Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146493.roa
File: AS146493.roa (raw, json)
Hash identifier: ZPxGimX+RMMicwmSOQQqPLMqPTeS4i9TEVyz5keon/w=
Subject key identifier: 6D:1D:7C:86:26:A5:8D:2E:F9:D1:4A:05:40:94:E7:E3:72:6C:2C:2B
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 0322BA536DB52FD39A9ADA00B470070692BBC5C1
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146493.roa
Signing time: Tue 26 May 2026 01:13:00 +0000
ROA not before: Tue 26 May 2026 01:08:00 +0000
ROA not after: Tue 25 May 2027 01:13:00 +0000
asID: 146493
IP address blocks: 240a:af03::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
03:22:ba:53:6d:b5:2f:d3:9a:9a:da:00:b4:70:07:06:92:bb:c5:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 01:08:00 2026 GMT
Not After : May 25 01:13:00 2027 GMT
Subject: CN=6D1D7C8626A58D2EF9D14A054094E7E3726C2C2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:04:bf:71:c8:f6:50:5d:a0:15:ec:7b:9f:0f:
d8:1b:1d:85:5a:4c:18:e2:04:af:d8:8c:64:58:25:
7b:19:6b:a6:d0:16:b4:e7:64:11:cb:e2:ac:15:01:
2b:5d:a2:31:b6:02:6c:a0:7a:19:a7:80:c7:31:28:
6d:12:95:25:fd:d8:5a:3f:78:9d:14:d2:52:6a:36:
fa:2f:c2:f3:19:a0:be:82:dd:14:86:4c:c6:32:b4:
7a:e9:46:fd:82:bd:03:c5:7a:36:53:b6:af:56:92:
d0:3a:96:b8:8c:e7:69:61:eb:fc:ec:29:a4:ce:02:
90:74:fd:0c:df:48:94:0a:90:fa:a7:50:56:13:29:
d9:37:80:e9:b2:ec:0c:57:1e:ae:14:2b:7d:a0:1d:
e5:4e:bd:14:c3:03:53:e1:46:53:20:7c:25:4d:14:
2d:52:6d:30:07:12:aa:98:bf:8c:1b:5f:e3:b5:31:
10:ef:df:89:61:25:e9:f0:8e:ed:28:08:11:30:c2:
d7:43:9e:3d:96:56:d4:91:29:01:dc:60:6a:ef:0c:
01:bd:82:ab:e1:23:7b:b0:67:f6:9e:12:be:c8:3c:
22:5d:97:b0:bb:43:e6:59:16:f4:00:af:58:cf:bb:
de:14:bb:4e:fb:2d:8a:a9:2d:02:f6:0b:eb:15:a2:
38:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:1D:7C:86:26:A5:8D:2E:F9:D1:4A:05:40:94:E7:E3:72:6C:2C:2B
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146493.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af03::/32
Signature Algorithm: sha256WithRSAEncryption
b0:93:c9:39:48:46:97:1e:e0:42:61:88:ce:b6:62:44:b1:95:
61:ed:71:8c:5e:0e:34:3d:dc:2e:70:85:7f:1f:07:55:71:00:
de:ce:90:e7:82:ee:4d:f8:a0:1f:38:fc:9d:bb:dd:4f:28:9e:
9d:e1:e3:05:d1:f7:32:68:f5:08:64:64:c6:e8:4b:3c:dd:06:
d3:c2:5c:7c:5b:5c:8c:ac:6a:ae:d8:b1:08:17:3c:7e:58:62:
98:8c:a4:85:6e:98:68:6f:b4:97:75:f7:20:8e:6e:68:67:4b:
77:2f:d8:b6:af:43:2b:85:71:3d:9a:6c:43:1e:8d:84:26:f5:
96:09:84:ef:d7:df:81:18:03:7e:fa:dc:0b:62:0f:1a:9c:d7:
5f:5c:0a:04:62:9e:12:0a:9a:8d:c9:e1:32:6b:4d:7f:ab:dd:
4a:26:d6:ff:f8:19:45:d0:8a:15:b5:a2:dc:f2:f7:8b:5d:4f:
b1:21:fb:34:f9:4d:88:0b:dc:a0:f0:e3:7e:83:b1:95:78:14:
42:16:29:cd:08:12:47:68:cc:54:bc:df:1a:77:f4:7c:e7:fa:
d6:64:dc:0e:22:a9:d2:cd:ec:cc:87:c8:2b:e2:97:05:a8:40:
91:0c:c0:8e:14:e9:9b:8d:ae:08:b3:61:a8:53:92:ea:35:ba:
91:12:66:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:58 2026 by rpki-client