:9c:4f:3f:67:9f:28:40:c6:44:95:59:1e:
20:5f:47:ed:cf:50:59:53:93:08:e9:4c:f8:f5:5b:
62:e1:54:f2:95:2e:5e:2e:29:d9:99:79:20:0c:84:
fc:32:0f:1b:f8:8c:06:2f:af:b3:d0:6e:3c:38:1f:
68:49:74:8e:74:44:fb:ab:c5:ff:db:58:36:e1:65:
4f:ef:46:e7:e3:6c:4a:67:0d:73:74:68:5b:f1:5e:
90:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:B3:1D:AB:73:A4:AE:87:7E:44:0A:A0:0D:FB:63:87:44:18:84:A5
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146485.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:aefb::/32
Signature Algorithm: sha256WithRSAEncryption
52:8b:ea:f1:ce:c1:7c:fd:e3:26:13:08:b5:d8:62:83:a0:33:
0a:96:d6:70:46:97:1b:12:c8:24:3d:c2:3d:46:83:dd:e1:79:
4a:bb:2b:0e:33:32:33:b3:fa:52:8d:32:9a:0e:cf:e1:da:81:
77:7f:db:d8:10:26:14:df:c2:07:59:d0:11:a6:92:db:8a:4c:
b4:e1:d0:ec:ff:1f:21:c6:77:c7:e6:eb:c8:cc:54:31:3c:ee:
9b:b4:91:28:a2:3b:c7:bb:48:93:00:5d:f3:13:a4:a7:a2:37:
f2:f0:14:46:69:97:f7:89:9c:b5:b0:04:01:2f:d6:45:07:de:
4b:e1:9d:d8:52:a8:82:0d:02:9d:e3:a8:d8:d7:e4:4a:2a:98:
4e:34:18:3a:12:56:5b:5d:2c:a2:a3:91:1e:55:2d:01:6a:a8:
07:2f:ed:9d:56:d2:8c:25:4d:14:b2:ec:0f:c1:8e:38:df:3c:
f4:05:01:e2:3a:40:be:f6:e8:38:8b:49:1e:23:47:0a:31:63:
8d:07:d7:16:06:24:fb:c1:64:a1:4f:87:0e:07:87:3f:27:e1:
99:ef:e1:04:26:ed:f6:72:d3:d8:ea:f9:f4:bb:39:21:6d:9e:
b4:c0:11:33:64:c6:2e:e3:b2:ca:b1:a7:23:88:e9:9d:3c:f7:
35:81:f9:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:52 2026 by rpki-client