Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146490.roa
File: AS146490.roa (raw, json)
Hash identifier: f4AgVafJHaRnk9mC87lRZY0HzkenjnsEB+pvvt1uq0k=
Subject key identifier: 53:E4:F6:D6:8E:F2:7A:9B:CF:70:83:52:53:FC:86:21:0E:73:F4:C7
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 55473D325D1BE4F516F157B6DB18B2D34EE9B80F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146490.roa
Signing time: Fri 22 May 2026 07:32:24 +0000
ROA not before: Fri 22 May 2026 07:27:24 +0000
ROA not after: Fri 21 May 2027 07:32:24 +0000
asID: 146490
IP address blocks: 240a:af00::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:47:3d:32:5d:1b:e4:f5:16:f1:57:b6:db:18:b2:d3:4e:e9:b8:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 22 07:27:24 2026 GMT
Not After : May 21 07:32:24 2027 GMT
Subject: CN=53E4F6D68EF27A9BCF70835253FC86210E73F4C7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:54:dd:b0:e2:f6:be:d4:7e:9b:ac:06:97:6b:
55:70:c6:e2:8a:2c:5f:31:73:90:8c:86:56:cb:82:
b6:53:2e:fe:d5:c0:82:0b:51:50:3b:46:56:47:a0:
73:c3:7f:f7:62:ee:a6:e6:ba:8c:f8:a7:83:d1:72:
3b:78:65:d1:e5:92:02:b4:34:b4:cd:4a:af:f4:e4:
74:25:fe:a6:22:5f:af:ac:73:7c:45:96:e9:1b:50:
f5:40:b0:35:84:2e:02:df:63:cf:2d:73:db:f5:84:
88:3c:54:06:91:7a:dd:32:a3:c6:6a:b3:c8:30:76:
e9:13:58:98:89:bd:e6:9d:72:c6:44:84:f4:9f:5e:
3b:1b:c3:be:32:26:b6:41:87:45:99:e3:53:7c:4f:
2f:38:a7:f7:46:51:67:81:17:ae:4d:21:d7:a3:65:
0d:d1:30:f9:0c:d9:e5:17:2b:7f:21:ad:e9:f5:bc:
1d:11:73:39:95:c6:c3:0e:31:e0:a0:a2:73:cf:04:
9c:f9:f6:3a:21:01:2f:7b:55:92:79:b7:51:2f:5e:
89:20:40:b2:8b:be:15:c6:38:c3:45:80:41:60:91:
f6:14:a9:ad:3e:64:a2:8f:1a:26:e4:51:3a:10:9a:
ff:7a:71:30:95:5b:af:0c:be:05:13:ec:7d:90:90:
26:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:E4:F6:D6:8E:F2:7A:9B:CF:70:83:52:53:FC:86:21:0E:73:F4:C7
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146490.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af00::/32
Signature Algorithm: sha256WithRSAEncryption
3d:ac:0b:32:78:34:f2:25:37:a6:37:55:7f:28:fe:89:9d:70:
2b:3f:aa:ca:09:2e:e9:92:59:4e:1b:fb:92:9f:ae:1b:99:9f:
f6:a7:8e:7e:4b:f4:95:00:d4:d7:09:99:62:43:e1:91:b0:92:
2b:be:6f:50:03:36:c1:fd:d4:af:9a:b2:20:1b:49:67:fc:4a:
2c:db:5b:ed:aa:a8:68:37:04:cc:2e:93:1d:a4:b7:34:38:7e:
a7:7b:24:95:6b:f5:06:a1:28:e5:ff:c5:d2:eb:a2:d2:21:2a:
73:bb:2c:d5:0c:c7:95:51:9c:8b:7a:e5:82:3f:85:21:49:23:
39:36:46:a4:21:84:67:a8:85:f8:64:d1:d0:50:7a:5d:83:8f:
a6:ec:76:a5:db:e2:9d:91:30:ae:3a:d1:b5:86:4f:cc:52:20:
d5:b2:41:6a:96:04:36:cf:a8:f6:81:22:f6:88:11:4c:6e:2e:
34:f4:eb:b6:85:1c:ee:91:db:6c:9f:de:d8:bc:d6:7c:3c:18:
8c:b7:3c:7c:98:08:77:e9:69:6e:1b:ee:8e:92:f5:92:43:40:
fd:ee:00:50:c2:7e:bc:6d:1e:a7:77:1d:45:2e:38:07:df:32:
a2:8a:3c:61:8e:2f:cf:4e:84:ed:79:30:86:68:4c:1e:62:1d:
d2:8f:29:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:36 2026 by rpki-client