Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146491.roa
File: AS146491.roa (raw, json)
Hash identifier: 8DraCII8pKC5nYy9iZ0kkOoXzgBKCSVo8YtaKgSnCSA=
Subject key identifier: DC:F8:AE:47:78:65:33:FD:90:7F:C3:E2:E3:66:CD:1F:1F:97:1A:24
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 4392088E6B99C4FBC0DE036EFE7FD3FD8DCA9551
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146491.roa
Signing time: Tue 26 May 2026 06:12:52 +0000
ROA not before: Tue 26 May 2026 06:07:52 +0000
ROA not after: Tue 25 May 2027 06:12:52 +0000
asID: 146491
IP address blocks: 240a:af01::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:92:08:8e:6b:99:c4:fb:c0:de:03:6e:fe:7f:d3:fd:8d:ca:95:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 06:07:52 2026 GMT
Not After : May 25 06:12:52 2027 GMT
Subject: CN=DCF8AE47786533FD907FC3E2E366CD1F1F971A24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f8:5d:21:d2:4a:a8:3f:2a:d0:91:83:bf:c0:
c7:4d:38:fc:2b:10:ce:84:f8:ef:1d:e6:84:f4:62:
61:9b:ed:7b:aa:9c:0c:02:8c:51:ad:c5:bd:6e:82:
df:dd:fb:3e:49:71:e1:20:5b:ab:52:37:8d:7b:09:
63:6f:fc:04:93:2d:a5:89:b1:99:8f:30:b5:b4:10:
48:c2:74:4e:be:99:5a:22:78:4d:99:2f:fc:a8:38:
77:9c:68:4d:43:9a:00:a4:98:dd:ce:3e:bb:c3:00:
d0:dd:64:78:3d:f3:82:17:f7:a0:7e:34:ea:2f:bc:
92:36:18:df:4b:97:c8:e8:57:cf:b1:c4:e9:46:d7:
25:87:3a:2b:62:d5:9b:9a:77:3d:93:f7:b3:04:48:
1f:c3:e7:fe:2d:1d:c6:64:0a:8a:33:63:77:0c:5e:
a1:d4:00:d4:9d:ea:e6:55:e3:2c:15:e6:c1:db:47:
a8:d1:80:6f:5e:42:fe:a2:39:f6:df:08:6a:54:e5:
9e:d2:3e:af:0f:86:ce:90:71:01:47:74:d9:ca:7c:
43:fd:ee:92:71:11:96:04:24:fb:05:31:77:34:03:
28:f5:6b:78:4d:c7:7f:42:ab:70:84:f3:d9:5e:bc:
c2:13:b1:2a:19:b6:13:fd:f4:79:3c:2c:58:33:80:
6a:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F8:AE:47:78:65:33:FD:90:7F:C3:E2:E3:66:CD:1F:1F:97:1A:24
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146491.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af01::/32
Signature Algorithm: sha256WithRSAEncryption
0e:c6:16:10:6d:ba:58:bd:79:98:67:de:74:aa:ba:fc:2b:06:
b2:55:80:f5:dd:d9:54:e3:99:79:d7:25:b1:cf:ab:45:73:bc:
d6:02:42:0d:78:94:cc:5c:7e:4e:ae:3d:a7:7a:6c:4f:17:ef:
45:4f:bf:81:cf:dc:21:26:21:93:31:cf:3e:39:71:50:81:4a:
f9:00:b7:aa:15:59:17:0c:56:25:33:77:7a:0d:87:0b:19:65:
06:6f:28:81:01:2f:c9:a4:52:af:a9:d1:6b:51:af:73:e9:d7:
28:31:f6:ad:02:0c:60:b6:b6:ed:0c:72:cf:d1:81:13:48:38:
44:3e:31:69:ee:e9:0d:31:e7:bf:0e:3a:eb:06:ae:24:20:90:
62:ab:48:38:ce:d7:f6:df:86:61:93:85:10:0a:ee:e1:1c:e4:
8d:4a:92:cc:05:7f:0a:af:d5:e5:a1:cb:eb:bc:58:11:8f:0b:
3d:87:92:da:96:cf:e9:3c:41:e4:ee:12:6e:ee:3c:dc:da:5f:
0e:63:f5:3f:72:f1:53:a8:31:07:30:27:d0:af:83:6a:f3:26:
b7:a0:28:0b:f0:44:ca:f2:3c:a7:04:a5:ea:5c:c9:07:42:01:
4f:7d:b7:70:1f:aa:bb:fc:a3:ae:e2:16:96:ab:aa:78:d7:0a:
ca:ed:f0:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:40 2026 by rpki-client