Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146492.roa
File: AS146492.roa (raw, json)
Hash identifier: InL8jWDm5eOS+GzeUZItHpFc5x9WHjZQw2CubmkZwlU=
Subject key identifier: BC:48:3B:71:E2:53:02:8E:A7:AE:22:1D:6A:A2:88:B5:0B:12:F1:02
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 68E52BE05434AFCE41935C2A7B39A6678755F088
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146492.roa
Signing time: Mon 25 May 2026 02:22:20 +0000
ROA not before: Mon 25 May 2026 02:17:20 +0000
ROA not after: Mon 24 May 2027 02:22:20 +0000
asID: 146492
IP address blocks: 240a:af02::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
68:e5:2b:e0:54:34:af:ce:41:93:5c:2a:7b:39:a6:67:87:55:f0:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 02:17:20 2026 GMT
Not After : May 24 02:22:20 2027 GMT
Subject: CN=BC483B71E253028EA7AE221D6AA288B50B12F102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:04:ac:aa:7b:a5:ba:52:76:e3:06:a0:e3:3b:
b1:a8:3e:4f:cc:94:32:d1:02:78:90:0d:57:0d:b6:
82:17:cd:2c:d1:e0:97:83:87:b7:86:b5:b2:b4:3a:
f1:c9:48:ba:0f:fb:94:3c:e4:3d:0a:86:22:e8:20:
82:a0:af:57:ca:b3:ce:69:19:d5:be:2f:6a:db:ed:
c0:33:6f:48:d0:65:62:48:c7:20:71:53:b5:44:a5:
46:a3:b4:08:9d:1f:e1:b5:09:7f:a8:15:8f:bc:d5:
af:79:7f:10:26:6f:77:31:20:5f:c2:d8:d8:61:e5:
28:6e:4b:0c:1a:f4:ae:b6:e7:07:76:98:b8:b3:5b:
97:08:4d:93:7d:66:11:9b:31:4c:e7:9a:73:27:8c:
6b:fc:c5:2f:66:cb:0b:f8:8e:3a:c2:46:eb:fd:a6:
98:78:c0:34:f0:ff:2f:59:16:3b:3e:47:f5:84:44:
2e:84:58:26:4c:8b:22:78:bd:6f:a1:65:4d:88:5a:
71:df:00:15:3f:69:db:30:53:9b:a3:d0:71:4a:95:
20:65:d0:45:10:2d:97:2d:7a:fd:20:46:3f:a7:53:
58:b7:bd:12:22:d6:53:9b:a2:6b:52:c9:7d:a1:57:
3b:51:7a:34:af:13:e0:c8:7c:16:ad:da:4c:57:06:
d7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:48:3B:71:E2:53:02:8E:A7:AE:22:1D:6A:A2:88:B5:0B:12:F1:02
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146492.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af02::/32
Signature Algorithm: sha256WithRSAEncryption
88:17:b3:e8:0d:32:1b:5a:b1:00:c3:20:b3:7a:ba:1a:b6:f3:
22:4f:55:c0:70:45:2d:5f:fd:55:51:06:67:3a:c5:9b:c0:ef:
92:95:ec:97:c0:c3:1a:6b:c8:27:75:7d:c1:52:af:6e:3f:99:
f4:07:37:af:04:8e:4a:1a:4f:bb:0e:05:4e:9e:30:12:68:93:
3c:29:a2:29:ab:31:83:8c:7a:77:85:29:24:60:80:b8:81:aa:
4c:89:0d:73:f4:3d:6c:f7:83:c9:29:7d:c5:51:84:25:f9:2a:
3f:93:24:aa:b4:f6:78:8c:1b:31:0b:bc:b7:7c:68:70:90:91:
87:cb:f2:a2:97:97:aa:e8:7f:04:77:01:98:d4:64:3d:16:60:
52:24:d1:9c:4e:cd:9e:a1:7f:42:a2:8e:05:7b:db:21:63:c7:
77:63:79:3f:21:d6:38:02:32:ee:d8:15:d7:ed:13:53:7b:9f:
b8:10:8b:91:b7:a7:c7:56:63:20:28:29:7c:18:22:53:63:bc:
d0:b0:ab:ba:11:d3:af:54:84:0f:11:ee:bc:c9:db:3b:4f:c8:
17:68:d2:df:ac:2c:46:7a:86:3d:28:66:2d:16:1f:f3:ed:57:
f8:3b:c8:10:10:32:02:13:54:86:69:a5:90:66:40:3b:34:13:
8b:e1:af:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:32 2026 by rpki-client