Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146500.roa
File: AS146500.roa (raw, json)
Hash identifier: MuOaNfphZBZdW9EWsf3SMjL6UfRjhOcQQ6HAn/DYY3U=
Subject key identifier: D0:18:18:D5:AA:A6:A9:D2:DD:31:54:DB:91:90:30:4C:02:C7:9E:A4
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 139774284290047EC8E1C82080E11C0E64B93FE4
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146500.roa
Signing time: Mon 25 May 2026 06:28:19 +0000
ROA not before: Mon 25 May 2026 06:23:19 +0000
ROA not after: Mon 24 May 2027 06:28:19 +0000
asID: 146500
IP address blocks: 240a:af0a::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:97:74:28:42:90:04:7e:c8:e1:c8:20:80:e1:1c:0e:64:b9:3f:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:19 2026 GMT
Not After : May 24 06:28:19 2027 GMT
Subject: CN=D01818D5AAA6A9D2DD3154DB9190304C02C79EA4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:95:96:87:96:34:34:66:31:5c:21:e1:b2:c7:
6a:0b:83:b1:36:78:07:8b:63:d8:a7:c6:c4:8e:a3:
e5:84:d7:34:1c:02:5d:49:22:4d:e5:7d:86:40:15:
0f:7f:2f:17:3e:7a:4c:3f:40:8e:ae:4f:08:b7:fc:
15:19:09:78:a5:4e:c7:2e:9a:07:b3:b0:13:09:c9:
39:5a:90:bb:7f:fe:48:e0:7d:39:c7:21:45:a7:23:
cd:36:c0:f4:2d:85:63:db:e0:fb:65:a7:fc:a5:a2:
51:86:22:81:4b:e4:9d:61:bd:88:b2:1f:d3:ad:ee:
c9:1d:e8:3a:c8:d3:5e:04:1d:97:2b:d4:7b:ea:1b:
1c:e7:48:66:b2:7b:69:4d:64:4d:77:b6:26:4e:f2:
32:98:15:b1:b4:3b:f9:cd:0e:3b:dd:78:8e:30:54:
6a:9a:68:01:16:67:df:41:86:ba:a2:e3:22:f1:3d:
72:73:cf:42:a5:a1:db:4c:8b:58:08:1f:53:8b:b4:
78:a0:35:61:5a:87:9c:4c:d5:03:37:38:68:64:4f:
36:4f:f7:fe:1f:56:06:f5:5c:b4:8d:d1:1a:c4:53:
65:e2:b0:74:3c:b5:cb:60:a3:94:76:9d:1e:17:ab:
1e:e6:25:62:af:cb:f2:9e:13:dc:e1:2f:4c:06:0f:
0f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:18:18:D5:AA:A6:A9:D2:DD:31:54:DB:91:90:30:4C:02:C7:9E:A4
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146500.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af0a::/32
Signature Algorithm: sha256WithRSAEncryption
95:e5:2d:09:54:c2:5c:44:40:f7:1f:14:86:a5:bb:5a:b2:c7:
5b:aa:a9:d1:4d:ef:11:10:75:0f:98:a4:1f:04:fb:06:4d:c9:
bb:28:39:1a:47:82:48:64:00:d4:5d:76:51:b3:79:29:aa:30:
24:7a:13:9c:ab:57:32:a1:ee:86:60:99:9d:4d:88:9b:07:e5:
17:4a:46:da:1f:b7:7a:4f:a2:81:3d:6c:88:3d:9d:b5:8c:62:
68:d9:3e:15:1c:17:d3:f8:08:b8:29:1b:49:e9:36:07:ab:e8:
9d:53:82:8f:b4:05:5e:e0:2e:5d:4f:91:ac:b2:53:fe:e7:05:
ef:a7:8e:85:57:de:b2:9a:c5:f7:f7:75:99:46:64:2c:f0:f5:
89:1a:fe:5a:e3:45:9a:81:fe:ce:80:26:cf:6c:7c:c9:b2:bf:
be:21:43:85:cc:4c:8e:af:88:52:22:9f:65:0e:ea:b2:b5:a2:
e3:91:d4:80:e7:d6:58:0b:88:68:ec:9f:71:d2:b9:16:06:65:
0c:2a:4f:12:c6:5e:2e:98:3d:33:9d:81:0c:7a:e1:a2:ce:cc:
a0:2f:d7:5f:4c:28:97:8a:16:f6:ca:25:34:c7:fc:b6:49:af:
f4:e5:86:ec:bf:73:24:37:e0:0f:88:7a:01:b7:19:5f:76:45:
a7:6b:76:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:49:49 2026 by rpki-client