Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146498.roa
File: AS146498.roa (raw, json)
Hash identifier: N36d3z0aLtRZ8nurhPeejpwoRm46NUAC7gfggK3dJZ0=
Subject key identifier: E9:AA:43:A3:7B:E5:0F:0E:93:9C:2A:0D:2D:42:19:30:BA:5A:E1:B6
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 56EE0E4940EEE22BBFBEDE11BF92107B10CB5FFA
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146498.roa
Signing time: Tue 26 May 2026 02:35:23 +0000
ROA not before: Tue 26 May 2026 02:30:23 +0000
ROA not after: Tue 25 May 2027 02:35:23 +0000
asID: 146498
IP address blocks: 240a:af08::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:ee:0e:49:40:ee:e2:2b:bf:be:de:11:bf:92:10:7b:10:cb:5f:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 02:30:23 2026 GMT
Not After : May 25 02:35:23 2027 GMT
Subject: CN=E9AA43A37BE50F0E939C2A0D2D421930BA5AE1B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:fb:ac:ef:49:0f:9a:08:a8:5e:21:d0:70:1e:
d4:90:bb:0d:70:9c:41:a8:38:7a:31:f0:ed:db:64:
be:09:8f:d8:6b:6b:1b:30:66:9c:27:f0:a2:98:7d:
c8:e7:be:3a:47:af:9c:0f:1f:cf:f9:e5:4f:97:70:
49:e5:e7:31:48:ca:51:73:08:96:a6:c2:c3:0b:a9:
cf:37:c4:10:b2:97:f0:e3:9d:98:61:d6:64:7b:19:
d6:04:5f:ad:f4:eb:db:2d:fb:2e:b8:40:ca:f1:d8:
84:44:82:71:a8:83:73:97:00:a4:81:b9:b7:d5:de:
7e:b3:00:82:8b:83:32:cd:34:2d:d4:0a:38:cf:0c:
5d:ea:e0:41:f7:c2:59:d0:2b:83:0e:46:30:60:3d:
c3:e3:94:0b:7f:33:51:94:aa:72:2a:35:e0:10:a4:
3e:0e:d0:df:cc:7b:3a:d7:ee:88:3e:a1:cf:c7:7c:
f7:b0:99:8a:0f:38:34:98:1f:c6:a3:b6:83:29:f3:
39:85:e7:97:46:59:9c:f5:c2:eb:36:3c:10:25:37:
54:bc:3c:1c:d1:82:dd:c0:15:da:fc:d1:69:4e:6c:
af:04:a7:f6:51:11:48:fd:e5:42:d5:d7:9d:61:a5:
c5:3e:24:79:9a:22:8e:22:c2:96:6e:5f:46:d8:47:
8c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:AA:43:A3:7B:E5:0F:0E:93:9C:2A:0D:2D:42:19:30:BA:5A:E1:B6
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146498.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af08::/32
Signature Algorithm: sha256WithRSAEncryption
5a:29:21:43:26:74:92:2f:06:eb:4b:ed:03:f2:4b:e4:e0:4a:
c3:4e:3f:b6:84:9e:df:e1:ed:19:4b:6c:e6:9d:be:40:1c:0e:
2e:8b:fa:5a:de:28:b8:4b:96:02:2a:fc:81:1a:6b:2e:af:47:
7f:eb:7a:7b:01:a5:e8:9b:35:9c:12:2b:ff:66:08:22:56:a5:
03:db:7e:99:be:f5:d5:53:f3:aa:14:2e:ea:10:9d:22:a6:99:
b8:0f:43:19:02:95:ac:55:6b:a6:a5:97:89:8e:3e:ca:1a:1f:
b3:f6:c7:8f:64:6a:d2:96:97:20:21:de:60:45:80:9d:02:20:
93:50:0e:80:88:a1:43:67:96:3a:f1:7d:8f:07:ad:ab:09:5c:
65:33:dc:5c:61:d4:c8:d1:36:7a:3b:a6:21:b6:c5:e0:b3:2d:
29:9a:17:4f:ca:b5:0f:b0:7d:b5:b4:6d:f1:be:ae:45:81:ee:
70:23:34:85:17:ec:0a:0d:c7:a7:2c:b9:04:89:0b:ad:ee:92:
b4:a1:f7:a0:6e:e1:37:13:62:00:a8:ba:ff:4b:19:23:cd:8b:
4e:12:34:93:d3:6a:3b:57:28:82:f1:32:fd:79:ce:1e:e2:a2:
dc:bc:01:7e:f4:52:3e:dc:cd:3e:75:16:17:3e:d1:37:89:d6:
40:48:50:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 10:50:42 2026 by rpki-client