Route Origin Authorization
$ rpki-client -vvf rsync.fiti.net.cn/repo/fiti-sub002/0/AS146503.roa
File: AS146503.roa (raw, json)
Hash identifier: MueGiXDOweiJnwU0PB+ikqKkMzHwtx6TbVUNGHFkPys=
Subject key identifier: D8:59:DB:69:B5:21:99:1D:0A:FD:18:25:55:3D:D0:1D:3E:E3:45:26
Certificate issuer: /CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Certificate serial: 423EF9B776769975B33DEC85E47F58DF211B798A
Authority key identifier: 57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
Authority info access: rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject info access: rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146503.roa
Signing time: Mon 25 May 2026 06:28:41 +0000
ROA not before: Mon 25 May 2026 06:23:41 +0000
ROA not after: Mon 24 May 2027 06:28:41 +0000
asID: 146503
IP address blocks: 240a:af0d::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
42:3e:f9:b7:76:76:99:75:b3:3d:ec:85:e4:7f:58:df:21:1b:79:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57B973F8727F1165368D1DA3F1858FD7660A4960
Validity
Not Before: May 25 06:23:41 2026 GMT
Not After : May 24 06:28:41 2027 GMT
Subject: CN=D859DB69B521991D0AFD1825553DD01D3EE34526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b5:00:87:de:55:af:0a:fc:ce:3d:e2:e6:4a:
92:93:b5:43:2e:5f:24:8d:21:88:93:21:17:0c:50:
a0:89:b9:0a:88:ff:fd:e8:f9:c0:31:34:76:ed:8d:
15:f2:6b:23:23:e0:27:6c:20:fb:16:ae:c7:df:74:
f2:81:3d:f9:7d:fa:f8:c4:48:9d:cc:92:8e:ae:6a:
fb:ef:92:14:39:61:97:d0:5f:3a:94:06:d5:9f:da:
06:19:f7:ec:6b:7e:ae:ec:0f:06:66:ed:3d:07:0c:
15:ea:8c:5b:18:96:09:16:6a:8a:83:b3:a6:1f:e1:
1b:4d:03:5c:c6:70:22:00:b5:10:4b:7a:5c:ad:80:
71:02:0d:8b:4c:65:14:45:1b:97:34:cd:6a:b4:4c:
11:23:84:bf:c8:ac:3e:1e:54:e4:28:13:17:73:fa:
28:da:0a:c2:1c:19:38:c6:c7:20:35:70:0a:ca:b3:
b9:aa:3a:e0:46:25:77:bc:09:f2:8a:4c:49:ea:d4:
a2:d3:a6:64:84:c3:b4:e8:7b:0a:7c:f3:55:f3:67:
91:ea:1d:9d:15:4d:ab:08:89:f5:e0:8c:02:a6:a9:
58:db:2d:ce:ae:22:05:a2:af:58:6a:eb:fc:a2:e5:
5b:cd:e6:44:25:d7:26:ae:63:d8:5b:b8:ca:03:a1:
0a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:59:DB:69:B5:21:99:1D:0A:FD:18:25:55:3D:D0:1D:3E:E3:45:26
X509v3 Authority Key Identifier:
keyid:57:B9:73:F8:72:7F:11:65:36:8D:1D:A3:F1:85:8F:D7:66:0A:49:60
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/57B973F8727F1165368D1DA3F1858FD7660A4960.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cernet.net/repo/cernet/0/57B973F8727F1165368D1DA3F1858FD7660A4960.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.fiti.net.cn/repo/fiti-sub002/0/AS146503.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
240a:af0d::/32
Signature Algorithm: sha256WithRSAEncryption
3f:a9:f4:13:8f:8f:07:42:3e:a8:8d:c8:d6:30:ba:72:f4:ed:
70:3f:0e:31:f9:7e:ba:a3:77:90:15:b2:c8:d8:0f:b5:c7:22:
6b:b3:b5:a7:07:8c:11:93:56:fa:6c:60:9b:48:c4:28:68:28:
fb:88:31:54:24:9c:be:ce:f8:b8:0a:6a:f4:c6:74:2b:2e:fb:
77:31:da:21:91:15:88:30:58:04:5e:a9:b1:3a:67:e0:c2:93:
0d:b8:4b:54:1b:9a:d5:fb:6b:e9:7a:43:a7:47:8d:a3:94:9e:
bd:a8:f9:2e:e4:6d:2a:23:b0:d2:a9:88:a0:fa:d9:72:9f:e1:
f6:12:ff:e8:29:09:10:cd:6c:f1:5a:fc:23:24:b7:ca:8c:d8:
e0:33:4d:7b:1b:9b:d9:53:63:da:77:38:96:d3:ba:d5:6f:ae:
aa:5e:b8:c6:1e:60:88:9b:b7:bd:41:a3:e5:0c:d0:d7:04:d4:
47:c0:30:fd:a7:2b:6b:e3:b6:3a:88:7b:66:dc:20:09:ed:1c:
23:94:2a:12:b8:06:a6:de:e6:04:26:04:dd:3a:40:d4:fa:ad:
d1:50:db:b5:69:d0:cb:44:66:1a:0c:a5:83:91:6d:71:02:9e:
f3:69:39:53:81:4a:87:fa:b7:9a:1e:dd:3c:4e:1c:b8:ad:3d:
e3:ae:4b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:40:44 2026 by rpki-client