Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146499.roa
File: AS146499.roa (raw, json)
Hash identifier: alAlAEOzoWy5uZr5TFhdCl2/IH5DfWbz/Yzb9vZiNUg=
Subject key identifier: 5C:0A:17:E2:6C:7F:91:B8:B1:A6:75:F1:0D:33:F2:00:9A:E8:1D:8D
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 774D2075CAC36DDD5A2EE7BCE69A82A77B0DBA8F
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146499.roa
Signing time: Tue 26 May 2026 08:52:41 +0000
ROA not before: Tue 26 May 2026 08:47:41 +0000
ROA not after: Tue 25 May 2027 08:52:41 +0000
asID: 146499
IP address blocks: 240a:af09::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:4d:20:75:ca:c3:6d:dd:5a:2e:e7:bc:e6:9a:82:a7:7b:0d:ba:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 26 08:47:41 2026 GMT
Not After : May 25 08:52:41 2027 GMT
Subject: CN=5C0A17E26C7F91B8B1A675F10D33F2009AE81D8D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ab:ed:d5:90:ca:2e:3e:ed:e5:7e:20:d7:0a:
5f:5b:cf:90:8d:58:94:f5:d4:a9:90:2d:d2:ca:44:
36:e8:29:4d:ec:7c:f5:60:c5:d1:e2:f4:9e:f1:ce:
ee:42:4b:d5:c2:80:a1:7d:40:a3:87:63:ba:75:48:
8b:ab:42:fe:00:5d:e9:26:71:c8:9e:b0:72:93:9e:
fd:55:66:b3:fa:98:df:3b:15:a5:c5:04:43:02:20:
cd:0a:70:be:80:2e:a0:c3:27:6d:00:2d:3c:9d:6d:
6d:ff:c5:49:18:32:bb:23:9f:eb:27:1f:d7:f4:c3:
54:a6:12:95:ff:35:9f:9e:f5:ce:be:60:cd:fd:66:
1e:c5:b4:a9:dd:07:d1:ea:e9:1e:58:84:52:6c:19:
b9:f9:47:59:7d:18:b2:ca:b1:ba:c6:cc:20:bf:58:
51:e9:0f:2d:5a:3a:f5:53:05:03:ac:1a:0b:ab:24:
85:e6:9e:db:2c:e9:af:ce:4c:43:1e:0b:ae:23:86:
72:eb:ca:c2:ea:7b:3c:bc:a9:1d:ac:71:8c:5b:84:
c1:2e:cc:c1:86:d7:41:58:e5:69:7c:9a:d8:aa:3d:
b5:32:b9:4f:ea:ac:2d:d0:74:f9:33:b4:6f:57:17:
50:ec:f4:d4:5b:95:86:ff:b2:2d:91:0f:9a:34:f8:
03:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:0A:17:E2:6C:7F:91:B8:B1:A6:75:F1:0D:33:F2:00:9A:E8:1D:8D
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146499.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af09::/32
Signature Algorithm: sha256WithRSAEncryption
1d:eb:f1:2d:91:ea:ec:5e:02:a2:66:83:be:4c:a8:2f:76:9a:
8d:fb:9d:09:3a:52:a5:21:95:c7:fa:bd:d9:b6:44:a4:a7:d4:
73:98:8c:9e:ab:99:39:bf:ca:84:5f:e6:3b:8d:69:f9:07:3f:
f4:6f:28:15:2a:7e:be:df:44:44:d5:90:78:58:4b:df:00:34:
95:98:95:3f:91:75:1f:d0:e4:d8:1e:90:10:d5:10:d2:3a:cb:
38:18:44:07:43:16:b5:d1:a8:22:aa:51:56:bb:39:75:2a:e6:
f0:99:ee:83:dc:96:dd:e5:59:69:0a:2c:33:c5:99:e8:a4:e5:
24:da:ec:c7:60:83:1f:52:85:dd:dd:73:31:48:f9:95:e4:d5:
9a:d4:01:ee:40:30:6a:e9:90:1e:54:30:37:2f:56:ec:79:d1:
6c:77:e9:6b:c5:e2:49:89:b6:45:e0:3b:17:e9:42:ac:3a:d4:
1b:c5:32:be:ce:8d:04:28:f6:0f:09:d0:a4:ec:aa:6f:50:48:
af:bc:32:6b:40:7e:e7:0e:c4:87:81:82:c0:89:45:31:b6:8a:
6d:44:13:3e:bf:c9:b6:ab:84:b7:c9:cb:d5:26:dc:e7:8f:c7:
15:b9:b8:6a:8c:ca:bd:a9:1f:84:43:85:3c:cd:1c:36:53:2d:
ba:56:0d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:47 2026 by rpki-client